Snapsync of dSource Using OKV Fails with RMAN Errors ORA-28407 and RMAN-03009 (KBA10243)

Issue

The snapshot for a dSource fails with the following errors:

RMAN-03009: failure of backup command on DLPX_CHANNEL_1 channel at 07/26/2023 10:36:53
ORA-28407: Hardware Security Module failed with PKCS#11 error CKR_GENERAL_ERROR(5)

                                    
SnapSync of database "DELPHIXDB" on host "100.100.100.100" failed due to RMAN errors received: ORA-28407, RMAN-03009.

Or the following variation:

RMAN-03009: failure of backup command on DLPX_CHANNEL_1 channel at 11/24/2020 17:53:44
ORA-28407: Hardware Security Module failed with PKCS#11 error CKR_FUNCTION_FAILED(6)

The associated dSource database is setup to use Oracle Key Vault (OKV).

Applicable Delphix Versions

Click here to view the versions of the Delphix engine to which this article applies

Date	Release
Aug 24, 2023	14.0.0.0
Jul 24, 2023	13.0.0.0
Jun 21, 2023	12.0.0.0
May 25, 2023	11.0.0.0
Apr 13, 2023	10.0.0.0 \| 10.0.0.1
Mar 13, 2023 \| Mar 20, 2023	9.0.0.0 \| 9.0.0.1
Feb 13, 2023	8.0.0.0
Jan 12, 2023	7.0.0.0
Releases Prior to 2023
Major Release	All Sub Releases
6.0	6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0, 6.0.2.1, 6.0.3.0, 6.0.3.1, 6.0.4.0, 6.0.4.1, 6.0.4.2, 6.0.5.0, 6.0.6.0, 6.0.6.1, 6.0.7.0, 6.0.8.0, 6.0.8.1, 6.0.9.0, 6.0.10.0, 6.0.10.1, 6.0.11.0, 6.0.12.0, 6.0.12.1, 6.0.13.0, 6.0.13.1, 6.0.14.0, 6.0.15.0, 6.0.16.0, 6.0.17.0, 6.0.17.1, 6.0.17.2
5.3	5.3.0.0, 5.3.0.1, 5.3.0.2, 5.3.0.3, 5.3.1.0, 5.3.1.1, 5.3.1.2, 5.3.2.0, 5.3.3.0, 5.3.3.1, 5.3.4.0, 5.3.5.0, 5.3.6.0, 5.3.7.0, 5.3.7.1, 5.3.8.0, 5.3.8.1, 5.3.9.0
5.2	5.2.2.0, 5.2.2.1, 5.2.3.0, 5.2.4.0, 5.2.5.0, 5.2.5.1, 5.2.6.0, 5.2.6.1
5.1	5.1.0.0, 5.1.1.0, 5.1.2.0, 5.1.3.0, 5.1.4.0, 5.1.5.0, 5.1.5.1, 5.1.6.0, 5.1.7.0, 5.1.8.0, 5.1.8.1, 5.1.9.0, 5.1.10.0
5.0	5.0.1.0, 5.0.1.1, 5.0.2.0, 5.0.2.1, 5.0.2.2, 5.0.2.3, 5.0.3.0, 5.0.3.1, 5.0.4.0, 5.0.4.1, 5.0.5.0, 5.0.5.1, 5.0.5.2, 5.0.5.3, 5.0.5.4

Resolution

For RMAN to work when Oracle Key Vault is configured, the environment variable OKV_HOME must be specified in the session where RMAN is invoked. For bash shell, add the following to the Delphix environment user's .bashrc file:

export OKV_HOME=<customer_okv_home_path>

If the Delphix environment user does not use the bash shell, add the above value to that shell's initialization file.