主页 / dba / 问题 / 256485
Accepted
Эльфия Валиева
Asked: 2019-12-31 06:11:27 +0800 CST

Oracle 19c 无法创建主密钥

  • 772

我无法在 oracle 19c 中创建主密钥...我在 sqlnet.ora 中将参数设置为：

WALLET_LOCATION=
  (SOURCE=
    (METHOD=file)
    (METHOD_DATA=
       (DIRECTORY=/opt/oracle/product/19c/db_home/admin/ALF/wallet/tde)))

还要设置参数 TDE_CONFIGURATION：

ALTER SYSTEM SET TDE_CONFIGURATION="KEYSTORE_CONFIGURATION=FILE" scope=both;

在我重新启动 oracle 并执行以下命令后：

  1. alter session set container=CDB$ROOT;

  2. administer key management create keystore identified by "mypassword";

  3. administer key management set keystore OPEN identified by "mypassword";

并尝试创建主密钥：

  1. ADMINISTER KEY MANAGEMENT SET KEY USING TAG 'master key' IDENTIFIED BY "mypassword" WITH BACKUP USING 'masterbackup';

而且我总是收到以下错误：

ERROR at line 1:
ORA-28362: master key not found

你知道，我如何解决这个问题吗？虽然，我按照指令执行了命令......谢谢。

oracle transparent-data-encryption

2 个回答

  1. Best Answer

    那么你遵循了什么指示？

    以下是您的命令示例，我根本没有使用sqlnet.ora，因为它在 19c 中是可选的：

    SQL> !mkdir /u01/app/oracle/admin/MIN19_O71/wallet

SQL> alter system set wallet_root='/u01/app/oracle/admin/MIN19_O71/wallet' scope=spfile;

System altered.

SQL> startup force
ORACLE instance started.

Total System Global Area 1073737800 bytes
Fixed Size                  8904776 bytes
Variable Size             297795584 bytes
Database Buffers          759169024 bytes
Redo Buffers                7868416 bytes
Database mounted.
Database opened.
SQL> alter system set tde_configuration="keystore_configuration=file" scope=both;

System altered.

SQL> administer key management create keystore identified by "mypassword";

keystore altered.

SQL> administer key management set keystore OPEN identified by "mypassword";

keystore altered.

SQL> !ls -l /u01/app/oracle/admin/MIN19_O71/wallet
total 0
drwxr-x---. 2 oracle oinstall 25 Dec 30 16:01 tde

SQL> !ls -l /u01/app/oracle/admin/MIN19_O71/wallet/tde
total 4
-rw-------. 1 oracle oinstall 2555 Dec 30 16:01 ewallet.p12

SQL> administer key management set key using tag 'master key' identified by "mypassword" with backup using 'masterbackup';

keystore altered.

SQL> !ls -l /u01/app/oracle/admin/MIN19_O71/wallet/tde
total 12
-rw-------. 1 oracle oinstall 2555 Dec 30 16:02 ewallet_2019123015024590_masterbackup.p12
-rw-------. 1 oracle oinstall 4171 Dec 30 16:02 ewallet.p12

SQL>
    • 0

  2. 要使您的密钥库自动打开，请添加以下步骤：

    ADMINISTER KEY MANAGEMENT CREATE AUTO_LOGIN KEYSTORE FROM KEYSTORE IDENTIFIED BY "mypassword";

    密钥库已更改。

    • 0

相关问题