Error
Error Code: ORA-28386

Oracle ORA-28386: PKI Rekey Failure

📦 Oracle Database
📋

Description

The ORA-28386 error occurs in Oracle Database when attempting a PKI certificate-based Master Key Rekey while Tablespace Encryption or a Hardware Security Module (HSM) is active. This configuration is not supported for PKI-based rekey operations and requires alternative methods.
💬

Error Message

ORA-28386: cannot perform a PKI certificate-based Master Key Rekey
🔍

Known Causes

2 known causes
⚠️
Tablespace Encryption Enabled
Tablespace Encryption is enabled for one or more tablespaces, which conflicts with PKI-based Master Key Rekey.
⚠️
HSM Integration Active
The database is configured to use a Hardware Security Module (HSM) for key management, which is incompatible with PKI-based rekey operations.
🛠️

Solutions

Coming Soon

Detailed step-by-step solutions for this error are being prepared. In the meantime, try these general troubleshooting tips:

General Troubleshooting Tips

  • Check the error message carefully for specific details
  • Review recent changes that might have caused the error
  • Search for the exact error code in the official documentation
  • Check log files for additional context
  • Try restarting the application or service