在配置TDE的时候碰到的两个问题

在pdb remote clone的时候，如果source cdb配置了TDE，而target cdb没有配置TDE的话，则会报下面的错误

SQL> create pluggable database cdbs9pdb10002_ccc from cdbs7pdb10002@cdbs7pdb10002_link;
create pluggable database cdbs9pdb10002_ccc from cdbs7pdb10002@cdbs7pdb10002_link
*
ERROR at line 1:
ORA-28365: wallet is not open

2.在配置TDE的时候，如果有的pdb没有open，则这个pdb的tde就需要单独配置master key

在配置TDE的时候，con_id为3的这个pdb处于close的状态，所以配置完后，这个pdb的tde状态不对，为OPEN_NO_MASTER_KEY状态

SQL> column wrl_parameter format a30
SQL> set linesize 180
SQL> select * from v$encryption_wallet;

WRL_TYPE	     WRL_PARAMETER		    STATUS			   WALLET_TYPE		WALLET_OR KEYSTORE FULLY_BAC	 CON_ID
-------------------- ------------------------------ ------------------------------ -------------------- --------- -------- --------- ----------
ASM		     +recoc1/cdbs9/tde/ 	    OPEN			   AUTOLOGIN		SINGLE	  NONE	   NO		      1
ASM						    OPEN			   AUTOLOGIN		SINGLE	  UNITED   NO		      2
ASM						    OPEN_NO_MASTER_KEY		   AUTOLOGIN		SINGLE	  UNITED   UNDEFINED	      3
ASM						    OPEN			   AUTOLOGIN		SINGLE	  UNITED   NO		      5

需要单独为这个pdb配置MASTER KEY
配置MASTER KEY的过程

SQL> alter session set container=cdbs9pdb10004_clone;

Session altered.

SQL> alter pluggable database open read write instances=all;

Pluggable database altered.

SQL> administer key management set encryption key force keystore identified by "WelCome-123#" with backup;

keystore altered.

SQL> select * from v$encryption_wallet;

WRL_TYPE	     WRL_PARAMETER		    STATUS			   WALLET_TYPE		WALLET_OR KEYSTORE FULLY_BAC	 CON_ID
-------------------- ------------------------------ ------------------------------ -------------------- --------- -------- --------- ----------
ASM						    OPEN			   AUTOLOGIN		SINGLE	  UNITED   NO		      3

配置了MASTER KEY之后，则这个con_id所对应的TDE的状态就对了

SQL> alter session set container=cdb$root;

Session altered.

SQL> select * from v$encryption_wallet;

WRL_TYPE	     WRL_PARAMETER		    STATUS			   WALLET_TYPE		WALLET_OR KEYSTORE FULLY_BAC	 CON_ID
-------------------- ------------------------------ ------------------------------ -------------------- --------- -------- --------- ----------
ASM		     +recoc1/cdbs9/tde/ 	    OPEN			   AUTOLOGIN		SINGLE	  NONE	   NO		      1
ASM						    OPEN			   AUTOLOGIN		SINGLE	  UNITED   NO		      2
ASM						    OPEN			   AUTOLOGIN		SINGLE	  UNITED   NO		      3
ASM						    OPEN			   AUTOLOGIN		SINGLE	  UNITED   NO		      5