Standby DB Alert Log Contains: "kcbztek_populate_tbskey: db key in controlfile and datafile 1 is inconsistent"
(Doc ID 2512024.1)
Last updated on MARCH 12, 2021
Applies to:Advanced Networking Option - Version 184.108.40.206 and later
Information in this document applies to any platform.
The alert log of an 220.127.116.11 Data Guard standby database contains the following after MRP is started:
Managed Standby Recovery not using Real Time Apply
kcbztek_populate_tbskey: db key in controlfile and datafile 1 is inconsistent..
Parallel Media Recovery started with 4 slaves
Sat May 05 23:29:14 2018
Errors in file /oracle/app/oracle/diag/rdbms/mydb/MYDB/trace/MYDB_dbw0_13500696.trc:
ORA-01186: file 1 failed verification tests
ORA-28374: typed master key not found in wallet
File 1 not verified due to error ORA-28374
Trace files on the standby exhibit similar symptoms to those on the primary. The master key ID (mkid) values are identical as well.
Standby trace contains:
TDE was implemented using Fast Offline Encryption, but this was performed improperly for a Data Guard setup. The primary was encrypted first, which is incorrect. The standby should have been encrypted first.
Following this, an attempt was made to "roll back" TDE by closing the wallet and moving it elsewhere.
Finally, a new wallet was created with a brand new master key. (This wallet lacked the original master key for the database.)
The primary experienced "ORA-28374: typed master key not found" errors, caused by rekeying the database after removing the wallet. This led to the same errors on the standby, causing MRP to stop. Following this, the ENCRYPTION_WALLET_PARAMETER was removed from the standby sqlnet.ora. The standby began to produce "kcbztek_populate_tbskey: db key in controlfile and datafile 1 is inconsistent" messages and continued to throw ORA-28374.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document