Skip to main content

DCS-10045: Validation error encountered: Backup password is mandatory to take OSS backup for non-tde enabled database in OCI DBCS

DCS-10045: Validation error encountered: Backup password is mandatory to take OSS backup for non-tde enabled database on Oracle Cloud DB backup


Issue: Post migration, Automatic Backup fails with the following error for non-TDE enabled migrated Oracle Database releases 11.2.0.4 and 12.1.0.2. 


DCS-10045: Validation error encountered: Backup password is mandatory to take OSS backup for non-tde enabled database... 



Solution: 

  1. Find the TDE wallet location.
    The Oracle Cloud Infrastructure provisioned database instance will have following entry in sqlnet.ora.
    ENCRYPTION_WALLET_LOCATION=(SOURCE=(METHOD=FILE) (METHOD_DATA=(DIRECTORY=/opt/oracle/dcs/commonstore/wallets/ tde/$ORACLE_UNQNAME)))
  2. Remove the cwallet.sso file from the wallet location.

For example, /opt/oracle/dcs/commonstore/wallets/tde/$ORACLE_UNQNAME. 


Oracle Database 11g Release 2, do the folowing steps. location. 


Check the wallet status


select * from v$encryption_wallet;


WRL_TYPE

--------------------

WRL_PARAMETER

--------------------------------------------------------------------------------

STATUS

------------------

file

/u01/app/oracle/product/11.2.0.4/dbhome_1/admin/PROD/wallet

OPEN


Close the wallet in the database.
SQL> alter system set wallet close; 


Connect to database using SQL*Plus as sysdba and verify the current wallet 


Open the wallet using the wallet password.

SQL> alter system SET WALLET open IDENTIFIED BY "walletpassword" 


Set the master encryption key.

SQL> alter system set encryption key identified by "walletpassword"


Recreate the autologin SSO file.

orapki wallet create -wallet /opt/oracle/dcs/ commonstore/wallets/tde/$ORACLE_UNQNAME -auto_login


Retry Automatic Backup. 


Oracle Database 12c following steps


SQL> SELECT wrl_parameter, status, wallet_type FROM v$encryption_wallet;

If the STATUS column contains a value of OPEN_NO_MASTER_KEY, you must create and activate the master encryption key. 


Close the wallet in the database.
SQL> alter system set wallet close;

Open the wallet-using password.

SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE open IDENTIFIED BY
"walletpassword" CONTAINER=all;

Set the master encryption key. 

SQL> ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY "walletpassword" with backup; 


Log in to each PDB and run 

SQL> ALTER SESSION SET CONTAINER = PDB_NAME;
SQL> ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY "walletpassword" with backup;

Create the auto login keystore.
SQL> ADMINISTER KEY MANAGEMENT CREATE AUTO_LOGIN KEYSTORE FROM
KEYSTORE 'path to wallet directory' IDENTIFIED BY "walletpassword"; 


Retry Automatic Backup. 








If you like please follow and comment
Labels:

Comments

Post a Comment

Popular posts from this blog

WebLogic migration to OCI using WDT tool

WebLogic migration to OCI using WDT tool Oracle WebLogic Deploy Tool (WDT) is an open-source project designed to simplify and streamline the management of Oracle WebLogic Server domains. With WDT, you can export configuration and application files from one WebLogic Server domain and import them into another, making it a highly effective tool for tasks like migrating on-premises WebLogic configurations to Oracle Cloud. This blog outlines a detailed step-by-step process for using WDT to migrate WebLogic resources and configurations. Supported WLS versions Why Use WDT for Migration? When moving Oracle WebLogic resources from an on-premises environment to Oracle Cloud (or another WebLogic Server), WDT provides an efficient and reliable approach to: Discover and export domain configurations and application binaries. Create reusable models and archives for deployment in a target domain. Key Pre-Requisites Source System: An Oracle WebLogic Server with pre-configured resources such as: Applica...
Post a Comment
Read more

How to Validate TDE Wallet Password in Oracle Database

How to Validate TDE Wallet Password in Oracle Database Validating the Transparent Data Encryption (TDE) wallet password is crucial, especially when ensuring that the password is correct without using the OPEN or CLOSE commands in the database. This blog post explains a straightforward method to validate the TDE password using the mkstore utility. Steps to Validate TDE Wallet Password Follow these steps to validate the TDE wallet password: Step 1: Copy the Keystore/Wallet File Navigate to your existing TDE wallet directory. Copy only the ewallet.p12 file to a new directory. If a cwallet.sso file exists, do not copy it . The absence of cwallet.sso ensures that the wallet does not use auto-login, forcing the utility to prompt for the password. Step 2: Validate Using mkstore Use the mkstore utility to check the contents of the wallet file. The mkstore utility will prompt you for the TDE wallet password, allowing you to validate its correctness. Command Syntax To display the conten...
Post a Comment
Read more

How to Create macOS Catalina ISO File

  How to Create macOS Catalina ISO File Please note these steps need to be performed on a Apple Mac System to generate an iso. Steps: 1) Download macOS Catalina From App Store or Apple download 2) Please note once you download it will be in dmg format. 3) Open Terminal in MAC.  from the top-right corner open up Spotlight.  Type in Terminal and hit Enter. 4)  Mount it to your macOS hdiutil attach /tmp/Catalina.dmg -noverify -mountpoint /Volumes/Catalina 5) Create macOS Catalina Installer sudo /Applications/Install\ macOS\ Catalina.app/Contents/Resources/createinstallmedia --volume /Volumes/Catalina --nointeraction 6) Unmount Catalina Disk hdiutil detach /volumes/Install\ macOS\ Catalina 7) Convert the DMG file to an ISO file hdiutil convert /tmp/Catalina.dmg -format UDTO -o ~/Desktop/Catalina.cdr 8) Rename and Move to Desktop mv ~/Desktop/Catalina.cdr ~/Desktop/Catalina.iso Now we can use this iso on any system and install on virtual machines.
Post a Comment
Read more