BI Publisher Key Upgrade – Expect Higher Bit Strength Without Clearing Existing Customer Keystore
Current Situation: When Oracle generates a new BI Publisher key with higher bit strength, it removes all existing PGP keys configured for downstream systems. Following this, customers are required to manually re‑upload all necessary keys through the PGP UI. Additionally, Oracle does not currently provide an import/export capability for the keystore, which further increases the manual effort required.
This behavior impacts all downstream systems and results in a high‑impact, time‑consuming process for customers, particularly in environments with multiple integrations dependent on PGP encryption.
At present, Oracle does not offer any workaround to upgrade the key strength to a higher bit level without wiping the existing keys. Therefore, we recommend that Oracle implement a mechanism that allows BI Publisher key upgrades