OCI-28460
ENCRYPT_NEW_TABLESPACES can only be set to DDL when TABLESPACE_ENCRYPTION is set to DECRYPT_ONLY.
Cause
An attempt was made to modify ENCRYPT_NEW_TABLESPACES to a value other than DDL when TABLESPACE_ENCRYPTION is set to DECRYPT_ONLY.
Action
Modify TABLESPACE_ENCRYPTION either in the server parameter file (SPFILE) or parameter file (PFILE) before the instance startup to a value other than DECRYPT_ONLY, if ENCRYPT_NEW_TABLESPACES need not to be DDL.