Data Guard & TDE (12c): How To Transport ASM Keystore From Primary To Standby
(Doc ID 2521855.1)
Last updated on JANUARY 24, 2020
Applies to:Advanced Networking Option - Version 126.96.36.199 and later
Information in this document applies to any platform.
When a primary and standby database use ASM to store the TDE keystore (wallet), additional steps are required to move the keystore from the primary to the standby. This is because ASM commands cannot be used on TDE keystores (Note 2085607.1).
To properly transport the keys from the primary's ASM keystore to a new standby's empty ASM keystore, one must merge the primary's keys into a new, empty non-ASM filesystem keystore. This new file is then copied to the standby on a regular filesystem, and then merged into the empty ASM keystore on the standby.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document