Error
Error Code:
ORA-28386
Oracle ORA-28386: PKI Rekey Failure
Description
The ORA-28386 error occurs in Oracle Database when attempting a PKI certificate-based Master Key Rekey while Tablespace Encryption or a Hardware Security Module (HSM) is active. This configuration is not supported for PKI-based rekey operations and requires alternative methods.
Error Message
ORA-28386: cannot perform a PKI certificate-based Master Key Rekey
Known Causes
2 known causesTablespace Encryption Enabled
Tablespace Encryption is enabled for one or more tablespaces, which conflicts with PKI-based Master Key Rekey.
HSM Integration Active
The database is configured to use a Hardware Security Module (HSM) for key management, which is incompatible with PKI-based rekey operations.
Solutions
Coming SoonGeneral Troubleshooting Tips
- Check the error message carefully for specific details
- Review recent changes that might have caused the error
- Search for the exact error code in the official documentation
- Check log files for additional context
- Try restarting the application or service