Oracle Key Manager - Synchronizing Keys Between KMA's "Key Pool Backed Up" not consistent across KMA's

Asset ID:	1-72-1644343.1
Update Date:	2014-04-14
Keywords:

Solution Type Problem Resolution Sure

Solution 1644343.1 : Oracle Key Manager - Synchronizing Keys Between KMA's "Key Pool Backed Up" not consistent across KMA's

Applies to:

Oracle Key Manager - Version 2.1 to 3.0 [Release 2.0 to 3.0]
Information in this document applies to any platform.

Symptoms

Receiving error message "Activated Key is not in a Cluster backup".

KMA list shows all 10 members as 100% key pool ready but various levels of "Key Pool Backed Up" from 0-97%.

Changes

Adding new KMAs to the cluster

Cause

Key backup has not been created since adding the new KMAs

Solution

Run a backup from the OKM software > Backup List > Create Backup option.

The OKM backup can also be run from the command line:

Oracle Key Manager: How to use the KMS/OKM Command Line (CLI) Key Backup Utility (Doc ID 1444985.1)

Here are some notes from the OKM Admin guide:

OKM backup are resource-intensive activities that can impact OKM database performance. Plan carefully to determine when and where to perform OKM backups.
Since OKM backups are cluster-wide, they can be performed on KMAs that are not servicing Oracle Database instances. Therefore, it is recommended that you
choose a KMA that is not servicing busy Oracle Database instances.

Attachments

This solution has no attachment