TB100 Oracle TDE-Enabled Virtual Pluggable Databases (vPDBs) May Fail After Delphix Upgrade
Alert Type
Availability
Impact
Virtual pluggable databases (vPDBs) using the Oracle TDE feature may fail to enable or start following an upgrade of the Delphix Continuous Data Engine.
Contributing Factors
The issue can only occur when an affected system was previously running the following Delphix Continuous Data Engine version:
- 6.0.14.0
and is subsequently upgraded to any of the following versions:
- 6.0.15.0
- 6.0.16.0
- 6.0.17.0
- 6.0.17.1
- 6.0.17.2
The issue can only occur when using Oracle's TDE feature with Oracle vPDBs. vPDBs are virtual pluggable databases used with an Oracle Multi-Tenant (MT) configuration. Standard VDBs not using a MT configuration are not impacted.
| Major Release | All Sub Releases |
|---|---|
| 6.0 | 6.0.14.0, 6.0.15.0, 6.0.16.0, 6.0.17.0, 6.0.17.1, 6.0.17.2 |
Symptoms
Following an upgrade of an engine with existing TDE enabled vPDBs, the TDE enabled vPDBs may fail to enable or start.
One or more errors similar may be seen:
The command output text above:
/work/tde/oracle_tde_keystores/sdTDE2_Untitled_8d60fff6-a10f-44d8-a670-bd3e7f236f26/exported_keys/timeflow_0e720d65-4bcd-4357-9970-c5e28dd93ce0/extracted_keys.json (No such file or directory)
Relief/Workaround
The issue may be avoided via one of the following workarounds:
- Do not upgrade to the affected releases, if using Oracle TDE.
- Use a "Delay the Reboot" upgrade. After the delayed-reboot upgrade is completed, you can finalize the upgrade which will reboot the Delphix Engine, if needed.
- Unset the tdeKeyIdentifier via the CLI for each affected vPDB.
sd-tde-test.dcol1 source 'sdTDE2' update *> unset tdeKeyIdentifier sd-tde-test.dcol1 source 'sdTDE2' update *> commit Dispatched job JOB-146 SOURCE_UPDATE job started for "sdTDE2". SOURCE_UPDATE job for "sdTDE2" completed successfully. - An affected vPDB may be rewound or refreshed.
Resolution
This issue is fully resolved in DevOps Data Platform 7.0.0.0 and later releases for Continuous Data Engines.
Additional Information
None