Skip to Main Content
  • Questions
  • Database Upgrade (with HSM Encryption) from 11.2.0.4 to 18.0.0 Fails

Breadcrumb

Question and Answer

Chris Saxon

Thanks for the question, Chida.

Asked: May 29, 2020 - 2:28 pm UTC

Last updated: June 03, 2020 - 1:59 pm UTC

Version: 11.2.0.4 and 18.0.0

Viewed 1000+ times

You Asked

We are trying to upgrade the database from 11g to 18c. The wallet master key has been stored in HSM and the auto-login enabled in 11g Database. The wallet is opening in 11g Database without any issues. But, it is complaining that "Wallet-is-not-open" in 18C Database.

Here are the additional details, let me know if any questions or need more information, thanks.

>opatch lsinventory
Oracle Interim Patch Installer version 12.2.0.1.19
Copyright (c) 2020, Oracle Corporation.  All rights reserved.
Oracle Home       : /u01/app/oracle/product/18.0.0/dbhome
Central Inventory : /u01/app/oraInventory
   from           : /u01/app/oracle/product/18.0.0/dbhome/oraInst.loc
OPatch version    : 12.2.0.1.19
OUI version       : 12.2.0.4.0
Log file location : /u01/app/oracle/product/18.0.0/dbhome/cfgtoollogs/opatch/opatch2020-02-18_19-48-31PM_1.log
Lsinventory Output file location : /u01/app/oracle/product/18.0.0/dbhome/cfgtoollogs/opatch/lsinv/lsinventory2020-02-18_19-48-31PM.txt
--------------------------------------------------------------------------------
Local Machine Information::
Hostname: portaldblab9701a.sllab.local
ARU platform id: 226
ARU platform description:: Linux x86-64
Installed Top-level Products (1):
Oracle Database 18c                                                  18.0.0.0.0
There are 1 products installed in this Oracle Home.
Interim patches (5) :
Patch  29530515     : applied on Tue Feb 18 19:48:05 CST 2020
Unique Patch ID:  22909149
Patch description:  "AUTO-LOGIN HSM CONFIGURATIONS FAIL TO OPEN THE TDE KEYSTORE"
   Created on 15 May 2019, 16:10:45 hrs PST8PDT
   Bugs fixed:
     29530515
   This patch overlays patches:
     28090523
   This patch needs patches:
     28090523
   as prerequisites
Patch  27908644     : applied on Wed Jul 18 12:44:11 CDT 2018
Unique Patch ID:  22153180
Patch description:  "UPDATE 18.3 DATABASE CLIENT JDK IN ORACLE HOME TO JDK8U171"
   Created on 4 May 2018, 01:21:02 hrs PST8PDT
   Bugs fixed:
     27908644

SQL> !ls /u01/app/encrypt/wallet
cwallet.sso  cwallet.sso_1  ewallet.p24  ewallet.p24_1

SQL> alter database open upgrade;
alter database open upgrade
*
ERROR at line 1:
ORA-00603: ORACLE server session terminated by fatal error
ORA-01092: ORACLE instance terminated. Disconnection forced
ORA-28365: wallet is not open
Process ID: 30476
Session ID: 383 Serial number: 36488

SQL> select * from v$encryption_wallet;
WRL_TYPE
--------------------
WRL_PARAMETER
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
STATUS                         WALLET_TYPE          WALLET_OR KEYSTORE FULLY_BAC     CON_ID
------------------------------ -------------------- --------- -------- --------- ----------
FILE
/u01/app/encrypt/wallet/
NOT_AVAILABLE                  UNKNOWN              SINGLE    NONE     UNDEFINED          0
HSM
CLOSED                         UNKNOWN              SINGLE    NONE     UNDEFINED          0


We tried to open it manually as well which is not working either:

SQL> administer key management set keystore open identified by "Soft**********";
administer key management set keystore open identified by "Soft**********"
*
ERROR at line 1:
ORA-28353: failed to open wallet

and Chris said...

Sorry, I'm not sure what the issue is here; I've little experience with HSM.

Posting in case some in the community are familiar with this. In the meantime contact support.

Is this answer out of date? If it is, please let us know via a Comment

More to Explore

Administration

Need more information on Administration? Check out the Administrators guide for the Oracle Database