ORA-28457
ENCRYPT_NEW_TABLESPACES can only be set to ALWAYS when TABLESPACE_ENCRYPTION is set to AUTO_ENABLE.
Cause
An attempt was made to modify ENCRYPT_NEW_TABLESPACES to a value other than ALWAYS when TABLESPACE_ENCRYPTION is set to AUTO_ENABLE.
Action
Modify TABLESPACE_ENCRYPTION either in the server parameter file (SPFILE) or parameter file (PFILE) before the instance startup to a value other than AUTO_ENABLE, if ENCRYPT_NEW_TABLESPACES need not to be ALWAYS.