Blog

ORA-19913: UNABLE TO DECRYPT BACKUP – SOLUTION

While restoring database, I received below error.

RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of Duplicate Db command at 11/11/2019 04:53:47
RMAN-05501: aborting duplication of target database
RMAN-03015: error occurred in stored script Memory Script
ORA-19870: error while restoring backup piece /u02/work/038_08-Nov-2019_Gouranga_arisg51d_refresh/rman/arisg51p_03-Nov-2019_13-39-15_full_cf.bkp
ORA-19913: unable to decrypt backup

From verification found, this backup was taken with encryption enabled database and there is wallet configure also.

So while you restore, then start the database in ‘nomount’ state and see the below status. If it is closed, then you can’t restore. So follow the below steps to start restore database.

— start in nmount

[oracle@example01 ~]$ sqlplus / as sysdba

SQL> select status from v$encryption_wallet;

STATUS
————————————————————————
CLOSED

SQL> quit

status must be ‘open’

— fix/ Solution

copy the wallets files and configure in sqlnet.ora also, then verify the status

e.g.,

coped below wallet files to your location something like this: /u01/app/oracle/admin//wallet Then, point your wallet in ‘sqlnet.ora’ file.

$ cd $ORACLE_HOME/network/admin
$ cat sqlnet.ora
ENCRYPTION_WALLET_LOCATION =
(SOURCE = (METHOD = FILE)
(METHOD_DATA = (DIRECTORY = /u01/app/oracle/admin/$ORACLE_UNQNAME/wallet)
)
)

SQL> select status from v$encryption_wallet;

STATUS
————————————————-
OPEN

But ensure, to enable encryption while restore the database like what is enabled during backup.

e.g.,

CONFIGURE ENCRYPTION FOR DATABASE OFF; # default
CONFIGURE ENCRYPTION ALGORITHM ‘AES128’; # default

— Encryption enabled with key AES256

RMAN> CONFIGURE ENCRYPTION FOR DATABASE ON;

new RMAN configuration parameters:
CONFIGURE ENCRYPTION FOR DATABASE ON;
new RMAN configuration parameters are successfully stored

RMAN> CONFIGURE ENCRYPTION ALGORITHM ‘AES256’;

new RMAN configuration parameters:
CONFIGURE ENCRYPTION ALGORITHM ‘AES256’;
new RMAN configuration parameters are successfully stored

Note that you can enable the encryption only after restoring the controlfile.

Follow me

Contact us for Training/ Job Support

Caution: Your use of any information or materials on this website is entirely at your own risk. It is provided for educational purposes only. It has been tested internally, however, we do not guarantee that it will work for you. Ensure that you run it in your test environment before using.