ORA-46661: keystore not open in root container

In a multi tenant environment, this error comes when you try to open a password-based keystore in a pluggable database and the keystore in root container is no already open. Please note that to open keystore in any pluggable database, the keystore in root container (CDB$ROOT) must be opened first, or alternatively you can use CONTAINER=ALL option while opening keystore in the root container so that keystore for all the pluggable databases is also opened.

ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY [password] CONTAINER=ALL;

Related Articles

• Configuring Transparent Data Encryption (TDE) in 11g
• Configuring Transparent Data Encryption (TDE) in 12c

TDE Related Error Messages

• ORA-46630
• ORA-46633
• ORA-46658
• ORA-28417
• ORA-28354
• ORA-28365