Contents
“TDE Keystore Password is Not Valid” When Cloning a PDB After Changing Wallet Password on EXACC – Eclipsys
Changing SYS Password, Wallet Password, TDE Keystore Password, and SYS Password in Oracle Wallet – Eclipsys
Wallet_Type Shows “UNKNOWN” for all PDBs After Changing Wallet Password on ExaCC – Eclipsys
In this blog post, I am going to describe a strange error when I was creating the new PDB in the existing CDB on ExaCC using dbaascli.
Error:
After around 20 minutes PDB creation failed with the below error.
This is the error message: “[FATAL] [DBAAS-60074] Unable to run the secure command as user ‘oracle’.“
Troubleshoot the Issue:
1. First I tried to create PDB using the OCI console instead of the command line but I got the same error message.
2. I tried to search on MOS but could not find the same issue or error message.
Analysis:
I checked the logfile shown in the above output “/var/opt/oracle/log/CDBTEST/pdb/create/dbaastools_2024-07-16_02-24-56-PM_246703.log”
and I found one clue in the logs highlighted below.
“Exception occurred while reading wallet at /var/opt/oracle/dbaas_acfs/CDBTEST/db_wallet“
Seems like some issue with reading wallet files.
Cause of Error:
When I checked the wallet file location, I saw wallet files have 755 permissions which is higher and it’s not secure for wallet files.
Solution:
The solution is very easy, just change the permission on wallet files to 600
After changing the permission on wallet files, I can successfully create the new PDB inside CDB using dbaascli.
“TDE Keystore Password is Not Valid” When Cloning a PDB After Changing Wallet Password on EXACC – Eclipsys
Changing SYS Password, Wallet Password, TDE Keystore Password, and SYS Password in Oracle Wallet – Eclipsys
Wallet_Type Shows “UNKNOWN” for all PDBs After Changing Wallet Password on ExaCC – Eclipsys