Oracle Database / Accounts, Security & Access
ORA-28374: investigate a required encryption key that is unavailable
An encrypted file or redo stream can refer to a master key not available in the current keystore. This differs from a simple closed-wallet condition.
Environment and inputs: Oracle Database 19c baseline · SQL*Plus-compatible SQL unless RMAN, DGMGRL, ADRCI or a host shell is specified. Check release, patch level, edition and container first.
Start with this diagnostic
Use the stated SQL, RMAN, DGMGRL or host shell and replace sample names with approved targets. DBA and V$ views need authorized catalog access in the correct container. Do not grant broad privileges for an example.
SELECT con_id, status, wallet_type FROM v$encryption_wallet;Read the result
The query checks current keystore state but cannot prove every required historical key exists. Error and file context identify what recovery needs.
Resolve and verify
Compare key backups and rotation history with the affected file's lineage. Escalate to the key administrator and recovery team for a supported key restoration path.
Operational precautions
Do not generate a new key expecting it to decrypt data protected by a missing old key.