{"id":1035,"date":"2024-07-08T16:50:54","date_gmt":"2024-07-08T19:50:54","guid":{"rendered":"https:\/\/www.fernandosimon.com\/blog\/?p=1035"},"modified":"2024-07-08T16:50:54","modified_gmt":"2024-07-08T19:50:54","slug":"23ai-dbca-cloud-and-tde","status":"publish","type":"post","link":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/","title":{"rendered":"23ai, DBCA, Cloud, and TDE"},"content":{"rendered":"<p style=\"text-align: justify;\">The 23ai is already available at Cloud and ExaCC as well. It is On-Prem, but it is Cloud too, so, we can use it. Recently I needed to create some databases manually (not using the ExaCc dbaas* utilities) and encountered some interesting details when using dbca. Mainly because at Cloud we are forced to have encrypted databases. You can skip directly to the end to see how to solve and create databases with TDE enabled since the beginning when using dbca, or read the rest of the post to check the root cause and the troubleshooting.<\/p>\n<h1 style=\"text-align: justify;\">19c and traditional dbca<\/h1>\n<p style=\"text-align: justify;\">Just to remember, if you want to create a database using the dbca, you have a lot of options but nothing related to TDE:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@o8p1-19c ~]$ which dbca\r\n\/u01\/app\/oracle\/product\/19.18.0.0\/dbhome_2\/bin\/dbca\r\n[oracle@o8p1-19c ~]$\r\n[oracle@o8p1-19c ~]$ dbca -silent -createDatabase -help |grep -i TDE\r\n[oracle@o8p1-19c ~]$<\/pre>\n<h1 style=\"text-align: justify;\">23ai and traditional dbca usage<\/h1>\n<p style=\"text-align: justify;\">So, when I tried to create the database with dbca I tried to use it with the same parameters that I used in all my previous years. But it failed telling that \u201c<em>ORA-28361: Master key not yet set<\/em>\u201d:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ which dbca\r\n\/u02\/app\/oracle\/product\/23.0.0.0\/dbhome_1\/bin\/dbca\r\n[oracle@exxc05db01-]$\r\n[oracle@exxc05db01-]$ dbca -silent -createDatabase -templateName TEMPLATE_23ai.dbt -gdbName DBN234I -adminManaged -sid DBN234I -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -sampleSchema false -storageType ASM -diskGroupName DATAC4 -recoveryGroupName RECOC4 -nodelist exxc05db01,exxc06db01 -databaseConfigType RAC\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n4% complete\r\nCreating and starting Oracle instance\r\n5% complete\r\n6% complete\r\n8% complete\r\nCreating database files\r\n[WARNING] ORA-28361: Master key not yet set.\r\n\r\n9% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n12% complete\r\n100% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n8% complete\r\n4% complete\r\n0% complete\r\nLook at the log file \"\/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I\/DBN234I.log\" for further details.\r\n[oracle@exxc05db01-]$<\/pre>\n<p style=\"text-align: justify;\"><!--more Click here to read more...--><\/p>\n<p style=\"text-align: justify;\">Intriguingly, the failure tells me that the master key was not found. So, I checked the log and I found nothing special, just that the file CreateDBFiles.log tells about the creation of the tablespaces failed because the master key was not found:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">CREATE SMALLFILE TABLESPACE \"USERS\" LOGGING  DATAFILE  SIZE 5M AUTOEXTEND ON NEXT  1280K MAXSIZE UNLIMITED  EXTENT MANAGEMENT LOCAL  SEGMENT SPACE MANAGEMENT  AUTO\r\n*\r\nERROR at line 1:\r\nORA-28361: Master key not yet set.\r\nHelp: https:\/\/docs.oracle.com\/error-help\/db\/ora-28361\/<\/pre>\n<p style=\"text-align: justify;\">Following the rabbit hole, I went to the alertlog and started some clues:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">\u2026\r\n--ATTENTION--\r\nCannot transparently encrypt Oracle-managed tablespace SYSTEM (container 1) per Oracle Cloud mandate because master key has not been set.\r\nTablespace created: SYSTEM ts# 0\r\nCompleted: create tablespace SYSTEM datafile  SIZE 700M AUTOEXTEND ON NEXT  10240K MAXSIZE UNLIMITED\r\n\r\n  EXTENT MANAGEMENT LOCAL online\r\n\u2026<\/pre>\n<p style=\"text-align: justify;\">And before of that, we have:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">\u2026\r\nBroadcast on commit is enabled and is using RDMA mode.\r\n--ATTENTION--\r\nMaster key must be set for the pluggable database (PDB) CON_ID=1 (CDB$ROOT) when TABLESPACE_ENCRYPTION is set. Not doing so will disable Hybrid Data Guard encryption.\r\n2024-06-18T15:29:45.191424+02:00\r\n\u2026<\/pre>\n<p style=\"text-align: justify;\">So, I checked the <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/23\/refrn\/TABLESPACE_ENCRYPTION.html\" target=\"_blank\" rel=\"noopener\">TABLESPACE_ENCRYPTION<\/a> parameter when databases were started and I had it set as AUTO_ENABLE:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">\u2026\r\nSystem parameters with non-default values:\r\n  processes                = 500\r\n  use_large_pages          = \"ONLY\"\r\n  pga_aggregate_limit      = 15G\r\n  nls_language             = \"AMERICAN\"\r\n  nls_territory            = \"LUXEMBOURG\"\r\n  sga_target               = 4G\r\n  db_block_size            = 8192\r\n  tablespace_encryption    = \"AUTO_ENABLE\"\r\n\u2026<\/pre>\n<p style=\"text-align: justify;\">And we can see that was set as AUTO_ENABLE because it is cloud (ExaCC is cloud at the end):<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-1036 size-full\" src=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\" alt=\"\" width=\"1745\" height=\"532\" srcset=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg 1745w, https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD-300x91.jpg 300w, https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD-1024x312.jpg 1024w, https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD-768x234.jpg 768w, https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD-1536x468.jpg 1536w, https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD-624x190.jpg 624w\" sizes=\"auto, (max-width: 1745px) 100vw, 1745px\" \/><\/a><\/p>\n<h1 style=\"text-align: justify;\">Trying to bypass it<\/h1>\n<p style=\"text-align: justify;\">So, I checked the 23ai and for dbca now we have a complete set of parameters to work when creating the database. You can see below and <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/23\/multi\/dbca-command.html#GUID-0A94814D-032B-4F6A-8B54-A35223A1E3EF\" target=\"_blank\" rel=\"noopener\">the official documentation as well<\/a>:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -help\r\n        -createDatabase - Command to Create a database.\r\n                -responseFile | (-gdbName -templateName)\r\n                -responseFile - &lt;Fully qualified path for a response file&gt;\r\n                -gdbName &lt;Global database name&gt;\r\n                -templateName &lt;Specify an existing template in default location or the complete template path for DB Creation or provide a new template name for template creation&gt;\r\n                [-adminManaged | -managementPolicy]\r\n                [-adminManaged &lt;Admin managed database, this is default option&gt;]\r\n                [-managementPolicy &lt;AUTOMATIC | RANK&gt; Database management Policy, default value is AUTOMATIC]\r\n                [-characterSet &lt;Character set for the database&gt;]\r\n                [-configureTDE &lt;true | false&gt; Specify true to configure TDE wallet]\r\n                        [-encryptPDBTablespaces &lt;Specify ALL to encrypt all Tablespaces or A comma separated list of name:value pairs with tablespace encryption to true\/false. For example SYSTEM:true,SYSAUX:false&gt;]\r\n                        [-encryptTablespaces &lt;Specify ALL to encrypt all Tablespaces or A comma separated list of name:value pairs with tablespace encryption to true\/false. For example SYSTEM:true,SYSAUX:false&gt;]\r\n                        [-pdbTDEPassword &lt;Specify password for PDB TDE wallet&gt;]\r\n                        [-primaryDBTdeWallet &lt;Specify the location for TDE wallet of primary database&gt;]\r\n                        [-sourcePdbTDEPassword &lt;Specify password for source PDB TDE wallet and it is used only in creation of PDB from existing PDB which has TDE wallet&gt;]\r\n                        [-sourceTdeWalletPassword &lt;Specify password for source database TDE wallet&gt;]\r\n                        [-tdeAlgorithm &lt;Specify the TDE Algorithm Type.&gt;]\r\n                        [-tdeWalletLoginType &lt;Specify the TDE Wallet Login Type, PASSWORD | AUTO_LOGIN  | LOCAL_AUTO_LOGIN. Default is PASSWORD for SI and AUTO_LOGIN is default for RAC]\r\n                        [-tdeWalletModeForPDB &lt;Type of keystore, either UNITED or ISOLATED. Default is UNITED&gt;]\r\n                        [-tdeWalletPassword &lt;Specify password for TDE wallet&gt;]\r\n                        [-tdeWalletPathInTarFile &lt;value&gt;]\r\n                        [-tdeWalletRoot &lt;Specify the location for TDE wallet root init parameter&gt;]\r\n                [-createListener &lt;Create a new listener to register your database. Specify in format, LISTENER_NAME:PORT&gt;]\r\n\u2026\r\n\u2026<\/pre>\n<p style=\"text-align: justify;\"><strong>My first try<\/strong> was to disable TDE when calling dbca:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -templateName TEMPLATE_23ai.dbt -gdbName DBN234I -adminManaged -sid DBN234I -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -sampleSchema false -storageType ASM -diskGroupName DATAC4 -recoveryGroupName RECOC4 -nodelist exxc05db01,exxc06db01 -databaseConfigType RAC -configureTDE FALSE\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n4% complete\r\nCreating and starting Oracle instance\r\n5% complete\r\n6% complete\r\n8% complete\r\nCreating database files\r\n[WARNING] ORA-28361: Master key not yet set.\r\n\r\n9% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n12% complete\r\n100% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n8% complete\r\n4% complete\r\n0% complete\r\nLook at the log file \"\/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I\/DBN234I.log\" for further details.\r\n[oracle@exxc05db01-]$<\/pre>\n<p style=\"text-align: justify;\">And in alertlog I had the same AUTO_ENABLE value for TABLESPACE_ENCRYPTION.<\/p>\n<p style=\"text-align: justify;\"><strong><span data-preserver-spaces=\"true\">The second try<\/span><\/strong><span data-preserver-spaces=\"true\"> was forcing <\/span><span data-preserver-spaces=\"true\">dbca<\/span><span data-preserver-spaces=\"true\"> to set one parameter while creating the database. I made the call adding \u201c<\/span><em><span data-preserver-spaces=\"true\">-initParams &#8220;TABLESPACE_ENCRYPTION=MANUAL_ENABLE<\/span><\/em><span data-preserver-spaces=\"true\">\u201d. Don\u2019t worry about the database name warning message I was creating\/testing several times:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -templateName TEMPLATE_23ai.dbt -gdbName DBN234I2 -adminManaged -sid DBN234I2 -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -sampleSchema false -storageType ASM -diskGroupName DATAC4 -recoveryGroupName RECOC4 -nodelist exxc05db01,exxc06db01 -databaseConfigType RAC -initParams \"TABLESPACE_ENCRYPTION=MANUAL_ENABLE\"\r\n[WARNING] [DBT-10331] Specified SID Prefix (DBN234I2) may have a potential conflict with an already existing database on the system.\r\n   CAUSE: The specified SID Prefix without the trailing numeric characters (DBN234I) may have a potential conflict with an already existing database on the system.\r\n   ACTION: Specify a different SID Prefix that does not conflict with existing databases on the system.\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n4% complete\r\nCreating and starting Oracle instance\r\n5% complete\r\n\r\n6% complete\r\n8% complete\r\nCreating database files\r\n[WARNING] ORA-28361: Master key not yet set.\r\n\r\n9% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n12% complete\r\n100% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n8% complete\r\n4% complete\r\n0% complete\r\nLook at the log file \"\/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I2\/DBN234I20.log\" for further details.\r\n[oracle@exxc05db01-]$<\/pre>\n<p style=\"text-align: justify;\">In the trace file linked to this creation you can see that was called with the MANUAL_ENABLE:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[progressPage.flowWorker] [ 2024-06-18 15:29:17.838 CEST ] [InitParamAttributes.createInitFile:1904]  Processing init param tablespace_encryption\r\n[progressPage.flowWorker] [ 2024-06-18 15:29:17.838 CEST ] [InitParamAttributes.createInitFile:1909]  The value is MANUAL_ENABLE<\/pre>\n<p style=\"text-align: justify;\">But even in alertlog, was forced to be enabled (compare the times):<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">2024-06-18T15:29:43.815393+02:00\r\nBroadcast on commit is enabled and is using RDMA mode.\r\n--ATTENTION--\r\nMaster key must be set for the pluggable database (PDB) CON_ID=1 (CDB$ROOT) when TABLESPACE_ENCRYPTION is set. Not doing so will disable Hybrid Data Guard encryption.\r\n2024-06-18T15:29:45.191424+02:00<\/pre>\n<p style=\"text-align: justify;\"><strong>The third try<\/strong> was setting the old parameter <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/23\/refrn\/ENCRYPT_NEW_TABLESPACES.html\" target=\"_blank\" rel=\"noopener\">ENCRYPT_NEW_TABLESPACES<\/a> (that for 23ai was replaced by TABLESPACE_ENCRYPTION). But the same failure:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -templateName TEMPLATE_23ai.dbt -gdbName DBN234I2 -adminManaged -sid DBN234I2 -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -sampleSchema false -storageType ASM -diskGroupName DATAC4 -recoveryGroupName RECOC4 -nodelist exxc05db01,exxc06db01 -databaseConfigType RAC -initParams \"tablespace_encryption=MANUAL_ENABLE,encrypt_new_tablespaces=DDL\"\r\n[WARNING] [DBT-10331] Specified SID Prefix (DBN234I2) may have a potential conflict with an already existing database on the system.\r\n   CAUSE: The specified SID Prefix without the trailing numeric characters (DBN234I) may have a potential conflict with an already existing database on the system.\r\n   ACTION: Specify a different SID Prefix that does not conflict with existing databases on the system.\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n4% complete\r\nCreating and starting Oracle instance\r\n5% complete\r\n6% complete\r\n8% complete\r\nCreating database files\r\n[WARNING] ORA-28361: Master key not yet set.\r\n\r\n9% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n12% complete\r\n100% complete\r\n[FATAL] ORA-00959: tablespace 'USERS' does not exist\r\n\r\n8% complete\r\n4% complete\r\n0% complete\r\nLook at the log file \"\/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I2\/DBN234I21.log\" for further details.\r\n[oracle@exxc05db01-]$<\/pre>\n<h1 style=\"text-align: justify;\">How to do it properly<\/h1>\n<p style=\"text-align: justify;\">So, if you want to create or database, using dbca at Cloud, you need to use the new parameters properly. Using the correct values. If you remember above, the dbca has a new parameter to be used for TDE, but how do we set them? Since the documentation for 23ai is not 100% released the only place that you can find the info in the <a href=\"https:\/\/docs.oracle.com\/en\/database\/oracle\/oracle-database\/23\/asoag\/encryption-conversions-tablespaces-and-databases1.html#GUID-FD02200E-1AF9-4A51-97A4-886EE4D87FD3\" target=\"_blank\" rel=\"noopener\">Advanced Security Guide, topic 6.11.1 Using DBCA to Create an Encrypted Database<\/a>.<\/p>\n<p style=\"text-align: justify;\">The first step (since we are in RAC), is to create a shared folder for your wallet. At ExaCC you can create at ACFS, but if you do not use a shared folder between instances, you will receive one error. So, let\u2019s create the folder at ACFS:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ mkdir \/acfs01\/acfs\/DBN234I\r\n[oracle@exxc05db01-]$<\/pre>\n<p style=\"text-align: justify;\">And after we can call dbca with the parameter below:<\/p>\n<ul style=\"text-align: justify;\">\n<li>configureTDE: Defined as TRUE to enable TDE while creating database.<\/li>\n<li>tdeWalletRoot: Folder where the wallet will be stored.<\/li>\n<li>tdeWalletLoginType: For RAC needs to be AUTO_LOGIN.<\/li>\n<li>tdeWalletPassword: It is the wallet\/TDE password.<\/li>\n<li>encryptPDBTablespaces: When you call the database creation, which PDB tablespaces will be encrypted. I recommend to setting it as ALL to avoid incompatibilities with other parameters.<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">So, using these new parameters my dbca call is:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -templateName TEMPLATE_23ai.dbt -gdbName DBN234I -adminManaged -sid DBN234I -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -sampleSchema false -storageType ASM -diskGroupName DATAC4 -recoveryGroupName RECOC4 -nodelist exxc05db01,exxc06db01 -databaseConfigType RAC -configureTDE TRUE -tdeWalletRoot \/acfs01\/acfs\/DBN234I -tdeWalletLoginType AUTO_LOGIN -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n4% complete\r\nCreating and starting Oracle instance\r\n5% complete\r\n6% complete\r\n[WARNING] ORA-02097: parameter cannot be modified because specified value is invalid\r\nORA-28457: ENCRYPT_NEW_TABLESPACES can only be set to ALWAYS when TABLESPACE_ENCRYPTION is set to AUTO_ENABLE.\r\n\r\n8% complete\r\nCreating database files\r\n9% complete\r\n12% complete\r\nCreating data dictionary views\r\n13% complete\r\n16% complete\r\n17% complete\r\n18% complete\r\n24% complete\r\nOracle JVM\r\n30% complete\r\n36% complete\r\n42% complete\r\n44% complete\r\nOracle Text\r\n46% complete\r\n48% complete\r\nOracle OLAP\r\n52% complete\r\nOracle Spatial\r\n53% complete\r\n60% complete\r\nOracle Label Security\r\n68% complete\r\nOracle Database Vault\r\n76% complete\r\nCreating cluster database views\r\n77% complete\r\n84% complete\r\nCompleting Database Creation\r\n86% complete\r\n87% complete\r\n88% complete\r\nExecuting Post Configuration Actions\r\n100% complete\r\nDatabase creation complete. For details check the logfiles at:\r\n \/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I.\r\nDatabase Information:\r\nGlobal Database Name:DBN234I\r\nSystem Identifier(SID) Prefix:DBN234I\r\nLook at the log file \"\/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I\/DBN234I.log\" for further details.\r\n[oracle@exxc05db01-]$<\/pre>\n<p style=\"text-align: justify;\">As you can see now, the creation was fine. The interest is the warning about the ENCRYPT_NEW_TABLESPACES. I checked in the logs and was possible to see that the dbca tried to set it to DDL, but is not allowed since TABLESPACE_ENCRYPTION is forced to be AUTO_ENABLE.<\/p>\n<p style=\"text-align: justify;\">Below we can see that the database was properly configured with TDE and tablespaces encrypted:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ ls -l \/acfs01\/acfs\/DBN234I\/\r\ntotal 52\r\ndrwxr-x--- 2 oracle oinstall 20480 Jun 18 10:12 tde\r\n[oracle@exxc05db01-]$ ls -l \/acfs01\/acfs\/DBN234I\/tde\/\r\ntotal 12\r\n-rw------- 1 oracle asmdba 3864 Jun 18 10:12 cwallet.sso\r\n-rw------- 1 oracle asmdba 2555 Jun 18 10:12 ewallet_2024061808124993.p12\r\n-rw------- 1 oracle asmdba 3819 Jun 18 10:12 ewallet.p12\r\n[oracle@exxc05db01-]$\r\n[oracle@exxc05db01-]$\r\n[oracle@exxc05db01-]$ export ORACLE_SID=DBN234I1\r\n[oracle@exxc05db01-DBN234I1]$ sqlplus \/ as sysdba\r\n\r\nSQL*Plus: Release 23.0.0.0.0 - Production on Tue Jun 18 11:18:33 2024\r\nVersion 23.4.0.24.05\r\n\r\nCopyright (c) 1982, 2024, Oracle.  All rights reserved.\r\n\r\n\r\nConnected to:\r\nOracle Database 23ai EE Extreme Perf Release 23.0.0.0.0 - Production\r\nVersion 23.4.0.24.05\r\n\r\nSQL&gt; show parameter tde\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\none_step_plugin_for_pdb_with_tde     boolean     FALSE\r\ntde_configuration                    string      keystore_configuration=FILE\r\ntde_key_cache                        boolean     FALSE\r\nSQL&gt;\r\nSQL&gt; show parameter ENCRYPT_NEW_TABLESPACES\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\nencrypt_new_tablespaces              string      ALWAYS\r\nSQL&gt;\r\nSQL&gt; select TABLESPACE_NAME, ENCRYPTED, con_id from cdb_tablespaces order by con_id, TABLESPACE_NAME;\r\n\r\nTABLESPACE_NAME                ENC     CON_ID\r\n------------------------------ --- ----------\r\nSYSAUX                         NO           1\r\nSYSTEM                         NO           1\r\nTEMP                           NO           1\r\nUNDOTBS1                       NO           1\r\nUNDOTBS2                       YES          1\r\nUSERS                          YES          1\r\n\r\n6 rows selected.\r\n\r\nSQL&gt;\r\nSQL&gt; show parameter ENCRYPT_NEW_TABLESPACES\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\nencrypt_new_tablespaces              string      ALWAYS\r\nSQL&gt;\r\nSQL&gt; show parameter TABLESPACE_ENCRYPTION\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\ntablespace_encryption                string      AUTO_ENABLE\r\ntablespace_encryption_default_algori string      AES256\r\nthm\r\ntablespace_encryption_default_cipher string      XTS\r\n_mode\r\nSQL&gt;\r\nSQL&gt; exit\r\nDisconnected from Oracle Database 23ai EE Extreme Perf Release 23.0.0.0.0 - Production\r\nVersion 23.4.0.24.05\r\n[oracle@exxc05db01-DBN234I1]$<\/pre>\n<p style=\"text-align: justify;\">One detail that I didn&#8217;t appreciate was that just one UNDO is encrypted and we are kind of mixed, some CDB tablespaces are encrypted, and others are not.<\/p>\n<h1 style=\"text-align: justify;\">Can we do better?<\/h1>\n<p style=\"text-align: justify;\">The answer is YES. We can use the parameter <strong><span data-preserver-spaces=\"true\">encryptTablespaces<\/span><\/strong><span data-preserver-spaces=\"true\"> (with value ALL) and this will encrypt everything:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"raw\">[oracle@exxc05db01-]$ dbca -silent -createDatabase -templateName TEMPLATE_23ai.dbt -gdbName DBN234I -adminManaged -sid DBN234I -sysPassword oracle23ai -systemPassword oracle23ai -createAsContainerDatabase TRUE -useLocalUndoForPDBs TRUE -characterSet AL32UTF8 -emConfiguration NONE -sampleSchema false -storageType ASM -diskGroupName DATAC4 -recoveryGroupName RECOC4 -nodelist exxc05db01,exxc06db01 -databaseConfigType RAC -configureTDE TRUE -tdeWalletRoot \/acfs01\/acfs\/DBN234I -tdeWalletLoginType AUTO_LOGIN -TdeWalletPassword 'fdertyhj4567890h32aghte2457AAABB'  -encryptPDBTablespaces ALL -encryptTablespaces ALL\r\n[WARNING] [DBT-06208] The 'SYS' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\n[WARNING] [DBT-06208] The 'SYSTEM' password entered does not conform to the Oracle recommended standards.\r\n   CAUSE:\r\na. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9].\r\nb.The password entered is a keyword that Oracle does not recommend to be used as password\r\n   ACTION: Specify a strong password. If required refer Oracle documentation for guidelines.\r\nPrepare for db operation\r\n4% complete\r\nCreating and starting Oracle instance\r\n5% complete\r\n6% complete\r\n8% complete\r\nCreating database files\r\n9% complete\r\n12% complete\r\nCreating data dictionary views\r\n13% complete\r\n16% complete\r\n17% complete\r\n18% complete\r\n24% complete\r\nOracle JVM\r\n30% complete\r\n36% complete\r\n42% complete\r\n44% complete\r\nOracle Text\r\n46% complete\r\n48% complete\r\nOracle OLAP\r\n52% complete\r\nOracle Spatial\r\n53% complete\r\n60% complete\r\nOracle Label Security\r\n68% complete\r\nOracle Database Vault\r\n76% complete\r\nCreating cluster database views\r\n77% complete\r\n84% complete\r\nCompleting Database Creation\r\n86% complete\r\n87% complete\r\n88% complete\r\nExecuting Post Configuration Actions\r\n100% complete\r\nDatabase creation complete. For details check the logfiles at:\r\n \/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I.\r\nDatabase Information:\r\nGlobal Database Name:DBN234I\r\nSystem Identifier(SID) Prefix:DBN234I\r\nLook at the log file \"\/u02\/app\/oracle\/cfgtoollogs\/dbca\/DBN234I\/DBN234I0.log\" for further details.\r\n[oracle@exxc05db01-]$\r\n[oracle@exxc05db01-]$\r\n[oracle@exxc05db01-]$\r\n[oracle@exxc05db01-]$ export ORACLE_SID=DBN234I1\r\n[oracle@exxc05db01-DBN234I1]$\r\n[oracle@exxc05db01-DBN234I1]$ sqlplus \/ as sysdba\r\n\r\nSQL*Plus: Release 23.0.0.0.0 - Production on Thu Jun 20 15:03:06 2024\r\nVersion 23.4.0.24.05\r\n\r\nCopyright (c) 1982, 2024, Oracle.  All rights reserved.\r\n\r\n\r\nConnected to:\r\nOracle Database 23ai EE Extreme Perf Release 23.0.0.0.0 - Production\r\nVersion 23.4.0.24.05\r\n\r\nSQL&gt; show parameter tde\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\none_step_plugin_for_pdb_with_tde     boolean     FALSE\r\ntde_configuration                    string      keystore_configuration=FILE\r\ntde_key_cache                        boolean     FALSE\r\nSQL&gt; show parameter ENCRYPT_NEW_TABLESPACES\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\nencrypt_new_tablespaces              string      ALWAYS\r\nSQL&gt; select TABLESPACE_NAME, ENCRYPTED, con_id from cdb_tablespaces order by con_id, TABLESPACE_NAME;\r\n\r\nTABLESPACE_NAME                ENC     CON_ID\r\n------------------------------ --- ----------\r\nSYSAUX                         YES          1\r\nSYSTEM                         YES          1\r\nTEMP                           YES          1\r\nUNDOTBS1                       YES          1\r\nUNDOTBS2                       YES          1\r\nUSERS                          YES          1\r\n\r\n6 rows selected.\r\n\r\nSQL&gt; show parameter ENCRYPT_NEW_TABLESPACES\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\nencrypt_new_tablespaces              string      ALWAYS\r\nSQL&gt; show parameter TABLESPACE_ENCRYPTION\r\n\r\nNAME                                 TYPE        VALUE\r\n------------------------------------ ----------- ------------------------------\r\ntablespace_encryption                string      AUTO_ENABLE\r\ntablespace_encryption_default_algori string      AES256\r\nthm\r\ntablespace_encryption_default_cipher string      XTS\r\n_mode\r\nSQL&gt; exit\r\nDisconnected from Oracle Database 23ai EE Extreme Perf Release 23.0.0.0.0 - Production\r\nVersion 23.4.0.24.05\r\n[oracle@exxc05db01-DBN234I1]$<\/pre>\n<p style=\"text-align: justify;\">As you can see above, now all the tablespaces are encrypted, all of them using auto_login wallet.<\/p>\n<h1 style=\"text-align: justify;\">Summary<\/h1>\n<p style=\"text-align: justify;\">We have several points here. The 23ai version for ExaCC (and probably the same for OCI) is quite special since it forces us to use encryption because, in the end, it is Cloud. Usually (and 99% of the time) we don\u2019t need to call the dbca manually and we use the OCI tools which will call properly the parameters.<\/p>\n<p style=\"text-align: justify;\">Besides that, was quite a challenge (and nice at the end) to dig over the issue and identify the root cause. The documentation was quite new and obscure to discover where was the explanation about the correct parameters to be used.&nbsp; The idea for this post was to summarize the troubleshooting and resume all the information in one place.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify;\"><strong>Disclaimer<\/strong>: \u201c<em>The postings on this site are my own and don\u2019t necessarily represent my actual employer positions, strategies, or opinions. The information here was edited to be useful for general purposes, and specific data and identifications were removed to allow reach the generic audience and to be useful for the community. Post protected by copyright<\/em>\u201d&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The 23ai is already available at Cloud and ExaCC as well. It is On-Prem, but it is Cloud too, so, we can use it. Recently I needed to create some databases manually (not using the ExaCc dbaas* utilities) and encountered some interesting details when using dbca. Mainly because at Cloud we are forced to have [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[179,29,77,173,5],"tags":[180,181,183,174,185,184],"class_list":["post-1035","post","type-post","status-publish","format-standard","hentry","category-23ai","category-database","category-engineeredsystems","category-exacc","category-oracle","tag-23ai","tag-cloud","tag-dbca","tag-exacc","tag-oci","tag-tde"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>23ai, DBCA, Cloud, and TDE - Fernando Simon<\/title>\n<meta name=\"description\" content=\"How to create 23ai databases at Cloud (OCI and ExaCC) with dbca using new parameters for TDE. Troubleshooting, error, and solution described.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"23ai, DBCA, Cloud, and TDE - Fernando Simon\" \/>\n<meta property=\"og:description\" content=\"How to create 23ai databases at Cloud (OCI and ExaCC) with dbca using new parameters for TDE. Troubleshooting, error, and solution described.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\" \/>\n<meta property=\"og:site_name\" content=\"Fernando Simon\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-08T19:50:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\" \/>\n<meta name=\"author\" content=\"Simon\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\"},\"author\":{\"name\":\"Simon\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9\"},\"headline\":\"23ai, DBCA, Cloud, and TDE\",\"datePublished\":\"2024-07-08T19:50:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\"},\"wordCount\":944,\"commentCount\":3,\"image\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\",\"keywords\":[\"23ai\",\"Cloud\",\"dbca\",\"ExaCC\",\"oci\",\"tde\"],\"articleSection\":[\"23ai\",\"Database\",\"Engineered Systems\",\"ExaCC\",\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\",\"url\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\",\"name\":\"23ai, DBCA, Cloud, and TDE - Fernando Simon\",\"isPartOf\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\",\"datePublished\":\"2024-07-08T19:50:54+00:00\",\"author\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9\"},\"description\":\"How to create 23ai databases at Cloud (OCI and ExaCC) with dbca using new parameters for TDE. Troubleshooting, error, and solution described.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage\",\"url\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\",\"contentUrl\":\"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fernandosimon.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"23ai, DBCA, Cloud, and TDE\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#website\",\"url\":\"https:\/\/www.fernandosimon.com\/blog\/\",\"name\":\"Fernando Simon\",\"description\":\"Have you hugged your backup today?\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fernandosimon.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9\",\"name\":\"Simon\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g\",\"caption\":\"Simon\"},\"sameAs\":[\"http:\/\/www.fernandosimon.com\"],\"url\":\"https:\/\/www.fernandosimon.com\/blog\/author\/simon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"23ai, DBCA, Cloud, and TDE - Fernando Simon","description":"How to create 23ai databases at Cloud (OCI and ExaCC) with dbca using new parameters for TDE. Troubleshooting, error, and solution described.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/","og_locale":"en_US","og_type":"article","og_title":"23ai, DBCA, Cloud, and TDE - Fernando Simon","og_description":"How to create 23ai databases at Cloud (OCI and ExaCC) with dbca using new parameters for TDE. Troubleshooting, error, and solution described.","og_url":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/","og_site_name":"Fernando Simon","article_published_time":"2024-07-08T19:50:54+00:00","og_image":[{"url":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg","type":"","width":"","height":""}],"author":"Simon","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Simon","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#article","isPartOf":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/"},"author":{"name":"Simon","@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9"},"headline":"23ai, DBCA, Cloud, and TDE","datePublished":"2024-07-08T19:50:54+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/"},"wordCount":944,"commentCount":3,"image":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage"},"thumbnailUrl":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg","keywords":["23ai","Cloud","dbca","ExaCC","oci","tde"],"articleSection":["23ai","Database","Engineered Systems","ExaCC","Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/","url":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/","name":"23ai, DBCA, Cloud, and TDE - Fernando Simon","isPartOf":{"@id":"https:\/\/www.fernandosimon.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage"},"image":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage"},"thumbnailUrl":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg","datePublished":"2024-07-08T19:50:54+00:00","author":{"@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9"},"description":"How to create 23ai databases at Cloud (OCI and ExaCC) with dbca using new parameters for TDE. Troubleshooting, error, and solution described.","breadcrumb":{"@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#primaryimage","url":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg","contentUrl":"https:\/\/www.fernandosimon.com\/blog\/wp-content\/uploads\/2024\/07\/DBCA-TDE-CLOUD.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.fernandosimon.com\/blog\/23ai-dbca-cloud-and-tde\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fernandosimon.com\/blog\/"},{"@type":"ListItem","position":2,"name":"23ai, DBCA, Cloud, and TDE"}]},{"@type":"WebSite","@id":"https:\/\/www.fernandosimon.com\/blog\/#website","url":"https:\/\/www.fernandosimon.com\/blog\/","name":"Fernando Simon","description":"Have you hugged your backup today?","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fernandosimon.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/386da956604bca0d5be5dd52210c1dd9","name":"Simon","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fernandosimon.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a3dbc48de62fffb1829befb4a588d789ec6dc5e05977afabb3407a5f37a16482?s=96&d=mm&r=g","caption":"Simon"},"sameAs":["http:\/\/www.fernandosimon.com"],"url":"https:\/\/www.fernandosimon.com\/blog\/author\/simon\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p5ofTp-gH","_links":{"self":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/posts\/1035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/comments?post=1035"}],"version-history":[{"count":0,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/posts\/1035\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/media?parent=1035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/categories?post=1035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fernandosimon.com\/blog\/wp-json\/wp\/v2\/tags?post=1035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}