Converting a TDE encrypted NON CDB to PDB
- DBMS_PDB.describe and plug in the non_cdb
- remote creation of PDB
create pluggable database pdbXXX from non$cdb@ XXX.acme.com KEYSTORE IDENTIFIED BY "tde_key_fake_password"
ERROR at line 1:
ORA-01078: failure in processing system parameters
LRM-00111: no closing quote for value 'KEYSTORE_C'
ssl_client_authentication = false
encryption_wallet_location = (source =
(method = file) (method_data =
(directory = /zfs/encwallet/<DB_UNIQUE_NAME> ) )
Which leads to sometimes multiple issues if you have multiple sqlnet.ora parameters
So in 19c you can now set
It is there that the issue lays when trying to take over the parameters from the source PDB it fails on the TDE_CONFIGURATION.
As a workaround I configured the TDE wallets again the old fashioned way and that made it possible to do. Make sure you check v$encryption_wallet to see if the wallet is open...
create pluggable database pdbXXX from non$cdb@XXX.acme.com KEYSTORE IDENTIFIED BY "tde_key_fake_password" ;
Pluggable database created.
Note I tested this on 19.8 will do also on 19.5 the version we have currently installed
UPDATE 1: Tested in 19.5 and there I get another error and core dump so 19.8 is the version you want to be on
UPDATE 2 : Got following reply in my SR
Unfortunately it will be Fixed Ver: 21.1 also its not include in any RU yet
So basically Oracle creates a new feature that breaks things and then fixes it in a version available in 1 year ?
Big thank you Mike to help me understand the issue and the time you took to go through the SR