My Oracle Support Banner

Data Guard & TDE (12c): How To Transport ASM Keystore From Primary To Standby (Doc ID 2521855.1)

Last updated on JANUARY 24, 2020

Applies to:

Advanced Networking Option - Version 12.1.0.2 and later
Information in this document applies to any platform.

Goal

When a primary and standby database use ASM to store the TDE keystore (wallet), additional steps are required to move the keystore from the primary to the standby.  This is because ASM commands cannot be used on TDE keystores (Note 2085607.1).

To properly transport the keys from the primary's ASM keystore to a new standby's empty ASM keystore, one must merge the primary's keys into a new, empty non-ASM filesystem keystore.  This new file is then copied to the standby on a regular filesystem, and then merged into the empty ASM keystore on the standby.

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.