Troubleshooting

Oracle error messages can sometimes describe symptoms rather than the root cause. If you see an unfamiliar error, consult Oracle documentation and trusted support resources before attempting to resolve it. If you are still unable to resolve the error, contact Oracle support.

If you edit an Oracle configuration file, use a plain text editor running on the host. Do not copy and paste file contents using a rich-text editor, because it may insert hidden characters that are difficult to detect and can prevent the file from working. Entrust also recommends that you avoid copying files (including library files) onto a UNIX host via a Windows intermediary.

An SQL command produces no output, or unexpected output or an error

  1. Try reconnecting to the database.

  2. If that does not work, try bouncing the database.

After changing a configuration file, database behavior does not change

  1. Try reconnecting to the database.

  2. If that does not work, try bouncing the database.

ORA-28367: wallet does not exist

  1. Check that you have correctly installed and configured the Entrust PKCS#11 library.

  2. Try reconnecting to the database.

  3. Try bouncing the database.

  4. Try restarting the Entrust hardserver.

ORA-28367: cannot find PKCS11 library

  1. Ensure that you have the correct permissions to use the /opt/oracle/extapi/… directory.

  2. Check that you are using a library built for the correct local architecture (32-bit or 64-bit).

  3. Check that you are using the appropriate Java version (32-bit or 64-bit).

  4. See the advice given above about editing or copying Oracle files.

  5. Try reconnecting to the database.

  6. Re-copy the libcknfast.so library file to /opt/oracle/extapi/.

  7. In the ORACLE_BASE/extapi directory, create a link named libcknfast.so to the actual NFAST_HOME/toolkits/pkcs11/libcknfast.so file.

ORA-28353: failed to open wallet

  1. Check that you have set up your cknfastrc file with the correct contents.

  2. Ensure that the HSM wallet passphrase is correct.

  3. If OCS or Softcard key protection is used, ensure that the name and passphrase are correct and are separated by a | or a :.

  4. If you have migrated from an Oracle wallet to an HSM wallet, you must update the passphrase.

ORA-00600: internal error code

arguments: [kzthsmgmk: C_GenerateKey], [6], [], [], [], [], [], []

  1. Ensure that you have added the oracle user to the nfast group. In some cases, you may need to log out and log back in as the oracle user for this to take effect.

  2. If a FIPS 140 Level 3 Security World is in use, ensure that an OCS card is inserted in the HSM slot.

ORA-12162: TNS: Net service name is incorrectly specified

  1. Check that you have correctly set the value of ORACLE_SID in your local environment.