ITPub博客

首页 > 数据库 > Oracle > oracle 透明加密TDE在DG中的部分问题

oracle 透明加密TDE在DG中的部分问题

原创 Oracle 作者:wanglinghua0907 时间:2024-01-23 14:07:56 0 删除 编辑

1.如果dg搭建好了后,再主库开的tde(情况一)

备库直接开mrp报错,ORA-28365 wallet is not open

Errors in file /oracle/no/diag/ .trc: ORA-28365: wallet is not open Recovery interrupted! Recovered data files to a consistent state at change 1290462 Completed: alter database recover managed standby database disconnect from session MRPe: Background Media Recovery process shutdown (sjw)


1.1备库创建钱包密钥路径(与主库一致即可)


1.2主库密钥传输到备库的钱包路径


1.3配置备库sqlnet(与主库一致即可)


1.4备库开启钱包

alter system set encryption wallet open identified by "oracle";

SQL> alter system set encryption wallet open identified by "oracle" ; System altered.


1.5开启mrp

alter database recover managed standby database disconnect from session;

alter database recover managed standby database using  current logfile  disconnect from session;

sat Jul 02 2022 alter database recover managed standby database disconnect from session Attempt to start background Managed Standby Recovery process (sjw) sat Jul 02 2022 MRPB started with pid=27, OS id=18d52 MRPB: Background Managed Standby Recovery process started (sjw) started logmerger process Sat Jul 02 2022 Managed Standby Recovery not using Real Time Apply Parallel Media Recovery started with 2 slaves Waiting for all non-current ORLs to be archived... All non-current ORLs have been archived. Media Media Media Media Media Media Media Media Media Recovery Recovery Recovery Recovery Recovery Recovery Recovery Recovery Recovery Log Log Log Log Log Log Log Log 'oracle/arch/l /oracle/arch/l /oracle/arch/l /oracle/arch/l /oracle/arch/l /oracle/arch/l /oracle/arch/l /oracle/arch/l _53_1103888056. dbf _54_1103888056. dbf _55_1103888056. dbf _56_1103888056. dbf _57_1103888056. dbf _58_1103888056. dbf _59_1103888056. dbf _60_1103888056. dbf Waiting for thread sequence 61 (in transit) Completed: alter database recover managed standby database disconnect from session 1


2.主库启用tde后,搭建dg(情况二)

所有步骤都和正常的创建DG步骤一样,只需在拷贝主库备份文件到备库,增加如下两个步骤即可:

 

1) 将主库的密钥文件(两个文件)拷贝到备库,$ORACLE_HOME/network/admin目录。

2) 将主库sqlnet.ora拷贝到备库对应目录($ORACLE_HOME/network/admin目录)。


3.重建主库钱包文件(情况三)

将新创建的钱包文件传送至备库,报错

  alter database recover managed standby database- using current logfile Attanpt to Start background managed standby Recovery process (flccdg) wed Feb 24 09:28:41 2021 MRPO started with pid=31, os id=55536 MRPO: Background Managed standby Recovery process started (flccdg) started I omer er process wed Feb 24 ö9:2 2021 anaged standby Recovery starting Real Time Apply RPO: Back round Media Recovery terminated with error 1110 Errors in Pile ORA-01110: 1: /u01/app/orac1e/oradata/f ccdg/systan . dbf disconnect from session ORA-28374: allet Mana ed standby Recovery not usin Real Time Apply completed: alter datagase recuer managed standby gatabase using current logfile disconnect fr Recovery slave PROO rev-ious ly exited with exception 1110 MRPO: Background Med%a Recovery process shLItdown (fl ccdq)


需要特别注意的是:在创建钱夹后,一旦重新创建主库的加密钱夹,将新更新的钱夹传送至备库,备库也是仍然无法应用归档的,只能重建。在DG架构下,永远不要重建或者删除主库的钱包文件,更新钱包的操作对于备库是无效的,主库的钱包一定要做好备份操作!



来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/69980685/viewspace-3004784/ ,如需转载,请注明出处,否则将追究法律责任。

请登录后发表评论 登录
全部评论
Oracle ACE、sql server、oceanbase数据库专家,拥有7年以上的大型数据库运维经验,主方向oracle,擅长故障排除、诊断,大体量(TB)迁移,异常故障修复等。拥有丰富主导大型项目经验。服务行业包括:运营商、银行、金融业、政府单位、医疗、制造业、高校等等。

注册时间:2020-07-31

  • 博文量
    116
  • 访问量
    88778