How move Oracle Certificate Authority on other server
Hello!!!
I am planning move Oracle Certificate Authority
to another host with certificates and so on.
Can you help me, I cannot find any documentation.
Hi,
You can start with some value say 40% of your physical memory allocate to SGA (SGA_TARGET) and see your database performance. Then monitor the use of SGA and then can decide on the add or reduce it. There is no direct rule for sizing it purely depends on your application behavior and amount of data and many other factors.
This will be continuous process, you need to start with some reasonable value.
Cheers,
Dilipkumar Patel.
Similar Messages
-
SSL certificates and/ or Oracle Certificate Authority
Our Oracle infrastructure is as follows:
1.Database server
(a)Oracle 9i R2 database
(b) Oracle ApEx 2.2
2. Infrastructure server
(a) Oracle 10g (9.0.4.x.x) Infrastructure
(b) OID - configured as external authentication to Microsoft 2003 Active Directory LDAP version 3
(c) SSO - configured as Windows Native authentication
3. Application server
(a)Oracle 10g (9.0.4.x.x) Forms and reports server
Network traffic currently is not encrypted. All we need is to ensure that network traffic is encrypted between the the end-user PC and all servers (database or app server)
I was reading through Oracle Certificate Authority and Secure Sockets Layer.
1. Is there a difference between the two products?
2. Which product would be best to ensure the encryption (authentication is provided through MS LDAP)
Thanks,
MayuraCertificate authority and SSL are two completely different concepts. They can be related but are by no means similar.
SSL is a service or a feature, not a product. SSL is used to encrypt the traffic. Part of SSL is the use of certificates for authentication. A server or user would pass a certificate as part of an SSL transmission.
The certificates used for enrypted transmission(SSL), can be obtained from the Oracle Certificate Authority(OCA), or by a third party certificate authority. OCA is not required to use SSL.
To achieve a fully encrypted envrinment, you would need to use SSL at several layers. This would be done with or without the use of the Oracle certificate authority.
1. From the web browser to the middle tier
2. End user to database
3. from the middle tier to OID
4. from the middle tier to the database
5. From OID to active directory -
Oracle Certificate Authority OCA and SSL Immlementation
Hi
Is anybody can clear that:
1) Does OCA only work on intranet or it does work internet also.
2) What is the difference between OCA and Verisign or any other third party CA
3) What are the benifits for OCA
4) What are the advantages and disadvantages for both of them
5) what are the main steps invloved to implement OCA and SSL
I'll be very appraciated, if anybody give me the answers as soon as possible. Please gIve me the answers whichever you knows very well.
Thanks in Advance
Munir MuhammadCertificate authority and SSL are two completely different concepts. They can be related but are by no means similar.
SSL is a service or a feature, not a product. SSL is used to encrypt the traffic. Part of SSL is the use of certificates for authentication. A server or user would pass a certificate as part of an SSL transmission.
The certificates used for enrypted transmission(SSL), can be obtained from the Oracle Certificate Authority(OCA), or by a third party certificate authority. OCA is not required to use SSL.
To achieve a fully encrypted envrinment, you would need to use SSL at several layers. This would be done with or without the use of the Oracle certificate authority.
1. From the web browser to the middle tier
2. End user to database
3. from the middle tier to OID
4. from the middle tier to the database
5. From OID to active directory -
Hi,
Can Anybody share me the information regarding Common reason for Mirage Server Failure in Clustered Environment.
And how clients will be switched to other server in a cluster to continue their operations from the failed server.
Regards,
Bathesha CHello,
if you have more than one mirage server configured with Load balancing (LB or MSFTNLB) the client would disconnect from the faulting server and then reconnect to an other server to progress with the action as before.
All Mirage server are stateless and share the same SIS (single instance store) so any server can update or create CVD file set for an client.
Hope that helps. -
How can move Grid Control Repository to other server
hi,
We need to move our Oracle Grid Control Repository to Other server due to some Server Issuse....can someone helpme out......
OMR and OMA : Server A (Windows 2003 Server)
OMS : Server B (Windows 2003 Server)
Target Server : Server C (Windows 2003 Server)
Movement : Server A -----> Server C
Please help me someone.....
Thanks
JayPlease Refer the below doc for migration
http://download.oracle.com/docs/cd/B16240_01/doc/em.102/e10954/repository.htm#CHDBHDDC -
Hello,
I am a new IT Manager at this company and need assistance big time. Their environment looks as follows:
Server 1. Domain Controller Server (Windows Server 2008 R2 Standard) running active directory.
Server 2. Email Server (Windows Server 2008 R2 Standard) running Exchange Server 2010 .
* Note. No back ups to work with aside from whats mentioned below.
DC had a virus infection causing a lot of issues on the shared network drives 2 days ago locking up all the files with a crypto ransom virus. Running Avast suppressed the infection. Had to recover the file shares which luckily had a back up.
The issue is that the Exchange Server 2 post this lost connectivity with the AD Server 1. Exchange Server 2 when launching EMC could not launch the console stating the following:
"No Exchange servers are available in any Active Directory sites. You can’t connect to remote
Powershell on a computer that only has the Management Tools role installed."
Shortly after I found that it is possible the EMC launcher was corrupt and needed to be reinstalled following another blog post. I deleted the exchange management console.msc per instructions only to discover I couldnt relaunch it because there was
no way how. So I copied another msc file that happened to be on the DC Server 1 back to Exchange Server 2 and got it to launch again.
Another post said that it might be an issue with the Domain Account for the Computer, so to delete it in the AD Server 1 only to find that rejoining it from Exchange Server 2 using Computer>Properties> Chage Settings > Change is greyed out because
it is using the Certificate Authority Service.
I tried manually re-adding the computer in AD and modeling permissions after another server in group settings but no go. After this I was unable to login to the Exchange Server 2 with domain accounts but only local admin, receiving the following Alert:
"The Trust Relationship between this workstation and primary domain failed."
I tried running the Power Shell tools on Exchange Server 2 to rejoing and to reset passwords for domain accounts as noted in some other blogs but no luck as the Server 2 could not make the connection with Server1 or other errors it kept spitting out.
I also during the investigation found the DNS settings were all altered on both the Server 1 and Server 2 which I luckily was able to change back to original because of inventorying it in the beginning when I started.
I need help figuring out if I need to rejoin the Exchange Server 2 manually by disabling the Certificate Authority Service (or removing the CA as listed here:
https://social.technet.microsoft.com/Forums/exchange/en-US/fb23deab-0a12-410d-946c-517d5aea7fae/windows-server-2008-r2-with-certificate-authority-service-to-rejoin-domain?forum=winserversecurity
and getting exchange server to launch again. (Mind you I am relatively fresh to server managing) Please help E-Mail has been down for a whole day now!
MartyI recommend that you open a ticket with Microsoft Support before you break things more.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." -
How to create certificate authority and configure it for IIS
Hi
I Install ADCS role in Server 2012 and configure it. but when i go to IIS and want to create domain certification , the select button is grey .i think i couldn't configure certificate authority correctly. how can fix this problem.
Whenever you see a helpful reply, click on Vote As Helpful & click on
Mark As Answer if a post answers your question.
LinkedIn:
Facebook:Thanks my problem was solved.
But there is a problem after install IIS and ADCS , i restarted both server but didn't work ,but now(6 hours after restart) it work fine.
another Question is after i select appropriate certificate authority ,when i click on finish it gives me the following error
"the certificate request was submitted to the online authority but was not issued the request was denied"
Whenever you see a helpful reply, click on Vote As Helpful & click on
Mark As Answer if a post answers your question.
LinkedIn:
Facebook: -
Migrate Server 2008 Certificate Authority To New Server Different Host Name?
Our internal CA is installed on one of our Exchange servers. Exchange is being migrated from 2010 to 2013, so all current Exchange servers will decommissioned and replaced with new new Hyper-V VMs with either Server 2008 R2 or 2012 R2 OS. The old VM
containing Exchange 2010 and the current CA will go away since we cannot afford to use the server resources and use up the required Windows license to keep that server running doing nothing but acting as a CA.
So, we will either need to move the CA to the new replacement Exchange 2013 server or some other existing server that's being used for something else (maybe one of the domain controllers).
What is the best way to handle this? I don't think the migration from Exchange 2010 to 2013 allows for reusing the same host name on the replacement server and if we move the CA to another existing server, it will also be on a server with a new host
name anyways.
Can we migrate the CA to a new server with a different host name?
What about reissuing all the active certificates from the current server to replace them with new certificates from the new server and then decommissioning the original CA? Can this be automated in some way?
Which way is best and how would it be done?When following the instructions in the guide, I would also consider to switch to new "sanitized" URLs in certificates (CDP and AIA) in case you had used the default URLs now. That's what I did this when migrating W2K3 CAs (with default URLs) to W2K8 R2.
Per default, the LDAP and HTTP URLs point to the CA server itself (HTTP) or to an LDAP objects that has the same name as the current server.
Migrating to a new server, you need to make sure that CRLs will still be published to the old locations - thus the new CA server would write to the LDAP object that corresponded to the old server, and HTTP might be fixed by redirecting the DNS record. (Make
sure this is documented so that nobody thinks it might be a good idea to delete the old object as it "references a server that does not exist anymore".)
As you have to fiddle with URLs anyway, I would then add new URLs having neutral names - that is URLs not including the name of the CA server. The new CA instance would then 1) publish to the old locations but not add these to certificates anymore and 2)
publish to new sanitized locations and add them to CDP and AIA URLs.
Elke -
How to accept certificate authority in HP PPM
How can we accept the Certificate Authority (similar to VeriSign) of any organization specific instead of just accepting the individual certificate in HP PPM.This enables to be able to accept any cert from that organization specific instead of having to import the Certificate each year
Hi FahadKhan,
Welcome to the HP Forums, I hope you enjoy your experience! To help you get the most out of the HP Forums I would like to direct your attention to the HP Forums Guide First Time Here? Learn How to Post and More.
I am sorry, but to get your issue more exposure, I would suggest posting it in the commercial forums, since this is a commercial product. You can do this at
http://h30499.www3.hp.com/t5/Operations-Management/ct-p/operations-management
I hope this helps!
Regards
MechPilot
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the right to say “Thanks” for helping! -
Move out Info Provider to other server without transport connection?
Hi All,
Could you share you thought ?
Is there a possibility to move out the info provider design & info object to other server without transport connection ?
The background is our project box will be decommissioned, and unfortunately it's not connected to development box. We've already found how to move out ABAP program, we generate it to XML, than upload it.
How about for info provider itself / info Object ? Is there a possibility to have the same treatment ?
Any thought from all of you ?
If you have the way, appreciate if you can share it to me.
Thanks a lot and have a good day,
Best regards,
Daniel N.Hi,
From transport side, it is possible. You can create a dummy transport target system, then collect BI objects in request and release it. After release, the exported data is in dir_trans, you can manually copy it to realy target server, put them in dir_trans, and in STMS import Q, select from menu of import external request and import it. -
How to restore cold backups on other server
Hi all
On Oracle9i production server, we have windows scheduled job to take the cold backups every day night. The size of the database is 2GB.
Now, the cold backup consists of
- Database files & Log files
- Parameter file
- Control file.
I am required to check the validity of the cold backup we have. So, I need to restore the database in another server.
So, please provide me the steps I need to do to restore the database.
Thanks.See Chapter 3 "Performing User-Managed Restore Operations" of the
"Oracle9i User-Managed Backup and Recovery Guide Release 2 (9.2)" (Part Number A96572-01)
http://download.oracle.com/docs/cd/B10501_01/server.920/a96572/osrestore.htm#26029
Best to start with Chapter 1 "Introduction ..."
http://download.oracle.com/docs/cd/B10501_01/server.920/a96572/intro.htm#431510
and Chapter 2 "Making User-Managed Backups"
http://download.oracle.com/docs/cd/B10501_01/server.920/a96572/osbackups.htm#10000
If you are on Windows note that besides installing the sofwtare you must also create the Oracle Service before you restore a database backp to another server.
See Chapter 6 "Backing Up and Recovering Database Files" in the Oracle Database Administrator's Guide for Windows
http://download.oracle.com/docs/cd/B10501_01/win.920/a95491/backup.htm#1004903 -
How to download a file from other server using servlet
Hi All....
Good Morning....
right now,i am facing a problem..i am trying to download a file which is in other server..i tried somany ways and i couldnt succeed in this...
will u pls give me solution for this..
because it is very urgent for me...
i am very much thankful if u provide me the code samples also....
i am seeking ur help...
Regards,
sathyaright now,i am facing a problem..i am trying to download a file which is in other server..i tried somany ways and i couldnt succeed in this...If you can tell some of our approaches and the failures you faced, someone might be able to help you.
I dont think anyone will just give the code samples. -
OCA oracle Certificate Authority
Hi there
When I try to start ocactl than I am getting error, which is:
$./ocactl start
Error: OCA Service not started. Web server down
Please let me know the solution as soon as possible.
Thanks
Munir$./ocactl start
Error: OCA Service not started. Web server downMunir, have you checked if your oracle http server(ohs) is up?
$ORACLE_HOME/opmn/bin/opmnctl status -l
$ORACLE_HOME/opmn/bin/opmnctl startproc type=ohs -
How move music & vid to my other computer?
scenario: at MacWorld Expo i bought an iPod video; using my 15" AlPB i bought several tv shows from the ITMS and enjoyed watching them on the flight home. Now I want to consolidate that newly purchased video and a couple songs i bought on the PB, on my "main" computer, my desktop.
When I hooked the iPod vid up to the PB it downloaded onto the iPod the vids and about 400 songs that were on that computer; i've got about 1600 songs (mostly but not entirely duplicates of the 400) on the desktop 'puter. When I hooked the iPod up at home those 1600 songs replaced what WAS on the iPod.
How do i "merge" the two computers' songs and vids (there's a music vid already on the desktop computer, too) so that everything is on the desktop computer, and for ease of use, it's all in the same place on the PB, too?
thanks
terryok, i consolidated each library on its respective
computer. I then used target mode to mount the
powerbook on the desktop of the G5. I copied the
iTunes Music folder from the G5 to the powerbook.
That was incorrect. You should have:
1) Copied the files you want to add to any arbitrary folder on the destination machine.
2) file->addfolder_tolibrary, choosing the arbitrary folder.
3) Consolidate library, which will copy all files from your arbitrary folder to the default iTunes library folder.
4) Delete the arbitrary folder, since the files are now copied to the default iTunes library folder.
That's it. There's no way I know of to also merge all your ratings etc. if the new songs came from another pc... unless you hack and merge the 'iTunes Music Library.xml' file by hand. -
How to make development DB from other server.
Hi.
I need to create a Development Database on a new server being copied from productive database. The servers are identicall, running Win2003 SP2 and Ora 10.2.0.1.0.
**exists some tool to do it easy?
**I can do it without stopping the productive server?Hi,
You can duplicate your database using rman, or just clone your database and rename it.
USe the following Metalink notes to help you:
- Creating a Duplicate Database on a New Host. - Doc ID: NOTE:388431.1
- Steps to Manually Clone a Database - Doc ID: NOTE:458450.1
Cheers,
Francisco Munoz Alvarez
http://www.oraclenz.com
Edited by: F. Munoz Alvarez on Sep 25, 2008 11:01 AM
Maybe you are looking for
-
New IPad 3 will not connect to 2WIRE from AT&T
Hi, I just bought the new IPad and its taking me through the setup screens, when I get to the wi-fi setup I see my router (2WIRE) I click on it, I put in the password and it says "Not correct Password" I know it is the correct password, I even change
-
My problems began whe I got the notice that iTunes 10.6.3 was ready to update. I have a iPod Touch 3rd Gen. I have followed all of the troubleshooting steps. I have uninstall all of my security software. I have followed the steps to uninstall itunes
-
How can I get Itunes to stop popping up on my desk top all day long
How can I get Itunes to stop popping up on my desktop all day long without opening up the icon?
-
Oscilliscope data sent to plot
I have a system configured with data coming from a tektronics scope in a series of data points (dbl). I want to plot these on some sort of graph in real time. The problem comes with the fact that I want to have the data be shown with say, a red line
-
It crashed hard and I can't restore it
Hi! I tried to 'upgrade' in place with the installation disk. It says it can't because the installed version is newer than the disk. The disk is Windows 7 Pro, the box is Windows 7 Pro SP1. How can I recover this? Would an upgrade to Windows 10 Techn