Oracle Error ORA-28374: typed master key not found in wallet

In this tutorial, you’ll learn everything about the error “ORA-28374: typed master key not found in wallet” in Oracle, why this error appears and how you can resolve it in simple steps.

Oracle Error Message

This is how the Oracle error message ORA-28374 looks like in general.

ORA-28374: typed master key not found in wallet

Reason for the Error

ORA-28374 is an Oracle error that indicates that the wallet does not contain a typed master key. When the master key used to encrypt or decrypt data is missing or invalid, this error occurs. Here are some scenarios that could result in this error:

You attempted to access encrypted tablespace or redo logs with a typed master key not existing in the wallet.

Here are some examples of scenarios that could trigger this error:

1. Attempting to open a database that was encrypted with a master key that is not available in the wallet:

ALTER DATABASE OPEN;
ORA-28374: typed master key not found in wallet

2. Trying to create a tablespace that is encrypted using a master key that does not exist in the wallet:

CREATE TABLESPACE encrypted_tbs
DATAFILE '/u01/oracle/data/encrypted_tbs01.dbf'
SIZE 10M	
ENCRYPTION USING 'AES256' DEFAULT MASTER_KEY
ORA-28374: typed master key not found in wallet

3. Attempting to encrypt data using a master key that is not present in the wallet:

SELECT ENCRYPT('sensitive_data', 'master_key') FROM dual;
ORA-28374: typed master key not found in wallet

Solution

To resolve this error, ensure that the correct master key is present in the wallet. 

You can try the following alternatives:

• Check the master key information: Check that the master key information is correct and that it was added to the wallet using the proper syntax.
• If the wallet has been corrupted or the master key has been lost, restore the wallet from a backup that contains the correct key.
• Create a new master key and store it in the wallet using the command ‘ALTER SYSTEM SET ENCRYPTION KEY’ if the wallet is missing the master key.

Here is an example of how to recreate a master key using the ALTER SYSTEM command:

ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "new_master_key";

This will create a new master key with the specified password and store it in the wallet. You can then try to encrypt or decrypt the data again using the new key.