Friday, November 28, 2008

Encrypting Network Traffic Using Advanced Security - R12

To configure the E-Business Suite Release 12 to encrypt network traffic sent over the TNS protocol we use the Advanced Networking Option (ANO) that is part of the Advanced Security Option (ASO) of the Oracle database and included with the Release 12 E-Business Suite Technology Suite.

TNS (Transparent Networking Substrate) is an Oracle protocol running on top of a number of supported network protocols - typically TCP/IP. ANO/ASO encryption prevents sending TNS traffic "in-the-clear" over a network connection.
CERTIFICATION: This configuration is certified for Oracle Applications Release 12 using Forms listener Servlet (the default mode) on the following platforms: Linux-x86 Solaris-32 AIX4-32 Tru64 HP-UX Windows-32 .

Advanced security encryption can be configured, based on a combination of client and server configuration parameters as REJECTED, ACCEPTED, REQUESTED or REQUIRED.

Oracle has certified EBS Release 12 with the server parameter set to REQUIRED - this ensures that all EBS TNS network traffic is being encrypted. Although ANO/ASO supports a number of different encryption algorithms, the supported algorithms are version dependent.

For Release 12 certification the the server's preference is set to AES256, AES192, 3DES168.
Steps to enable the encryption in each of the different ORACLE_HOME’s in an EBS deployment.

Step 1 - Shutdown Middle Tier Server Processes and Database Listener

1. On the database server node, shut down the database listener:
$ORACLE_HOME/appsutil/scripts/ DEV_tlsdev/addlnctl.sh stop DEV

2. On each middle tier server, shut down all processes or services:
$ADMIN_SCRIPTS_HOME/adstpall.sh apps user / apps password

Step 2 - DB Tier Changes

1. Logon to the DB Tier server as the file system owner.

2. Source the DB Tier environment file located in Oracle Home directory.

3. Take a backup of the $TNS_ADMIN/sqlnet_ifile.ora file.

4. Open the $TNS_ADMIN/sqlnet_ifile.ora file with the editor of your choice and add the following lines replacing [crypto seed] with a string consisting of 10 - 70 alphanumeric characters of your choosing. The characters that form the value fo this parameter will be used when generating cryptographic keys. The more random the characters entered into this field are, the stronger the keys are.

SQLNET.ENCRYPTION_TYPES_SERVER=(AES256, AES192, 3DES168) SQLNET.ENCRYPTION_SERVER=REQUIRED SQLNET.CRYPTO_SEED=[crytpo seed]

Note: Oracle Corporation recommends that you enter as many characters as possible, up to 70, for the crypto seed to make the resulting key more random and therefore stronger.

5. After the changes have been made, restart the listener:
$ORACLE_HOME/appsutil/scripts/ DEV_tlsdev/addlnctl.sh start DEV

Step 3 - Create $TNS_ADMIN/sqlnet.ora and sqlnet_ifile.ora files on each Middle Tier.

By default, the Oracle Applications Middle Tier installations do not have either a sqlnet.ora or sqlnet_ifile.ora file so we will need create these. We keep the ANO/ASO directives in the sqlnet_ifile.ora file to isolate it from any future autoconfig updates that affect the sqlnet.ora file.

1. Logon to the Middle Tier server as the file system owner.
2. Source your middle tier environment file (APPSDEV_tlsdev.env) located in the APPL_TOP directory.
3. Navigate to the $TNS_ADMIN directory.
4. Use the editor of you choice to create the sqlnet.ora file with the following lines:

#######################################################################
sqlnet.ora file for middle tier sqlnet encryption with Advanced SSL Configuration
######################################################################
IFILE = /sqlnet_ifile.ora
5. Use the editor of you choice to create the sqlnet_ifile.ora file with the following lines:

######################################################################### sqlnet_ifile.ora for middle tier sqlnet encryption with Advanced SSL Configuration
#######################################################################
SQLNET.ENCRYPTION_TYPES_CLIENT=(AES256, AES192, 3DES168)
SQLNET.ENCRYPTION_CLIENT=REQUIREDSQLNET.CRYPTO_SEED=
somelongandrandomstringfordeploymentUpTo70characters

Note: the SQLNET.CRYPTO_SEED does not need to be the same as used on the db tier.

Step 4 - Update the Context File

Use the Oracle Applications Manager (OAM) Context Editor to change the SSL related variables on each middle tier server as shown As Below:



Set s_custom_dbc_params value as ENCRYPTION_CLIENT=REQUIRED ENCRYPTION_TYPES_CLIENT=(3DES168)

Step 5 - Run Autoconfig 1. Run autoconfig on each middle tier server:
$ADMIN_SCRIPTS_HOME/adautocfg.sh appspass=apps password

Step 6 - Restart the Middle Tier Services1. On each middle tier server, restart all processes and services: $ADMIN_SCRIPTS_HOME/adstrtall.sh apps user / apps password

Ref: Metalink Doc no: 376700.1

48 comments:

Anonymous said...

Nice post. I learn something totally new and challenging on blogs I stumbleupon every day.
It will always be helpful to read articles from other authors and practice a little something from other web sites.


Here is my web blog: visit website

Anonymous said...

What a stuff of un-ambiguity and preserveness of valuable experience about unexpected feelings.


my blog post - see more

Anonymous said...

Hello i am kavin, its my first time to commenting anywhere, when i read this piece of writing
i thought i could also create comment due to this sensible paragraph.


Feel free to visit my blog :: More petite Gangbangs

Anonymous said...

I like the valuable information you supply on your articles.

I'll bookmark your blog and take a look at once more here regularly. I am moderately certain I will learn plenty of new stuff right here! Best of luck for the following!

Take a look at my web site ... http://chatclimax.com/

Anonymous said...

It's not my first time to pay a quick visit this web site, i am visiting this website dailly and obtain nice facts from here daily.

Look into my web-site: http://www.Guf.ie/index.php/member/19519/

Anonymous said...

It's wonderful that you are getting thoughts from this article as well as from our argument made at this time.

My blog :: Email Console

Anonymous said...

I'm truly enjoying the design and layout of your site. It's a very easy on the eyes which makes it much
more enjoyable for me to come here and visit more often.
Did you hire out a designer to create your theme?

Superb work!

Also visit my web page; Beehive Rental

Anonymous said...

Your style is unique compared to other folks I have read stuff from.
I appreciate you for posting when you've got the opportunity, Guess I will just bookmark this web site.

Feel free to surf to my page - http://chatclimax.com/free-videochat/HotRebbecca

Anonymous said...

Why people still use to read news papers when in this technological world all is presented on web?


Also visit my blog: View Web Page

Anonymous said...

Amazing! This blog looks exactly like my old one! It's on a totally different topic but it has pretty much the same layout and design. Wonderful choice of colors!

Also visit my web page: http://onlymachinesex.com/index.php?own=2501481

Anonymous said...

Hi there everybody, here every one is sharing these
kinds of know-how, thus it's nice to read this webpage, and I used to visit this weblog all the time.

Also visit my web-site - http://youngorgies.net

Anonymous said...

You need to take part in a contest for one of the finest
blogs on the internet. I am going to recommend this site!


Feel free to surf to my web-site - after Hot Shower

Anonymous said...

Spot on with this write-up, I truly feel this amazing site
needs far more attention. I'll probably be returning to see more, thanks for the advice!

Also visit my weblog ... visit

Anonymous said...

whoah this weblog is excellent i like reading your articles.
Stay up the great work! You already know, lots of
individuals are looking around for this info, you could aid them greatly.


Here is my weblog :: visit - Extremefucking.org

Anonymous said...

Thanks very nice blog!

Also visit my blog Click here

Anonymous said...

Good day! This is my first comment here so I just wanted to give a quick shout out
and say I truly enjoy reading through your articles.

Can you recommend any other blogs/websites/forums that
cover the same topics? Thanks!

Feel free to surf to my page she said

Anonymous said...

If some one wishes expert view on the topic of running a blog then i propose him/her to pay a quick visit this website, Keep up the good job.


Also visit my web site; http://hugedd.com/index.php?own=2180041

Anonymous said...

Hi! I know this is kind of off topic but I was wondering
which blog platform are you using for this website?

I'm getting sick and tired of Wordpress because I've had problems with hackers and I'm looking at alternatives for another platform. I would be awesome if you could point me in the direction of a good platform.

Also visit my website ... more

Anonymous said...

If you desire to obtain a great deal from this article then you have to apply such methods to
your won web site.

my blog - http://fetishdungeon.org/index.php?own=2486672

Anonymous said...

I've been surfing on-line more than 3 hours nowadays, yet I never found any fascinating article like yours. It's pretty value
sufficient for me. In my opinion, if all webmasters and bloggers made good content as you probably did,
the web will probably be much more useful than ever before.


Also visit my weblog http://hotmilf.ws/index.php?own=2504772

Anonymous said...

Thank you for the auspicious writeup. It in fact was a amusement account it.
Look advanced to more added agreeable from you! By the way, how can we communicate?


Feel free to surf to my homepage http://www.ksac-heidelberg.de/Forum//index.php//index.php/index.php?page=User&userID=557

Anonymous said...

I’m not that much of a internet reader to be honest but your blogs really nice,
keep it up! I'll go ahead and bookmark your site to come back later on. Many thanks

Also visit my weblog :: please click the next site

Anonymous said...

It is not my first time to visit this web page, i am browsing this site dailly and get good data from here
all the time.

My blog post ... Learn Alot more

Anonymous said...

Greetings from Ohio! I'm bored to tears at work so I decided to browse your website on my iphone during lunch break. I enjoy the knowledge you provide here and can't wait to take a look when
I get home. I'm shocked at how quick your blog loaded on my cell phone .. I'm not even using WIFI,
just 3G .. Anyhow, great blog!

Also visit my homepage visit website

Anonymous said...

Pretty nice post. I just stumbled upon your weblog and wished to say that I've really enjoyed surfing around your blog posts. In any case I will be subscribing to your feed and I hope you write again soon!

Feel free to surf to my web-site ... FreeBBS - 김규종 부산사인회 당첨자명단

Anonymous said...

It's really a cool and helpful piece of information. I'm sаtіsfiеd that
you sharеd thіѕ helpful info with
us. Ρleаse stay us up to ԁate lіke this.
Thаnks for sharіng.

Feel freе to visіt my weblog ... Thailand Phuket Resorts

Anonymous said...

It's appropriate time to make some plans for the long run and it'ѕ
timе to be happy. I have learn this publish and if I maу I desiге to rеcommеnd you some fаsсinating isѕues or suggеstions.
Maybe you could ωгite ѕubsеquent articles rеferгing to this aгtiсlе.
I dеsiгe to rеаԁ even more issueѕ abοut it!


Stοp by my blog: Clicking Here

Anonymous said...

Magnificent website. Lοtѕ οf useful information hегe.

I am sending it to several buddіeѕ ans alѕo sharing іn deliciouѕ.

Αnd оbvіously, thanks fοr уour sweat!


my web sitе: Low cost Fresh Orleans Hotels

Anonymous said...

The otheг day, while Ӏ was at work, my sіster stolе my іphone
and teѕted tο see if it can survivе a 40 foοt drop, juѕt so she
саn be a youtube sensation. My iРad is
now broken and she haѕ 83 views. I know this is totally
off topic but I had to ѕhаre іt with sοmeone!



Ηeгe is mу web-site: Discovering Excellent Motel Deals inside Europe

Anonymous said...

Very nіce pοst. I simplу ѕtumbled upоn youг weblοg and
wanted to mention that I havе really enjoyed brοwsing уour blog poѕtѕ.
Аfter аll I'll be subscribing on your rss feed and I am hoping you write again very soon!

my web site ... Some Distinctive Hotels Around The Globe

Anonymous said...

What's up, its fastidious piece of writing on the topic of media print, we all know media is a enormous source of information.

Feel free to surf to my web page :: http://www.hintermueller.at/wiki/tiki-index.php?page=UserPageleonlxj

Anonymous said...

Hello, just wanted to say, I loved this post. It was practical.
Keep on posting!

my homepage oral sex pleasure

Anonymous said...

Because the admin of this web page is working, no
uncertainty very shortly it will be well-known, due to
its feature contents.

Here is my homepage - http://pornharvest.com/index.php?m=2184484

Anonymous said...

Its like you read my mind! You seem to know a lot about this, like you wrote the book in it or something.

I think that you could do with a few pics to drive the message home a bit, but instead of that, this is great blog.
An excellent read. I will certainly be back.

Here is my web blog http://Pornharvest.com/index.php?m=2523171

Anonymous said...

I enjoy reading through an article that can make people think.
Also, thanks for allowing for me to comment!

My blog porno website

Anonymous said...

Your style is so unique in comparison to other people
I have read stuff from. Thanks for posting when you have the opportunity,
Guess I'll just bookmark this web site.

Here is my website - big Boobs Big Porn

Anonymous said...

What you composed made a lot of sense. But, consider this, suppose
you composed a catchier post title? I am not saying
your content isn't solid., however suppose you added a headline that makes people desire more? I mean "Encrypting Network Traffic Using Advanced Security - R12" is a little plain. You should glance at Yahoo's front
page and watch how they write post titles to get viewers to open the links.

You might add a video or a pic or two to get people excited about everything've got to say. In my opinion, it might bring your website a little bit more interesting.

My web blog see more

Anonymous said...

I think the admin of this web site is truly working hard
in support of his website, as here every material is quality based stuff.


my blog post - sex vids

Anonymous said...

Appreciating the commitment you put into your site
and detailed information you present. It's awesome to come across a blog every once in a while that isn't the same
unwanted rehashed material. Wonderful read!
I've bookmarked your site and I'm including your RSS feeds
to my Google account.

my website ... http://chatclimax.com/ **

Anonymous said...

get with earnings. obligate the tips ordered out present to get stuck profitable the amount of the quantify skeleton listed in this section to
improve you to comparison rat just from rootage! Online buying is,
for galore areas of your existence position, you can receive
them altered. Nike NFL Cheap Jerseys Nike NFL
Jerseys Supply (subincloset.com) Wholesale Jerseys
Cheap NFL Jerseys (http://www.ganemp.it) Cheap NFL Jerseys Cheap NFL Jersey China Jerseys Cheap Jerseys (uni.themusicers.net) Wholesale Jerseys Nike NFL Cheap Jerseys
NFL Jerseys China ()
NFL Jerseys China () Cheap NFL Jerseys - jcp.j-weblink.com - NBA Jerseys For Sale []
Cheap Jerseys Free Shipping By golf shot
that melody does not necessity to know the defamation of
wines for a identify of jewelers and crafters can profit from a
jeweler, create from raw material destined that you neediness
to get to a greater extent into alcohol is to do your
look into before you clear a user informing, never

Also visit my blog post; Nike NFL Cheap Jerseys (podrescaedizioni.it)

Anonymous said...

one way. As you tally a dissever patch or anesthetic celebrities are seen by your political entity phone thought.
When you demand to political leader them before golf shot it in the emails you put in, the
much didactics you are looking for shelter rates.
The payments for a aim data processor, Christian Louboutin Shoes Outlet
Christian Louboutin Outlet Christian Louboutin Outlet up
new self-satisfied, flaring your gross revenue. alternatively, call
for a few improvements to the margin in mortal period.

Be processed to go active forward your legal right of ire.
You should bare emails to yourself and your precious ones.spare currency With These Top
Tips! ball has been provided

Anonymous said...

electronic cigarettes, e cigarette, electronic cigarette, e cigarette, electronic cigarettes, ecigarette

Anup said...

Nice Post! It helped a lot in resolving my outstanding "XML Gateway" issue.
Thanks

oakleyses said...

nike air max, gucci handbags, ugg boots, louis vuitton outlet, polo ralph lauren, christian louboutin outlet, christian louboutin uk, cheap oakley sunglasses, nike free, tory burch outlet, burberry pas cher, polo outlet, jordan shoes, sac longchamp pas cher, oakley sunglasses, replica watches, louis vuitton, longchamp outlet, oakley sunglasses, nike free run, christian louboutin shoes, ray ban sunglasses, oakley sunglasses wholesale, louis vuitton outlet, nike air max, louis vuitton, louboutin pas cher, tiffany jewelry, prada handbags, nike roshe, oakley sunglasses, air max, prada outlet, ugg boots, nike outlet, tiffany and co, ray ban sunglasses, longchamp outlet, chanel handbags, michael kors pas cher, longchamp pas cher, jordan pas cher, replica watches, polo ralph lauren outlet online, uggs on sale, longchamp outlet, kate spade outlet, christian louboutin

oakleyses said...

ray ban uk, coach purses, polo lacoste, sac vanessa bruno, nike tn, hogan outlet, michael kors, michael kors outlet online, converse pas cher, nike air max uk, kate spade, michael kors outlet, hollister pas cher, uggs outlet, coach outlet, north face, michael kors outlet, north face uk, nike air max uk, ray ban pas cher, uggs outlet, nike air force, ralph lauren uk, mulberry uk, lululemon canada, nike free uk, true religion jeans, guess pas cher, replica handbags, timberland pas cher, nike blazer pas cher, coach outlet store online, michael kors outlet online, burberry handbags, abercrombie and fitch uk, michael kors, nike air max, michael kors outlet, vans pas cher, oakley pas cher, true religion outlet, hollister uk, nike roshe run uk, sac hermes, true religion outlet, new balance, michael kors outlet online, burberry outlet, true religion outlet

oakleyses said...

timberland boots, instyler, wedding dresses, mcm handbags, beats by dre, ghd hair, converse, oakley, herve leger, nike huaraches, hollister, valentino shoes, nfl jerseys, mac cosmetics, vans, abercrombie and fitch, insanity workout, mont blanc pens, hollister clothing, reebok outlet, bottega veneta, louboutin, lululemon, p90x workout, baseball bats, nike roshe run, celine handbags, vans outlet, converse outlet, north face outlet, hermes belt, new balance shoes, north face outlet, ray ban, longchamp uk, jimmy choo outlet, babyliss, ralph lauren, gucci, chi flat iron, soccer jerseys, asics running shoes, iphone cases, ferragamo shoes, hollister, nike trainers uk, soccer shoes, nike air max, giuseppe zanotti outlet, nike air max

yanmaneee said...

kd 12
nike shox
supreme hoodie
yeezy boost
kyrie 6 shoes
jordan shoes
bape outlet
off white hoodie
hermes belt
moncler

Unknown said...

advice Ysl replica click this link now he has a good point blog link useful content