Restore Oracle database full backup which was encrypted in Production

 Hi Guy's,

Please find below steps to restore backup which has already encrypted in production.

############# CREATE pfile and add below directory structure to store encryption KEYS ############

/u01/software/prdwallet/tde >>>> But not mention TDE in pfile.

 Below Pfile used to open database.

*.compatible='19.0.0'

*.control_files='/u01/oradata/prd/control01.ctl'

*.db_block_size=8192

*.db_flashback_retention_target=2880

*.db_name='prd'

*.db_create_file_dest='/u01/oradata/prd/'

*.db_create_online_log_dest_1='/u01/oradata/prd/'

*.db_create_online_log_dest_2='/u01/oradata/prd/'

*.diagnostic_dest='/u01/app/oracle'

*.dispatchers='(PROTOCOL=TCP) (SERVICE=prdXDB)'

*.log_archive_dest_1='LOCATION=/u01/oradata/prd/arc'

*.log_archive_format='arch%t_%s_%r.arc'

*.open_cursors=2500

*.processes=1000

*.pga_aggregate_limit=4G

*.pga_aggregate_target=2G

*.sga_target=4G

*.remote_login_passwordfile='EXCLUSIVE'

*.undo_management='AUTO'

*.undo_retention=2289

*.undo_tablespace='UNDOTBS1'

*.wallet_root='/u01/oradata/prd/WALLET'

*.tde_configuration='KEYSTORE_CONFIGURATION=FILE'

*.wallet_root='/u01/software/prdwallet'

*.tde_configuration='KEYSTORE_CONFIGURATION=FILE'

SQL> startup nomount;

ORACLE instance started.

Total System Global Area 4294960104 bytes

Fixed Size                  8881128 bytes

Variable Size             872415232 bytes

Database Buffers         3405774848 bytes

Redo Buffers                7888896 bytes

col host_name for a21

col startup_time for a19

select host_name,instance_name,status,to_char(startup_time,'mm/dd/yyyy hh24:mi:ss') as startup_time from gv$instance;

HOST_NAME             INSTANCE_NAME    STATUS       STARTUP_TIME

--------------------- ---------------- ------------ -------------------

sunread               prd          STARTED      10/27/2024 10:32:25

SQL> recover database using backup controlfile until cancel;

ORA-00283: recovery session canceled due to errors

ORA-38760: This database instance failed to turn on flashback database

SQL> alter database flashback off;

Database altered.

SQL> recover database using backup controlfile until cancel;

ORA-00279: change 736353926 generated at 10/20/2024 20:10:32 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch2_1919_1145696945.arc

ORA-00280: change 736353926 for thread 2 is in sequence #1919

Specify log: {<RET>=suggested | filename | AUTO | CANCEL}

AUTO

ORA-00279: change 736353926 generated at 10/20/2024 20:10:30 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch1_3360_1145696945.arc

ORA-00280: change 736353926 for thread 1 is in sequence #3360

ORA-00308: cannot open archived log

'/u01/oradata/prd/arc/arch1_3360_1145696945.arc'

ORA-27037: unable to obtain file status

SVR4 Error: 2: No such file or directory

Additional information: 7

ORA-01547: warning: RECOVER succeeded but OPEN RESETLOGS would get error below

ORA-01152: file 1 was not restored from a sufficiently old backup <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

ORA-01110: data file 1: '/u01/oradata/prd/system.261.1145696951'

>>>> Backup team Restored missed Archives and Recovery started again <<<<<<<<<<<<<<<

SQL> recover database using backup controlfile until cancel;

ORA-00279: change 736353926 generated at 10/20/2024 20:10:32 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch2_1919_1145696945.arc

ORA-00280: change 736353926 for thread 2 is in sequence #1919

Specify log: {<RET>=suggested | filename | AUTO | CANCEL}

AUTO

ORA-00279: change 736353926 generated at 10/20/2024 20:10:30 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch1_3360_1145696945.arc

ORA-00280: change 736353926 for thread 1 is in sequence #3360

ORA-00283: recovery session canceled due to errors

ORA-28365: wallet is not open <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<-------Need wallet keys

ORA-01112: media recovery not started

########### Execute below commands in production and copy wallet keys to target #################

SQL> ADMINISTER KEY MANAGEMENT CREATE KEYSTORE '/u01/software/kk' IDENTIFIED BY ikea12345#

keystore altered.

SQL> administer key management merge keystore '+DATA/prd/WALLET/tde' identified by "ikea12345#" into existing keystore '/u01/software/kk' identified by "ikea12345#" with backup;

keystore altered.

SQL> SELECT STATUS FROM V$ENCRYPTION_WALLET;

STATUS   

CLOSED

SQL>  ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY ikea12345#

keystore altered.

SQL> SELECT STATUS FROM V$ENCRYPTION_WALLET;

STATUS   

OPEN

SQL> recover database using backup controlfile until cancel;

ORA-00279: change 736353926 generated at 10/20/2024 20:10:32 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch2_1919_1145696945.arc

ORA-00280: change 736353926 for thread 2 is in sequence #1919

Specify log: {<RET>=suggested | filename | AUTO | CANCEL}

AUTO

ORA-00279: change 736353926 generated at 10/20/2024 20:10:30 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch1_3360_1145696945.arc

ORA-00280: change 736353926 for thread 1 is in sequence #3360

ORA-00279: change 736360385 generated at 10/20/2024 20:12:21 needed for thread

ORA-00289: suggestion : /u01/oradata/prd/arc/arch2_1920_1145696945.arc

ORA-00280: change 736360385 for thread 2 is in sequence #1920

ORA-00278: log file '/u01/oradata/prd/arc/arch2_1919_1145696945.arc' no

longer needed for this recovery

ORA-00308: cannot open archived log

'/u01/oradata/prd/arc/arch2_1920_1145696945.arc'

ORA-27037: unable to obtain file status

SVR4 Error: 2: No such file or directory

Additional information: 7

SQL> alter database open resetlogs;

Database altered.

Happy Learning...