Oracle Certification Authority

We running OAS 10g rel1 (9.0.4.1).
When we were installed infrastructure we did not include "oracle certification authority". We running custom application written in forms 10g
Everything was fine, until management decided to use SSL. To make changes in configuration I need to use OCA.
My question is can I install now only OCA in infrastructure without destroying anything?
please help it really urgent

Short answer - No you can't. It is impossible to configure OCA after install. I also made this mistake. If you try to install it will create a new oracle home and a new infrastructure database just for OCA.
Easiest thing is to just install OCA on a new PC and generate the certificates. Then just turn it off until you need it again.
Or you could do what I did, just install it on the same machine anyway, set up SSL and then shut it down. If I need it it's there, but I don't get the performance hit of 2 DBs on the server.

Similar Messages

Oracle Certification Tutorial: How Do I Get Authorized on CertView?

As a follow up to our recent release of CertView, we are making a series of Oracle Certification Walk Thru tutorials available on the web.
Our first tutorial here - *"How Do I Get 'Authorized' on CertView?"* - shares how the CertView authorization process works when you first access CertView.
!http://blogs.oracle.com/certification/0080A.jpg!
*[VIEW THE VIDEO HERE (3:34)|http://blogs.oracle.com/certification/2009/11/0080a.html]*
Edited by: mediaguy on Nov 19, 2009 1:59 PM

Hi Media guy
I\m quite happy to have your support and all the posts you distribute about the Oracle certification!
For me it shows that the Oracle certification team is quite active and reactive, that very very nice!
Thanks for your support!
Regards,
Hub

Apr 2009 Oracle Certification E-Magazine

!http://blogs.oracle.com/certification/2009-0414-1158.gif!
The April 2009 edition of the Oracle Certification E-Magazine is now online.
Get the latest certification track updates, program news, and details on new Oracle certifications, upgrades, and beta testing.
In this edition:
<ul>
<li>Whatʼs The Difference: Oracle Certiﬁcation & the OPN Sales Champion</li>
<li>Are You Getting Your Training From an Authorized Provider?</li>
<li>Oracle Certification Salary Survey Update</li>
<li>Beta Testing Opportunity Continues for Two Database Certiﬁcation Exams</li>
<li>Oracle University Releases New PL/SQL Certiﬁcation: Oracle Advanced PL/SQL Developer Certiﬁed Professional (OCP)</li>
<li>Coming Soon: New PL/SQL Exam</li>
<li>Oracle University Releases Two New E-Business Suite R12 Supply Chain Certiﬁcations</li>
<li>Beta Testing Opportunity Continues for Exam 1Z1-206 – Oracle E-Business Suite R12: System Administration</li>
<li>Beta Period Now Closed for Three EBS R12 Certiﬁcation Exams</li>
<li>Oracle University Releases New PeopleSoft Certification: PeopleSoft Enterprise 9 Human Capital Management, Human Resources Consultant Certiﬁed Expert (OCE)</li>
<li>Oracle University Releases New PeopleSoft Certification: PeopleSoft Enterprise 9 Financial Management, General Ledger Consultant Certiﬁed Expert (OCE)</li>
</ul>
QUICK LINKS:
<ul>
<li>Oracle Certification E-Magazine: April 2009 Edition</li>
<li>Oracle Certification E-Magazine: Archives</li>
<li>Oracle Certification E-Magazine: Subscribe
</li>
</ul>

Thank you for information!
Kamran Agayev A. (10g OCP)
http://kamranagayev.wordpress.com
[Step by Step install Oracle on Linux and Automate the installation using Shell Script |http://kamranagayev.wordpress.com/2009/05/01/step-by-step-installing-oracle-database-10g-release-2-on-linux-centos-and-automate-the-installation-using-linux-shell-script/]

Does OIM Connector for Lotus Notes support Domino certification authority?

Lotus Notes allows an Organization to register servers and users without stamping each server ID and user ID if you have migrated the certifier to a Domino server-based certification authority (CA).
A Customer has done such a migration to a server-based certification authority (CA), and therefore they have set up Notes and Internet certifiers to use the CA process.
So, now this Customer does not require access to the certifier ID and ID password.
Having enabled certifiers for the CA process, they can now assign the registration authority role to administrators, who can then register users and manage certificate requests without having to provide the certifier ID and password.
My question is: is this compatible with the requirements of Oracle Identity Manager Connector for IBM Lotus Notes and Domino Release 9.0.4, that, among other parameters, requires to specify CertPath (Complete file specification of the certifier ID to be used when creating certifier ID files) and CertPwd (Password of the certifier ID file)?
Regards,
Angelo Carugati

I quite new with OIM, but not at all... For sure, I need to configure a connector for Lotus Notes / Domino.
The main points in my question are (USING A connector for Lotus Notes / Domino):
- How can I create 1 user account (and related data), on different servers (IT Resources), with different "mail templates", when the data should be the same, and the user mail database, should only be a replica on the the 2nd server
- Maybe, I need to configure 2 distincts IT Resources, and run both (through Provisioning Policies), when I need to provision a user, as described in my scenario (above), right?
- In the 2nd server, I dont want the user to be created with a new mail database (neither new user data, as shortName, IDfile... ).
I want that same data, and a replicated mail DB is generated on the 2nd server (webmail server)
Is it possible, how can I configure this within OIM connector for Lotus Notes / Domino?

Oracle Certification Exam Design (Part 3) - OCM Exams

In this third and final part of our "Exam Design" series, Joel shares about how our Oracle Certified Master (OCM) certification exams are designed and developed.
h4. Oracle Certification Exam Design (Part 3) - OCM Exams
!http://blogs.oracle.com/certification/0096B.jpg!
[Watch video|http://blogs.oracle.com/certification/2009/08/0109.html] (6:49)

mediaguy wrote:
In this interview, we talk with Harald van Breederode - Oracle Certified Master (OCM) and instructor with Oracle University in The Netherlands. Harald is part of the Oracle Certification exam development team and has also co-authored several popular booklets with Joel Goodman on DBA skillsets. http://bit.ly/cQ0hRI
Thanks for sharing!

Oracle Certification Profile: Harald van Breederode

In this interview, we talk with Harald van Breederode - Oracle Certified Master (OCM) and instructor with Oracle University in The Netherlands. Harald is part of the Oracle Certification exam development team and has also co-authored several popular booklets with Joel Goodman on DBA skillsets. http://bit.ly/cQ0hRI

mediaguy wrote:
In this interview, we talk with Harald van Breederode - Oracle Certified Master (OCM) and instructor with Oracle University in The Netherlands. Harald is part of the Oracle Certification exam development team and has also co-authored several popular booklets with Joel Goodman on DBA skillsets. http://bit.ly/cQ0hRI
Thanks for sharing!

Using Hyper-V 2012 r2, connecting to the console results in: A certification authority could not be contacted for authentication.

I'm having some trouble with authentication to guests from my Hyper-V console.
If I try to connect from the Hyper-V Manager to the console of any guest, I get the error:
"A certification authority could not be contacted for authentication. If you are using a Remote Desktop Gateway with a smart card, try connecting to the remote computer using a password. For assistance, contact your system administrator or technical support."
I'm not using an RDG and smart card.
I have 2 virtual networks. The first is Production, the second is Isolated. Production has 2 NICs attached to the Production LAN, the second has 2 NICs in our DMZ. The host is a member server of the production domain. I can use MSTSC from the LAN or the DMZ
to gain access to each Guest and the Host.
The issues start if I try "Connect" from Hyper-V Manager in an attempt to use the console of any Guest. Each attempt fails with the above error. If I use an incorrect password, I get a different error: "The credentials that were used to connect
to {Server FQDN} did not work. Please enter new credentials."
Taking a look at the the event logs, I can see the session successfully authenticating to the Guest (4776 Credential validation and 4624 Logon), and the fact I get a different error if I enter an incorrect password show I get some way along the line. However
if I take a look at the logs on the Host, however I get:
An account failed to log on.
   Subject:
       Security ID:       NULL SID
       Account Name:       -
       Account Domain:       -
       Logon ID:       0x0
   Logon Type:           3
   Account For Which Logon Failed:
       Security ID:       NULL SID
       Account Name:
       Account Domain:
   Failure Information:
       Failure Reason:       An Error occured during Logon.
       Status:           0xC000006D
       Sub Status:       0xC000005E
   Process Information:
       Caller Process ID:   0x0
       Caller Process Name:   -
   Network Information:
       Workstation Name:   -
       Source Network Address:   -
       Source Port:       -
   Detailed Authentication Information:
       Logon Process:       Kerberos
       Authentication Package:   Kerberos
       Transited Services:   -
       Package Name (NTLM only):   -
       Key Length:       0
   This event is generated when a logon request fails. It is generated on the computer where access was attempted.
   The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
   The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
   The Process Information fields indicate which account and process on the system requested the logon.
   The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
   The authentication information fields provide detailed information about this specific logon request.
       - Transited services indicate which intermediate services have participated in this logon request.
       - Package name indicates which sub-protocol was used among the NTLM protocols.
       - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Which looks to me like a blank authentication request is being sent? (I've not deleted any machine/domain names, they're just not present)
Any suggestions? Do you think I'm barking up the wrong tree?
Thoughts and comments gratefully received

Hi,
What’s your guest system platform, base on my experience that must be the not supported guest system issue, the generation 2 vm only support the Windows 8 or 8.1 platform.
The related KB:
Generation 2 Virtual Machine Overview
http://technet.microsoft.com/en-us/library/dn282285.aspx
Hope this hleps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SSL certificates and/ or Oracle Certificate Authority

Our Oracle infrastructure is as follows:
1.Database server
(a)Oracle 9i R2 database
(b) Oracle ApEx 2.2
2. Infrastructure server
(a) Oracle 10g (9.0.4.x.x) Infrastructure
(b) OID - configured as external authentication to Microsoft 2003 Active Directory LDAP version 3
(c) SSO - configured as Windows Native authentication
3. Application server
(a)Oracle 10g (9.0.4.x.x) Forms and reports server
Network traffic currently is not encrypted. All we need is to ensure that network traffic is encrypted between the the end-user PC and all servers (database or app server)
I was reading through Oracle Certificate Authority and Secure Sockets Layer.
1. Is there a difference between the two products?
2. Which product would be best to ensure the encryption (authentication is provided through MS LDAP)
Thanks,
Mayura

Certificate authority and SSL are two completely different concepts. They can be related but are by no means similar.
SSL is a service or a feature, not a product. SSL is used to encrypt the traffic. Part of SSL is the use of certificates for authentication. A server or user would pass a certificate as part of an SSL transmission.
The certificates used for enrypted transmission(SSL), can be obtained from the Oracle Certificate Authority(OCA), or by a third party certificate authority. OCA is not required to use SSL.
To achieve a fully encrypted envrinment, you would need to use SSL at several layers. This would be done with or without the use of the Oracle certificate authority.
1. From the web browser to the middle tier
2. End user to database
3. from the middle tier to OID
4. from the middle tier to the database
5. From OID to active directory

Why do other browsers ( IE, Chrome, Opera,Safari) list StartCom Class 2 Primary Intermediate Server CA as a Trusted Intermediate Certification Authority but Firefox doesn't?

We are setting up registrations for a paid event and have bought a SSL certificate for our site. Everything works fine when the registration page is accessed through IE, Chrome, Opera or Safari (which list StartCom Class 2 Primary Intermediate Server CA as a Trusted Intermediate Certification Authority), but when I click on that link in Firefix I get the "This Connection is Untrusted" page because only StartCom Class 1 is listed as trusted.
Why is that?

It is always the responsibility of a website to send the complete certificate chain.
You can check the certificate chain of breastfeedingconference.asn.au and see that the server doesn't send the intermediate certificate.
* http://www.networking4all.com/en/support/tools/site+check/

1Z0-051 Oracle Certification - OCA

Hi. I am in a fix and so need your help.
I am planning to give 1Z0-051 Oracle Certification exam(Oracle Database 11g- SQL fundamentals). However, I will be unable to give my 1Z0-052 exam(Oracle Database 11g- Administration-I) at this time. So, if I give only 1Z0-051 exam, then will it carry some weightage in my resume? Also, if I pass the 1Z0-051 exam, then how should I put it in my resume? That I am a Oracle Certified individual?

806538 wrote:
Hi. I am in a fix and so need your help.
I am planning to give 1Z0-051 Oracle Certification exam(Oracle Database 11g- SQL fundamentals). However, I will be unable to give my 1Z0-052 exam(Oracle Database 11g- Administration-I) at this time. So, if I give only 1Z0-051 exam, then will it carry some weightage in my resume? Also, if I pass the 1Z0-051 exam, then how should I put it in my resume? That I am a Oracle Certified individual?If you pass the 1z0-051 you may put that in your resumé.
(If you need proof of this copy the report from the test center ... you cannot really get from of this from Oracle. Certview will publish certifcations, not exam passes). If you take this online there is no proof it was you you actually took the exam).
However you are not Oracle certified and must not put that in your resume ... you may only put it in your resumé when you have proof from Oracle you have been awarded a Certification.
The weight of this exam pass, and indeed any exam pass or certification, can depend on the reader(s) of the resumé; and the nature of job you are applying for; and the strength of the other candidates for the job. Suppose an employer was looking for CV's for a DBA job. Assuming the HR/agencies let the CV's through they might get (in practice a higher number of DBA OCPs might be expected):
Person with a 1z0-051 pass and degree and no experience.
5 with 9i DBA OCP, most with MA degrees, with no experience
10g DBA OCA obtained 3 years ago with no experience.
Apparently experienced DBA with no formal qualifications and no degree.
Now the first and last candidates have a high probability of being what they say they are, but the first wuld be no good if an experienced DBA was needed. It would be necessary at interview to be careful to check the others had the experience level claimed due to certifications being obtained though cheating and fraud. Its also worth noting DBA OCA does not cover backups / restores in depth.
However if what was needed was someone to query database results as a result of some tests the first candidate might acutally be the most suitable .. assuming he has studied the 1z0-051 carefully. The 10g OCA might not have done SQL ... the experienced DBA might feel that was not a suitable job for him, and the 9i DBA OCPs may have rushed (or cheated) their way through 1z0-007 as quickly as possible and would not be interested / capablle of this work.
(Please note this article is biased against 9i DBA OCP ... at one point my understanding is there was a particularly high level of cheating/fraud against this certification and some poor training from some WDP institutions ... which is a pity for those achieving the certification through due work and good training).

Importing the class in Oracle Rules Author Definitions

I created the Dictionary in the Oracle Rules Author.
In the Definitions Page I selected the java fact type.
In the User Classpath i gave the class path of the files.
Then i have to import my class in the Rules Repository.
I am getting the following error.
Cannot perform operation. RUL-01527: Received exception for loadClass. RUL-01016: Cannot load Java class example3.Retiree. Please make sure the class and all its dependent classes are either in the class path, or user specified path. Root Cause: example3/Retiree (Unsupported major.minor version 49.0)
Can any one respond to this query please...

You have to do like the others import. You have to put import and the complete path(with all the packages).
For example:
import mypackage.msgsend;
and if you wouls like to import all the classes of a package use:
import mypackage.*;

June 2009 Oracle Certification E-Magazine Now Online

The June 2009 Oracle Certification E-Magazine is now online: http://bit.ly/At9bZ

Thank you for information!
Kamran Agayev A. (10g OCP)
http://kamranagayev.wordpress.com
[Step by Step install Oracle on Linux and Automate the installation using Shell Script |http://kamranagayev.wordpress.com/2009/05/01/step-by-step-installing-oracle-database-10g-release-2-on-linux-centos-and-automate-the-installation-using-linux-shell-script/]

Which is the best Oracle certification for a programmer

Hi,
I have been doing web development in java for about 2 years now. I already have a Bachelors of Science in Computer Science but I want to stay competitive and am considering an Oracle Certification. The problem is that I am having trouble deciding which one to pursue. I am trying to keep emerging technologies in mind and I know that cloud computing and mobile devices are taking over. But I still know that there are many other companies out there that aren't ready for all that. I have found certifications such as:
Oracle Certified Professional Java Programmer
Oracle Certified Professional, Java EE 5 Web Component Developer
Oracle Certified Professional, Java EE 5 Business Component Developer
Oracle Certified Professional, Java EE 5 Web Services Developer
Oracle Certified Master, Java EE 5 Enterprise Architect
Oracle Certified Expert,Java Platform, Enterprise Edition 6 JavaServer Pages and
Servlet Developer
Personally, I think that "Oracle Certified Master, Java EE 5 Enterprise Architect" looks the most attractive because it seems to wrap everything into one. But the prep time and costs for this are both pretty high. Does anyone have any good information or experience that can help me make a better decision?
Thanks a bunch!

maheshguruswamy wrote:
user2571097 wrote:
But I also doubt whether the question raised was clear enough for the person to be answered! - just my two cents ....Even if my question was not clear enough (which it was), i would expect someone applying for a senior position such as technical architect position to ask clarifying questions. My point from the beginning was, you absolutely are not qualified to become a technical architect with just a certification. Here is how the interview went
Me - How do you find out what your browser is submitting to the server from a purely client perspective?
Candidate - I will put the receiving server in debug mode and print out values.
Me - What if you don't have access to that server?
Candidate - Well, its my server.
Me - Okaay, you open your browser and go to CNN.com and click on a link, how do you find out details about that request?
Candidate - You can't.
Me - So you are saying you can't inspect what your browser is sending in http requests?
Candidate - yeah....i guess.
Me - Have you heard of tools such as wireshark, firebug, httpfox, http analyzer, tcpmon etc
Candidate - No, never heard of it.
I ended the interview after that.Hmm. Probably this guy didn't know what he was talking about, but still I wouldn't necessarily demand from someone applying for an architect position to know the gritty details of development; that's too low level for someone who should be focusing on the big picture. I'd rather have someone that knows how to design and guide people to build maintainable systems in stead of someone that knows how to sniff packets.
But then again you'd have to define what the architect role in this case exactly means. For all I know it is actually a senior developer position with a slightly better ring to the title ;)

Query regarding Oracle certification for Admin path

hi I have the below certifications under my belt :- 1. Oracle Certified PL/SQL Developer Associate 2. Oracle Certified PL/SQL Developer Professional I would like to give Oracle Database 11g administration Associate certification. For which I can see I need to give 1Z0-051 and 1Z0-052 exams. So my question is whther I need to give Z051 exam??Keeping in mind I have OCP level path cleared for PL/SQL developer track. Thanks in advance..

How can i get confirmation on this officially?
Go to the FAQ:
https://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=82
Search for 'SQL Fundamentals'. One of the questions will be: "How long can I use a passed exam to earn a certification? Do exam results expire?"
The answer is: "Exam results do not expire, but certifications retire, and this affects whether or not your older exam result will help you earn a certification.
If a specific exam meets a requirement in a current certification path, it does not matter when you passed the exam. For example, if you took SQL exam #1Z0-001 in 1997, you can still use it to meet the SQL requirement for a current Oracle Database certification."
If you don't trust that -- the forum moderator, Brandye, may come along in a day or so to confirm what I said. However, there is no doubt. The question comes up fairly often. For that matter, I wrote a blog post about it over a year ago (although this would still not be 'official', of course):
Oracle Certification Prep: Oracle's SQL Fundamentals Exams and Database Releases

Move Certification Authority Web Enrollment to new server issue.

Hello,
i'm trying to move the Certification Authority Web Enrollment from one server to a new one. I've got a fully functional server where i can enroll any certificate i want and everything is working properly.
on the new server i configured I'm facing a problem that seems to be an impersonation issue. Indeed, while i try to enroll a certificate i get the following error msg from the interface :
Request Mode:
newreq - New Request
Disposition:
(never set)
Disposition message:
(none)
Result:
The RPC server is unavailable. 0x800706ba (WIN32: 1722)
COM Error Info:
CCertRequest::Submit: The RPC server is unavailable. 0x800706ba (WIN32: 1722)
LastStatus:
The operation completed successfully. 0x0 (WIN32: 0)
Suggested Cause:
This error can occur if the Certification Authority Service has not been started.
an i can also see on the CA it targets the following application error event :
Event 18209, ComRuntime:
The application-specific permission settings do not grant Local access permission to the COM Server application C:\Windows\system32\certsrv.exe with APPID
{D99E6E74-FC88-11D0-B498-00A0C90312F3}
to the user NT AUTHORITY\ANONYMOUS LOGON SID (S-1-5-7) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
While i register a certificate on the server were it all works fine i can see event in the Security log on the CA that authenticate the user i generate the certificate with, where-as with the server were it does not work, all seems to be anonymous.
IIS configuration are identical on both servers and the delegation has been set identically too ( ADUC object )
Any idea how what I could check next?

Hi,
Regarding event 18209, please follow steps from this article below to assign access permissions for the user mentioned in the event message:
Event ID 18209 — COM Security Policy Configuration
http://technet.microsoft.com/en-us/library/cc726319(v=WS.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Oracle Certification Authority

Similar Messages

Maybe you are looking for