4/8/24, 9:04 AM Henry Xie 's blog: How to Export/Import Oracle DB Wallet Keys on 12c
Henry Xie 's blog
Thursday, August 16, 2018
How to Export/Import Oracle DB Wallet Keys on 12c
Export/Import Keys from non-CDB to PDB
Export keys from Source Database
Connect to Source database
Make sure keystore is open on the Source
select wrl_type,con_id,wrl_parameter,status from v$encryption_wallet;
If not Open: administer key management set keystore open identified by "password";
Make sure WALLET_TYPE is not AUTOLOGIN. If WALLET_TYPE = AUTOLOGIN,
see steps below to setup an explicit password before export.
NOTE: This will cause an outage on the source database as you will have to close and
re-open the wallet.
If the database was upgraded from 11G, you will need to perform a rekey of the master
key first.
To check if you need to perform a rekey
select creator_dbname, CREATOR_INSTANCE_NAME from v$encryption_keys;
If these columns are NULL, then you will need to rekey
select key_id from v$encryption_keys (will generally be 1 row)
ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH
BACKUP;
select key_id from v$encryption_keys (you will see an extra row added from when you
ran previously)
Export Keystore from Source
ADMINISTER KEY MANAGEMENT EXPORT KEYS WITH SECRET "password"
TO '/u02/storage/TDE/export2.exp' IDENTIFIED BY password;
Import keys into PDB
Create PDB from non-CDB after the rekey is performed
Copy export file to CDB Host /u02/storage/PDB
Connect to CDB and make sure wallet is open
select wrl_type,con_id,wrl_parameter,status from v$encryption_wallet;
If not Open: administer key management set keystore open identified by "password";
Connect to PDB and make sure wallet is open
select wrl_type,con_id,wrl_parameter,status from v$encryption_wallet;
If not Open: administer key management set keystore open identified by "password";
Import Keystore
ADMINISTER KEY MANAGEMENT IMPORT ENCRYPTION KEYS WITH SECRET
"password"
https://www.henryxieblogs.com/2018/08/how-to-exportimport-oracle-db-wallet.html 1/3
4/8/24, 9:04 AM Henry Xie 's blog: How to Export/Import Oracle DB Wallet Keys on 12c
FROM '/u02/storage/PDB/export.exp' IDENTIFIED BY password WITH BACKUP;
select key_id from v$encryption_keys
Close and Open PDB
Posted by Henry Xie at 7:49 PM
Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest
No comments:
Post a Comment
Newer Post Older Post Home
Subscribe to: Post Comments (Atom)
Kubernetes is a New OS
Kubernetes is a New OS
Search "Kubernetes" to find related blogs
Search All Blogs
Search
Translate
Select Language ▼
Blog Archive
►
► 2022 (3)
►► November (2)
►► February (1)
►
► 2021 (33)
►► December (1)
►► November (1)
►► October (1)
►► September (1)
►► August (4)
►► July (4)
►► June (3)
►► May (2)
►► April (6)
►► March (3)
►► February (6)
►► January (1)
►
► 2020 (49)
►► December (2)
►► November (2)
►► October (2)
►► September (1)
►► August (4)
►► July (2)
►► June (4)
►► May (11)
►► April (6)
►► March (2)
►► February (8)
►► January (5)
►
► 2019 (105)
►► December (4)
►► November (3)
►► October (1)
►► September (5)
►► August (8)
►► July (3)
►► June (9)
►► May (12)
►► April (23)
►► March (13)
►► February (14)
►► January (10)
▼
▼ 2018 (121)
►► December (15)
►► November (17)
►► October (26)
►► September (11)
▼▼ August (6)
ORA-65028 When
Creating Pluggable
Database Via DBLINK
How to Export/Import
Oracle DB Wallet Keys on
12c
Swap Oracle DB Wallet
Type from AUTOLOGIN
and PASS...
https://www.henryxieblogs.com/2018/08/how-to-exportimport-oracle-db-wallet.html 2/3
4/8/24, 9:04 AM Henry Xie 's blog: How to Export/Import Oracle DB Wallet Keys on 12c
ORA-12154: TNS:could
not resolve the connect
ident...
ORA-12170:
TNS:Connect timeout
occurred When Exec ...
Wallet Usage In
PDB/CDB of Multitenant
Environment
►
► July (5)
►
► June (8)
►
► May (6)
►
► April (8)
►
► March (15)
►
► February (4)
►
► 2017 (3)
►► November (3)
►
► 2014 (3)
►► May (1)
►► February (1)
►► January (1)
►
► 2013 (19)
►► November (3)
►► October (2)
►► July (1)
►► June (11)
►► January (2)
►
► 2012 (31)
►► December (2)
►► November (7)
►► October (22)
About Me
Henry Xie
View my complete profile
Powered by Blogger.
https://www.henryxieblogs.com/2018/08/how-to-exportimport-oracle-db-wallet.html 3/3