Any best practice for Key Management with Oracle Obfuscation?

Hi,
I was wondering if anyone is aware if there are any best practices regarding key management when using Oracle's DBMS_OBFUSCATION_TOOLKIT? I'm particularly interested in how we can protect the encryption/decryption key that we would use.
Thanks,
Jim

Oracle offers this document, which includes a strategy for what you're after:
http://download-west.oracle.com/docs/cd/B13789_01/network.101/b10773/apdvncrp.htm#1006234
-Chuck

Similar Messages

Best practice for audit management

Hi,
Is there any best practice for audit management in SAP ?

Hi,
You can check these links and white papers which explains the business scenarios and best practices
http://www50.sap.com/businessmaps/9AD1FC0540D0479CA76C4CA1EE9AF668.htm
http://www.sap.com/solutions/business-suite/erp/brochures/index.epx - "Audit management with SAP software".
Regards,
Keerthi

Basic Strategy / Best Practices for System Monitoring with Solution Manager

I am very new to SAP and the Basis group at my company. I will be working on a project to identify the best practices of System and Service level monitoring using Solution Manager. I have read a good amount about SAP Solution Manager and the concept of monitoring but need to begin mapping out a monitoring strategy.
We currently utilize the RZ20 transaction and basic CCMS monitors such as watching for update errors, availability, short dumps, etc.. What else should be monitored in order to proactively find possible issues. Are there any best practices you all have found when implimenting Monitoring for new solutions added to the SAP landscape.... what are common things we would want to monitor over say ERP, CRM, SRM, etc?
Thanks in advance for any comments or suggestions!

Hi Mike,
Did you try the following link ?
If not, it may be useful to some extent:
http://service.sap.com/bestpractices
---> Cross-Industry Packages ---> Best Practices for Solution Management
You have quite a few documents there - those on BPM may also cover Solution Monitoring aspects.
Best regards,
Srini
Edited by: Srinivasan Radhakrishnan on Jul 7, 2008 7:02 PM

Best practices for apps integration with third party systems ?

Hi all
I would like to know if there is any document from oracle or from your own regarding best practices for apps integration with third party systems.
For example, in particular, let's say we need customization in a given module(ex:payables) need to provide data to a third party system, consider following:
outbound interface:
1)should third party system should be given with direct access to oracle database to access a particular payments data information table/view to look for data ?
2) should oracle create a file to third party system, so that it can read and do what it need to do?
inbound:
1) should third party should directly login and insert data into tables which holds response data?
2) again, should third party create file and oralce apps will pick up for further processing?
again, there could be lot of company specific scenarios like it has to be real time or not... etc...
How does companies make sure third party systems are not directly dipping into other systems (oracle apps/others), so that it will follow certain integration best practices.
how does enterprise architectute will play a role in this? can we apply SOA standards? should use request/reply using Tibco etc?
Many oracle apps implementations customizations are more or less directly interacting with third party systems by including code to login into respective third party systems and vice versa.
Let me your know if you have done differently and that would help oracle apps community.
thanks
rrb.

you want to send idoc to third party system (NONSAP).
what kind of system is it? can it handle http requests
or
can it handle webservice?
which version of R/3 you are using?
what is the mechanism the receiving system has, to receive data?
Regards
Raja

How to handle multiple site to site IPsec vpn on ASA, any best practice to to manage multiple ipsec vpn configrations

how to handle multiple site to site IPsec vpn on ASA, any best practice to to manage multiple ipsec vpn configurations
before ver 8.3 and after version 8.3 ...8.4.. 9 versions..

Hi,
To my understanding you should be able to attach the same cryptomap to the other "outside" interface or perhaps alternatively create a new crypto map that you attach only to your new "outside" interface.
Also I think you will probably need to route the remote peer ip of the VPN connection towards the gateway IP address of that new "outside" and also the remote network found behind the VPN connection.
If you attempt to use VPN Client connection instead of L2L VPN connection with the new "outside" interface then you will run into routing problems as naturally you can have 2 default routes active at the sametime (default route would be required on the new "outside" interface if VPN Client was used since you DONT KNOW where the VPN Clients are connecting to your ASA)
Hope this helps
- Jouni

Best practice for sharing data with model window

Hi team,
what would the best practice for sharing data with a modal
window be ? I use a modal window to display record details from a
record list, but i am not quite sure how to access the data from
the components in the main application in the modal window.
Any hints would be welcome
Best
Frank

Pass a reference to the parent into the modal popup. Then you
can reference anything in the parent scope.
I haven't done this i 2.0 yet so I can't give you code. I'll
post if I do.
Oh, also, you can reference the parent using parentDocument.
So in the popup you could do:
parentDocument.myPublicVariable = "whatever";
Tracy

Best Practices for Content Management

Hi All,
Could anybody suggest me what are the best practices for Content Management.
Regards,
Tom

Hi Rajan,
Even I want the same. I shall be very thankfull to you if you can send me also.
My mail ID is [email protected]
Best Regards,
Chamkaur
Message was edited by:
Chamkaur Brar

Best Practices for Configuration Manager

What all links/ documents are available that summarize the best practices for Configuration Manager?
Applications and Packages
Software Updates
Operating System Deployment
Hardware/Software Inventory

Hi,
I think this may help you
system center 2012 configuration manager best practices
SCCM 2012 task-sequence best practices
SCCM 2012 best practices for deploying application
Configuration Manager 2012 Implementation and Administration
Regards, Ibrahim Hamdy

Any "best practices" for managing a 1.3TB iPhoto library?

Does anyone have any "best practices" or suggestions for managing and dealing with a large iPhoto library? I currently have a 1.3 TB library. This is made up of anything shot in the past 8 years culminating with the past 2 years being 5D Mark II images. This also includes a big dose of 1080P video shot with the camera. These are only our family photos so I would hate to break up the library into years as that would really hurt a lot of iPhotos "power".
It runs fine in day to day use, but I recently tried to upgrade to iPhoto 11 and it crashes repeatedly during the upgrading library process.
(I have backups, so no worries there.)
I just know with Lion and iPhoto 9 being a bit old my upgrade day is coming and I'm not sure what my path is.

If you have both versions of iPhoto on your Mac then try the following; While running iPhoto 09 create a new, test library and import a few photos into it. Then try to convert that test library with iPhoto 11. If it converts OK then your big library is causing the problem.
If that's the case you can try rebuilding your working library as follows: make a temporary, backup copy of the library and try the following:
launch iPhoto with the Command+Option keys held down and rebuild the library.
select the options identified in the screenshot.
Click to view full size
Once rebuild try converting it to iPhoto 11.
NOTE: if you already have a backup copy of your library you don't need to make the temporary backup copy.
OT

Best Practice for certificate management for security

We have been working on moving toward future implementation of document encryption and electronic signatures using Adobe Acrobat 9 Standard. I have read 21 CFR 11, and accompanying guidances. Are there any best practice recommendations for how to meet these standards using this technology?
There are some requirements that I am unsure of how to best implement.
How should we document that we have verified the identity of the individual?
How should we periodically force revision of passwords, or document that this is done since no one knows each other’s passwords?
How should we manage certifications so that we can show we deactivate obsolete ones?
How do we monitor to detect attempts at unauthorized access/use of electronic signatures?
If our organization wants to become our own certification authority, what documentation do we need or process should we use to validate our certificates?

Hi Shadya10,
Those are some pretty big questions! I'm not saying that your company can't become a CA because obviously there are companies that have, but this is almost something that happens at the state level if your not already intimate with PKI. Just from the tenor of your questions I'd suggest you contract with a reputable, existing CA to provide your PKI infrastructure. I could explain key management and how revocation checking works, but really if you're asking in an Adobe forum this is way more than you want to be dealing with.
If you're really interested you need to start with reading RFC 5280.
Steve

Best Practices for BI, ADF and Oracle Forms installations on Weblogic

Hi, I'm researching options on upgrading to Oracle 11g Middleware. My company currently has Oracle Forms 10g running on Oracle Application Server.
We are interested in using Oracle Forms 11g, ADF and Jdeveloper, and Business Intelligence with Oracle's Weblogic 10.3.5.
Is there any whitepapers or documentation on best practices for installing alll of these components together?
For instance, can ADF ( with JSF 2.x ) be installed in the same domain as Oracle Forms 11g but use different managed servers?
Will Business Intelligence need to be in a seperate Oracle Home with it's own weblogic installation? I spend a lot of time trying to get the JSF upgraded to 2.x in the Business Intelligence installation and could not get it to work.
I know it's a pretty broad question but thank you for any direction on this.

Thanx for the reply! I read through the documents and they are very good at explaining how to install the different components individually. I still can't find much on installing them together. I hope it's not just going to be a trial and error thing.
So far I've installed done the following successfully:
Installed 10.3.5 weblogic
Forms and Reports 11g on top of 10.3.5
I've created an additional managed server for our ADF applications.
My next step is upgrading the JSF to 2.x. I would have to stage patches 12917525 and 12979653. I'm afraid it will break the forms and reports though. Any ideas?

JSF - Best Practice For Using Managed Bean

I want to discuss what is the best practice for managed bean usage, especially using session scope or request scope to build database driven pages
---- Session Bean ----
- In the book Core Java Server Faces, the author mentioned that most of the cases session bean should be used, unless the processing is passed on to other handler. Since JSF can store the state on client side, i think storing everything in session is not a big memory concern. (can some expert confirm this is true?) Session objects are easy to manage and states can be shared across the pages. It can make programming easy.
In the case of a page binded to a resultset, the bean usually helds a java.util.List object for the result, which is intialized in the constructor by query the database first. However, this approach has a problem: when user navigates to other page and comes back, the data is not refreshed. You can of course solve the problem by issuing query everytime in your getXXX method. But you need to be very careful that you don't bind this XXX property too many times. In the case of querying in getXXX, setXXX is also tricky as you don't have a member to set. You usually don't want to persist the resultset changes in the setXXX as the changes may not be final, in stead, you want to handle in the actionlistener (like a save(actionevent)).
I would glad to see your thought on this.
--- Request Bean ---
request bean is initialized everytime a reuqest is made. It sometimes drove me nuts because JSF seems not to be every consistent in updating model values. Suppose you have a page showing parent-children a list of records from database, and you also allow user to change directly on the children. if I hbind the parent to a bean called #{Parent} and you bind the children to ADF table (value="#{Parent.children}" var="rowValue". If I set Parent as a request scope, the setChildren method is never called when I submit the form. Not sure if this is just for ADF or it is JSF problem. But if you change the bean to session scope, everything works fine.
I believe JSF doesn't update the bindings for all component attributes. It only update the input component value binding. Some one please verify this is true.
In many cases, i found request bean is very hard to work with if there are lots of updates. (I have lots of trouble with update the binding value for rendered attributes).
However, request bean is working fine for read only pages and simple binded forms. It definitely frees up memory quicker than session bean.
----- any comments or opinions are welcome!!! ------

I think it should be either Option 2 or Option 3.
Option 2 would be necessary if the bean data depends on some request parameters.
(Example: Getting customer bean for a particular customer id)
Otherwise Option 3 seems the reasonable approach.
But, I am also pondering on this issue. The above are just my initial thoughts.

Best practice for a site with a lot of images?

I am working on a site that will have over a hundred images
and I wanted to see what is the best practice for designing a site
like this. Should a go with xml(please give examples or
explanation), a text file or just loadMovie("image1project1.jpg",
"bottomsec") with named external images that will stay the same.
Any help is appreciated on staying up to date with this kind of
site.
Thanks,
Randy

ok I am new please be nice - I think I want to set it up like
this
<project1>
<section>Architecture</section>
<name>New Building for CREATiVENESS</name>
<comment>The major challenge to designing this new
tower was the site constraints a small 3 acre urban corner site.
It is located adjacent to a community center to facilitate extended
use in the evenings and weekends for the entire community.
</comment>
<thumb>thumbs/project1.jpg</thumb>
<img1>images/project1img1.jpg</img1>
<img2>images/project1img2.jpg</img2>
<img3>images/project1img3.jpg</img3>
<img4>images/project1img4.jpg</img4>
</project1>
<project2>
<section>Interiors</section>
<name>New Building for Me</name>
<comment>The major challenge to designing this new
tower was the site constraints a small 3 acre urban corner site.
It is located adjacent to a community center to facilitate extended
use in the evenings and weekends for the entire community.
</comment>
<thumb>thumbs/project2.jpg</thumb>
<img1>images/project2img1.jpg</img1>
<img2>images/project2img2.jpg</img2>
<img3>images/project2img3.jpg</img3>
<img4>images/project2img4.jpg</img4>
</project2>
<project3>
<section>Architecture</section>
<name>New Building for You</name>
<comment>The major challenge to designing this new
tower was the site constraints a small 3 acre urban corner site.
It is located adjacent to a community center to facilitate extended
use in the evenings and weekends for the entire community.
</comment>
<thumb>thumbs/project3.jpg</thumb>
<img1>images/project3img1.jpg</img1>
<img2>images/project3img2.jpg</img2>
<img3>images/project3img3.jpg</img3>
<img4>images/project3img4.jpg</img4>
</project3>
<project4>
<section>Interiors</section>
<name>New Building for that guy</name>
<comment>The major challenge to designing this new
tower was the site constraints a small 3 acre urban corner site.
It is located adjacent to a community center to facilitate extended
use in the evenings and weekends for the entire community.
</comment>
<thumb>thumbs/project4.jpg</thumb>
<img1>images/project4img1.jpg</img1>
<img2>images/project4img2.jpg</img2>
<img3>images/project4img3.jpg</img3>
<img4>images/project4img4.jpg</img4>
</project4>
but I am not sure of the way to create the way to run through
it to find if it is in a section to put it in the menu and then to
call the images and text once they are in a project area. I dont
know if the
this.firstChild.nextSibling.childNodes[0].childNodes[2]
is the best way to call things in the file. Any help is
appreciated. Please let me know what are the best practices and
easiest way to work with a large xml file.
Thanks,
Randy

Any Best Practices for Guest Access?

Looking to create a guest access WLan so that Vendors can have internet access along with vpn into their own network while disallowing access to our internal systems.
I have created a Guest WLan and configured it on the WLC side. I think all I have to do now is to configure the core switch with athe New 99 Vlan along with configuring the trunk ports connected to the WLC's.
My question is, am I missing anything in the setup? and are there any "best practices" wen it comes to Guest access? I am hoping to use web-passthru authentication. I dont believe this requires any AAA or Radius servers which we dont have set up. I will probably just want a single "guest" account which will provide internet access without allowing access to the internal lan. Am I on the right track here?

***************Guest WLC****************** (Cisco Controller) >show mobility summary Symmetric Mobility Tunneling (current) .......... Enabled Symmetric Mobility Tunneling (after reboot) ..... Enabled Mobility Protocol Port........................... 16666 Default Mobility Domain.......................... DMZ Multicast Mode .................................. Disabled Mobility Domain ID for 802.11r................... 0x43cd Mobility Keepalive Interval...................... 10 Mobility Keepalive Count......................... 3 Mobility Group Members Configured................ 2 Mobility Control Message DSCP Value.............. 0 Controllers configured in the Mobility Group MAC Address IP Address Group Name Multicast 00:19:aa:72:2e:e0 10.192.60.44 Champion Corp 0.0.0.0 00:19:aa:72:39:80 10.100.100.20 DMZ 0.0.0.0 (Cisco Controller) > ***************Corp WLC***************** (Cisco Controller) >show mobility summary Symmetric Mobility Tunneling (current) .......... Enabled Symmetric Mobility Tunneling (after reboot) ..... Enabled Mobility Protocol Port........................... 16666 Default Mobility Domain.......................... Champion Corp Multicast Mode .................................. Disabled Mobility Domain ID for 802.11r................... 0x46d5 Mobility Keepalive Interval...................... 10 Mobility Keepalive Count......................... 3 Mobility Group Members Configured................ 2 Mobility Control Message DSCP Value.............. 0 Controllers configured in the Mobility Group MAC Address IP Address Group Name Multicast IP Status 00:19:aa:72:2e:e0 10.192.60.44 Champion Corp 0.0.0.0 Up 00:19:aa:72:39:80 10.100.100.20 DMZ 0.0.0.0 Up (Cisco Controller) >

What are the best practices for Database management and performance tuning?

Hello,
I want to ensure that I am using the best practices for managing and maintaining our Database.
Is there any documentation out there that outlines how to maintain and ensure top performance out of our database?
Thank you!
John Sefton

I appreciate the responses, however this is not the information I am looking for.
I am specificaly looking for best practices invloving the managment and performance tuning.
Example: are their tools that I can install that will monitor the size and response time of the database and alert me if there is degradation in performance?
Are there specific periodic activities I should be doing to garuntee that my database will continue to function that way it is supposed to?
Or is this a fire and forget solution that does not need this attention?

Any best practice for Key Management with Oracle Obfuscation?

Similar Messages

Maybe you are looking for