OraFAQ Forum: Security » TDE: Closing wallet using "alter system set encryption wallet close;"

Home » RDBMS Server » Security » TDE: Closing wallet using "alter system set encryption wallet close;" (Oracle 11g)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

TDE: Closing wallet using "alter system set encryption wallet close;" [message #625693]

Mon, 13 October 2014 05:26

zaff
Messages: 50
Registered: July 2008

Member

Hi,
I'm able to open a tde wallet using the following command:

alter system set encryption wallet open identified by "mypassword123"'

SQL> select inst_id,wrl_parameter,status from gv$encryption_wallet;

INST_ID WRL_PARAMETER STATUS
---------- -------------------------------------------------- ------------------
1 /tdewallet/ewallet OPEN
2 /tdewallet/ewallet OPEN
4 /tdewallet/ewallet OPEN
3 /tdewallet/ewallet OPEN

However, I'm unable to close the wallet using the following command:

ALTER SYSTEM SET ENCRYPTION WALLET CLOSE;

Am I missing anything?

Thanks,
Zaff

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625695 is a reply to message #625693]

Mon, 13 October 2014 05:28

Michel Cadot
Messages: 68749
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

You miss to tell us what does "I am unable to close" mean.

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625696 is a reply to message #625693]

Mon, 13 October 2014 05:30

John Watson
Messages: 8968
Registered: January 2010
Location: Global Village

Senior Member

You need to give the password to open and to close the wallet. Unless it is autologin (which it should usually be).

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625699 is a reply to message #625695]

Mon, 13 October 2014 05:37

zaff
Messages: 50
Registered: July 2008

Member

Hi Michel,
Just some background; As part of the backup process, I need to backup the tde wallet along with the encrypted data. It seems that in order to backup the tde wallet, I first need to close it i.e disable access to the master key. After the wallet has been backed up, the wallet will be re-opened.

So, I would like to know how i can close the wallet so that i can back it up. It seems

ALTER SYSTEM SET ENCRYPTION WALLET CLOSE;

is the right command. However, this has not worked.

Thanks,
Zabair

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625700 is a reply to message #625699]

Mon, 13 October 2014 05:40

zaff
Messages: 50
Registered: July 2008

Member

Hi John,
The command also does not work with the password:

alter system set wallet close identified by "mypassword123";

Thanks,
Zabair

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625701 is a reply to message #625700]

Mon, 13 October 2014 05:44

John Watson
Messages: 8968
Registered: January 2010
Location: Global Village

Senior Member

"does not work" is not an Oracle error message.

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625703 is a reply to message #625701]

Mon, 13 October 2014 05:55

zaff
Messages: 50
Registered: July 2008

Member

Hi John,
I don't get an error message. After running the command

ALTER SYSTEM SET ENCRYPTION WALLET CLOSE;

.....i get "System altered." as output from SQLPLus. However, when I the check the status of the wallet, it's shows as still open:

select inst_id,wrl_parameter,status from gv$encryption_wallet;

INST_ID WRL_PARAMETER STATUS
---------- -------------------------------------------------- ------------------
1 /tdewallet/ewallet OPEN
4 /tdewallet/ewallet OPEN
3 /tdewallet/ewallet OPEN
2 /tdewallet/ewallet OPEN

......so in my view, the command "does not work".

Thanks,
Zabair

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625704 is a reply to message #625703]

Mon, 13 October 2014 05:57

John Watson
Messages: 8968
Registered: January 2010
Location: Global Village

Senior Member

And if you use the correct command?

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625706 is a reply to message #625704]

Mon, 13 October 2014 06:01

Michel Cadot
Messages: 68749
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

And what is your complete Oracle version: "select * from v$version;"?

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625707 is a reply to message #625706]

Mon, 13 October 2014 06:05

zaff
Messages: 50
Registered: July 2008

Member

Hi Michel - Details below:

SQL> select * from v$version;

BANNER
--------------------------------------------------------------------------------
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
PL/SQL Release 11.2.0.4.0 - Production
CORE 11.2.0.4.0 Production
TNS for IBM/AIX RISC System/6000: Version 11.2.0.4.0 - Production
NLSRTL Version 11.2.0.4.0 - Production

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625708 is a reply to message #625707]

Mon, 13 October 2014 06:12

zaff
Messages: 50
Registered: July 2008

Member

Hi John,
If by "correct command" you mean

alter system set encryption wallet close identified by "mypassword123";

then this also gives the same "System altered." as output. However the wallet status remains as OPEN.

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625709 is a reply to message #625708]

Mon, 13 October 2014 06:23

John Watson
Messages: 8968
Registered: January 2010
Location: Global Village

Senior Member

Yes, that is what I meant: the correct command. That is how I have always done it. I cannot assist further.
Some one else may be able to help, particularly if you actually copy/paste what happens.

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625711 is a reply to message #625709]

Mon, 13 October 2014 07:19

zaff
Messages: 50
Registered: July 2008

Member

Also, the wallet has been configured with auto login;

orapki wallet create wallet /tdewallet/ewallet pwd <password> -[b]auto_login[/b]

. So should be able to close the wallet without the password.

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625712 is a reply to message #625711]

Mon, 13 October 2014 07:23

John Watson
Messages: 8968
Registered: January 2010
Location: Global Village

Senior Member

It really does help if you tell the full story, you know.

You have it all wrong. The orapki utility does not create a TDE wallet. It creates a wallet used for storing digital certificates, which is totally different. You need to to go back to the Advanced Security Guide, and start again.

Report message to a moderator

Re: TDE: Closing wallet using "alter system set encryption wallet close;" [message #625713 is a reply to message #625712]

Mon, 13 October 2014 07:34

zaff
Messages: 50
Registered: July 2008

Member

Hi John - The problem is that i'm not the one who setup tde in our environments, but i'm now having to pick this up (with very little in-house documentation + no previous tde experience). So i'm learning as i go along.

Report message to a moderator

Previous Topic:	Steps to configure LDAP (OID) for authentication in exiting database (11.2.0.4, RAC, ASM, RHEL 5)
Next Topic:	Performing Auditing

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Mar 11 20:32:35 CDT 2025