When we have Database Encryption is setup with Master-Clone node in KeySecure.
If Master Node is down,we may get error while Creating database.
When MASTER Node is down in Kesecure:
db2 create db test encrypt
SQL1782N The command or operation failed because an error was encountered
accessing the centralized key manager. Reason code "5:111".
A new master key is automatically added when you create an encrypted database without
specifying the MASTER KEY LABEL option on the CREATE DATABASE command.
Clone servers are considered read only and are only used for retrieving
existing master keys from the centralized keystore. Clone servers are not used when
inserting a new key.
Workaround:
a) Set your master server to your clone IP.
b) Create the master key on KeySecure ahead of time when Master is available before using create db.
Tags:
database
create
master
clone
sql1782n
encrypt
1
The developerWorks Connections Platform is now in read-only mode and content is only available for viewing. No new wiki pages, posts, or messages may be added. Please see our FAQ for more information. The developerWorks Connections platform will officially shut down on March 31, 2020 and content will no longer be available. More details available on our FAQ. (Read in Japanese.)