ORA-28386: cannot perform a PKI certificate-based Master Key Rekey Cause: A PKI certificate-based Master Key Rekey was attempted when Tablespace Encryption or HSM was in use. Action: Perform a symmetric Master Key Rekey or disable Tablespace Encryption for all tablespaces.