ORA-28407: Hardware Security Module Failed With PKCS#11 Error CKR_GENERAL_ERROR(5) (Doc ID 2931202.1)

Last updated on JULY 20, 2024

Applies to:

Symptoms

Alert.log of the endpoint reports the following errors

2023-01-14T20:29:14.183305-05:00         <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
kzthsmcc3: HSM heartbeat died. Likely the connection
has been lost. PKCS11 function C_EncryptInit returned
PKCS11 error code: 6
PDB 0, MKID used for HB 06A56A3F1D2C544FFFBF2749AC3FE18D11
HSM connection lost, closing wallet
2023-01-14T20:29:14.694825-05:00
Errors in file /ani01/oracle/diag/rdbms/crm9prd/CRM9PRD1/trace/CRM9PRD1_ora_22754.trc:
ORA-28407: Hardware Security Module failed with PKCS#11 error CKR_GENERAL_ERROR(5)<<<<<<<<<<<<<<<<<<<<<<<
2023-01-14T20:29:14.697782-05:00
Errors in file /ani01/oracle/diag/rdbms/crm9prd/CRM9PRD1/trace/CRM9PRD1_ora_22754.trc:
ORA-28407: Hardware Security Module failed with PKCS#11 error CKR_GENERAL_ERROR(5)
2023-01-14T20:29:14.848780-05:00

Changes

 There was change in the secured target implementation of TDE i.e database was moved from current setting of using encryption_wallet_location to wallet_root setting for which re-enrollment of the endpoint was done at the OKV

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.