ORA-46650: cannot retrieve information for a master key identifier

<<Back to DB Administration Main Page

SQL> ALTER SESSION SET CONTAINER=PDB01
SQL>ADMINISTER KEY MANAGEMENT EXPORT ENCRYPTION KEYS WITH SECRET "Password_to_protect_export" TO '/u01/app/stage/exp_tde.exp' FORCE KEYSTORE IDENTIFIED BY "KeyStore_Password";

*
ERROR at line 1:
ORA-46650: cannot retrieve information for a master key identifier


Solution: 
To export a master encryption key that is not activated use the EXPORT KEYS command in conjunction with <WITH IDENTIFIER> clause

Check if the Master key is activated or not.

SQL>SELECT KEY_ID,KEY_USE,KEYSTORE_TYPE,CREATOR_PDBNAME,ACTIVATING_PDBNAME,ACTIVATION_TIME FROM V$ENCRYPTION_KEYS;
If Master Key is not activated use below command to export it

SQL> ADMINISTER KEY MANAGEMENT EXPORT ENCRYPTION KEYS WITH SECRET "Password_to_protect_export file " TO '/u01/app/stage/exp_tde.exp' FORCE KEYSTORE IDENTIFIED BY "KeyStore_Password" WITH IDENTIFIER <COMMA SEPRATED LIST OF KEY IDS TO BE EXPORTED> ;