Cloning a PDB with Encrypted Data in a CDB

Ensure that the software keystore of the PDB that you plan to clone is open.
You can query the STATUS column of the V$ENCRYPTION_WALLET view to find if the software keystore is open.

source:

show pdbs;
select * from v$encryption_wallet;

If the wallet is not open, you will see error ORA-28365: wallet is not open.

If the target CDB didn’t have TDE, you should configure and enable the wallet for the database..

target:

alter system set WALLET_ROOT="${ORACLE_BASE}/admin/${ORACLE_SID}/wallet" scope=spfile;
shu immediate
startup
alter system set TDE_CONFIGURATION="KEYSTORE_CONFIGURATION=FILE";
administer key management create keystore identified by dbanotes;
administer key management create LOCAL auto_login keystore from keystore 'C:\oracle\orabase\admin\orcl\WALLET\TDE\' identified by dbanotes;
administer key management set key using tag 'orcl_Tablespace_TDE' force keystore identified by dbanotes with backup using 'TDE_backup';
create pluggable database testpdb from TARGETPDB@LINK_101 create_file_dest='C:\ORACLE\ORABASE\ORADATA\ORCL' keystore identified by dbanotes parallel 16;

Related posts: