Oracle Wallet Manager question..

Hello,
I have a question on Oracle Wallet Manager and will appreciate if you can help me with this:
In our environment, there are distributed databases and background processes running on different systems ( windows NT and SGI IRIX ) the application uses Oracle Background processes which have Database account names and login to processes running on different machines..
In an environment which has 250+ systems, changing passwords every 60 days or so becomes very cumbersome and problematic: If one network link is down, the password change is not done on one system and the next time the application tries to access a remote process it does not work..
Currently, the password changes are restricted to once a year ..
In the long run, it would be a better solution to replace this set-up with a industry standard secure architecture (i.e. one using PKI tokens, Certificate Authority etc..)
Currently, I am looking at Oracle Wallet Manager as a possible solution .. will appreciate, if you can give me some feedback, whether this will be feasible ..
Thank you ..
--osman

I would like to share my idea.
Use Oracle Internet Directory (LDAP), single sign-on, SSL (Oracle Wallet), keberos and Windows Native Authentication.
Check OracleAS 10g (10.1.2) documentations.
We did all the above which were included in the the integration of OracleAS 9.0.4 with Oracle Applications 11.5.10.

Similar Messages

What is the use of Oracle Wallet Manager

Hello All,
I have notives that there is a tool called "Oracle Wallet Manager" that is loaded on to my machine.
After reading the on-line help I figure that It can keep some certificates for me.My question ;
What is this tool used for?
Why do we have this tool?
Does anybody have any whitepapers/ recpies/ examples/ demos
on this stuff.
any help will be appreciated.
regards
Sanjiv

Sanjiv.
Oracle Wallet Manager is a tool to manage internet certificates for clients and servers (databases can have certificates) issued by Certificate Authorities (e.g. Verisign). It can be used in conjunction with Oracle Net/SSL.
Details on it can be found at the following link:
http://download-east.oracle.com/otndoc/oracle9i/901_doc/network.901/a90150/asowalet.htm#1006830
Harold

Using a SHA2 certificate with 12.1.1 (Oracle Wallet Manager 10.1.0.5)

Hi folks,
I'm trying to enable SSL on my 12.1.1 system, but I've got a bit of a problem.
I've already logged a SR on this, so I already know that you cannot use SHA2 SSL certificates with Oracle Wallet Manager 10.1.0.5, which is part of the 10.1.3 tech stack. I started the SR on the EBS side, but it was passed on to the security group, and closed there. My question is, is there something that I don't know? Is there an upgrade path in 12.1.x that would include an upgrade to the OWM, or is there some sort of workaround? I'll be opening another SR tomorrow, but wanted to see if I was missing something simple.
We have an internal certificate server (Microsoft AD), and the root certificate, which I need to import, is SHA2. I'm being told that they cannot generate a SHA1 root certificate, and would have to stand up another certificate authority. OWM 10.1.0.5 can't handle SHA2, so I'm stuck.
Anybody been there done that?
Thanks very much,
-Adam vonNieda

I'm trying to enable SSL on my 12.1.1 system, but I've got a bit of a problem. What kind of problems?
I've already logged a SR on this, so I already know that you cannot use SHA2 SSL certificates with Oracle Wallet Manager 10.1.0.5, which is part of the 10.1.3 tech stack. I started the SR on the EBS side, but it was passed on to the security group, and closed there. My question is, is there something that I don't know? Is there an upgrade path in 12.1.x that would include an upgrade to the OWM, or is there some sort of workaround? I'll be opening another SR tomorrow, but wanted to see if I was missing something simple.
We have an internal certificate server (Microsoft AD), and the root certificate, which I need to import, is SHA2. I'm being told that they cannot generate a SHA1 root certificate, and would have to stand up another certificate authority. OWM 10.1.0.5 can't handle SHA2, so I'm stuck. I am not sure if SHA2 is certified with EBS R12 so you might need to ask this question to Oracle Support. According to the following docs, SHA1 can be used with no issues.
Enabling SSL in Oracle E-Business Suite Release 12 [ID 376700.1] To BottomTo Bottom
SSL Primer: Enabling SSL in Oracle E-Business Suite Release 12 (Trial Certificate Example) [ID 1425103.1]
Thanks,
Hussein

Self Generated Certification into Oracle Wallet Manager ?

Hello,
I have an written a function in PL/SQL to communicate with web services
this server accessed with HTTPS, it uses self generated certification!
how I can:
export this certification (using web browser)
Import it to Oracle Wallet Manager
is it going to work?
cheers

Hi Tejo,
I think you posted your question into the wrong forum. This is Hyperion Query and Reporting forum that discusses issues related to Hyperion Financial Reporting Studio, Interactive Reporting, Web Analysis, etc. I would do a search for Oracle Wallet Manager on google, find the best Oracle Forum and post the question there.
Cheers,
Mehmet

Is it posible to use openssl csr for oracle Wallet Manager?

Hi,
I have used openssl to create csr instead of using oracle Wallet Manager. I need to use certificate for OAS. I have sent csr to RapidSSL.com and they sent me the certificate with a fee. Now I release that it was a mistake and I should create the csr from Oracle Wallet Manger and send it to RapidSSL.com and import the user certificate to owm then no problem. My question are followings:
1-     Can I use csr that generated from openssl to owm?
2-     Can I import certificate that purchased from RapidSSL.com to owm?
3-     What are the steps I have to follow?
Thank you

Here are the answers inline for your questions.
1- Can I use csr that generated from openssl to owm?
Yes
2- Can I import certificate that purchased from RapidSSL.com to owm?
Yes
3- What are the steps I have to follow?
Check this link for step by step instructions.
http://download-west.oracle.com/docs/cd/B14099_19/core.1012/b13995/wallets.htm
http://www.thesslstore.com
http://www.rapidsslonline.com
Edited by: 794364 on Sep 12, 2010 11:56 PM

Separate License for Oracle Wallet Manager

Hi,
From our application we have been making webservice calls using utl_http. In the past this has been via http but we now have a requirement to make a webservice call using https. This requires the use of Oracle Wallet Manager. Is a separate License required to be purchased to use the Oracle Wallet, or is it part of the Oracle database license? We have an internal check going on now with various people, but I just thought I'd ask the question here as well.
Database version: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bi

Oracle Wallets can be deployed on clients, middle tiers, and database servers FREE of charge. However, the following features that use an Oracle Wallet in turn require licensing of the Oracle Advanced Security Option:
- PKI credentials
- Transparent Data Encryption.
Please check following MOS for more details.
Is There Any Additional License Required For Wallet Manager? (Doc ID 1068223.1)

Replace a new wallet for Oracle Wallet Manager

Hi, all,
Here is my current situation.
We are using Oracle Wallet Manager (version 10.1.0.5) for Oracle 10.1.3.1 on Windows Server 2003. Currently our SSL certificate in the wallet is going to expired within a month. However, we forgot the password to the current wallet. So we have to create a new wallet and import the new certificates. The certificate shows Ready state. Then we moved the old wallet file to a different directory, and copied the new wallet file, ewallet.p12, to the default wallet location, C:\product\10.1.3.1\OracleAS_1\Apache\Apache\conf\ssl.wlt\default. We also rebooted the machine to make sure Apache will pick up the new wallet file. However, when we connected from a client browser, it still shows old certificate. I checked the ssl.conf, it still have the default value as follows:
SSLWallet file:C:\product\10.1.3.1\OracleAS_1\Apache\Apache\conf\ssl.wlt\default
The Auto Login and Use Windows Registry options are uncheck and there is no Oracle wallet entry in the Windows registry.
Does anyone have the similar problem? Any advice is highly appreciated.
Thank you very much in advance.

Roberto,
Thanks a lot for your response. I have one more question.
Supposed the client browser has installed the old certificate which is still valid for another month, when the client browser hit the site again, as the old certificate is still valid, is it going to download the new certificate? If not, how do I remove the old certificate from browser, IE?
Thanks.

Unable to import the user certificate into the Oracle Wallet Manager

Hi,
I am configuring the External Authentication plugin using the password filters.
i am using the version 10.1.0.5.0 version of Oracle Wallet manager
inorder to do that i am enabling the SSL mode.
to enable the SSL mode i followed the some steps in OWM and OCA admin and user console.
when i approved a certificate as admin and importing to the Oracle Wallet Manager, i got an error that
User Certificate Installation failed.
Possible errors:
- Input was not a valid certificate
- No matching certificate request found
- CA certificate needed for certificate chain not found.
Please install it first
can anyone help me how to resolve this problem.

hi,
thanks for your reply pramod
I tried to import the two certificate files(rootca.crt and server.crt). but i am got the same error.
what may be the problem.

Oracle Wallet Manager won't allow me to create a certificate request

Hello,
I am trying to setup my installation with SSL, I am trying to create a certificate request on Oracle Wallet Manager and I keep getting this error:
"Could not create certificate request. Please check user information"
I am entering the following information:
Common Name: portal.grupoalsea.com.mx
Organizational Unit: Desarrollo
Organization: Sistema Integral de Administracion, S.A. de C.V.
Locality/City: Distrito Federal
State/Province: Mexico
Country: Mexico
Key Size: 1024 bits
Why could this be happening? Does Oracle Wallet Manager go and look for my info some place? Common Name is the name for my site on WebCache, which is in turn mapped to the HTTP Server called Mservicio.localdomain.
At this point, I have also tried setting the Common Name to other values, like the name of my HTTP Server, the name of my HTTP server without the "localdomain", but I still get the same message.
Any help will be really appreciated!!!!

Problem was due to a bug that won't allow to enter commas in Organization Name. All we needed to do is remove the comma from the Organization name and the certificate was correctly created.

Some trusted certificate could not be installed , oracle wallet manager

Hi there,
I am using Oracle Wallet Manager 10.2.0.1
Oracle DB 10.2
when I try to import a certificate I have exported from the browser, I have such error,
that certificate is not something globally known, but it is for local communication,
as I understood that when I specify to import trusted certificate, that does not matter , does it?
please that I have successfully imported another "known" certificate exported with the same way,
what can the reason of such an error,
thanks in advance
rgrds

The problem was in the certificate itself.
Regards.

Help needed with Oracle Wallet Manager

Hi , I have to call a Web Service that is made in PL/SQL from another PL/SQL package. The web service is an HTTPS server so I have to use Oracle Wallet Manager because those who made the web service uses it.
Is there a PL/SQL guide or receipe to do that. Here's what I have done now and that does'nt return me the string I want!
vURL := 'https://www2.frsq.gouv.qc.ca/frsqeforms/FRSQ_NIP_EXISTS?pNOM_NAISS=' || pNOM_NAISS || '&pPRENOM=' || pPRENOM || '&pNOM_MERE=' || pNOM_MERE || '&pSEXE=' || pSEXE || '&pDATE_NAISS_YYYY=' || pAn_naissance
|| '&pDATE_NAISS_MM=' || pMois_naissance || '&pDATE_NAISS_DD=' || pJour_naissance;
vURL := utl_url.escape(vURL);
UTL_HTTP.SET_WALLET('file:/export/home/oracle/Wallet','********');
select UTL_HTTP.REQUEST(vURL) into resultat from dual;
vNip := resultat;
I should have something in th resultat variable. I'm I muissing some steps or I should work like that?
I'm on Oracle 9.2.0.6 on solaris sun.
The web service is supposed to return me a PIN number. I works when I do it on the devloppment environement because there is no https.
I don't have any error message except that it returns me a html pages with a 404 in the string that I am supposed to receive a PIN number. I got the error in development but my variable had the value that I want! If I paste the URL in a browser it works very fine. You can try it with that (the development server)
http://207.253.66.69/frsq_dev/FRSQ_NIP_EXISTS?pNOM_NAISS=Bouchard&pPRENOM=Diane&pNOM_MERE=Thibault&pSEXE=F&pDATE_NAISS_YYYY=1964&pDATE_NAISS_MM=04&pDATE_NAISS_DD=04
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>404 Not Found</TITLE>
</HEAD><BODY>
Not Found
The requested URL /frsqeforms/FRSQ_NIP_EXISTS was not found on this server.
<HR>
<ADDRESS>Oracle-Application-Server-10g/1

Duplicate post ... please ignore.

Where can I find the Oracle Wallet Manager?

Hi,
I'm trying to configure an MQSeries Adapter for SSL however being fairly new the 'Wallet' concept as well as SSL configuration I'm having a hard time finding it. I don't see any option in my WinXP start menu. I ran a search for 'owm' in my local and found the 'owm-3_0.jar' file. When I try to run it via java -jar I get a main class not found.
Is there an alternative to run this manager? Can I download it somewhere? Is there a cmd-based tool I can use instead to add certificates to my wallet (cwallet.sso)?
Thanks,
MV

Hi,
To start Oracle Wallet Manager select Start, Programs, Oracle-HOME_NAME, Integrated Management Tools, Wallet Manager
http://download.oracle.com/docs/cd/B28359_01/network.111/b28530/asowalet.htm#ASOAG9745
Regards,
Anuj

Oracle Wallet Manager will not start with GLIBC_2.0 error

I have cloned my 11.5.10.2 system from RHEL4 to the new RHEL5 server.
configured all started non-ssl, configuring ssl and the IAS_ORACLE_HOME cert works fine, but when I try to start wallet manager I get the error
Starting Oracle Wallet Manager Release 2.1 - Production
/u01/oraapps/oracle/product/8.0.6/network/jre11/bin/../lib/i686/native_threads/libzip.so: symbol errno, version GLIBC_2.0 not defined in file libc.so.6 with link time reference (libzip.so)
Unable to initialize threads: cannot find class java/lang/Thread
Could not create Java VM
Done.
I have been through most every metalink article and none seem to apply.
LD_ASSUME_KERNEL is unset
OA_JRE_TOP, AF_JRE_TOP, AFJVAPRG all point to /user/java/jdk1.6._20 etc as they should
I also have an iAS 10g server on the same machine and OWM starts fine when I am that user (it was installed new not cloned)
I assume I am missing a link somewhere but I can't seem to figure out where, anyone have any thoughts? Thanks!

Hi,
Does rapidclone now execute the scripts identified in MOS Doc 356878.1 automatically ? It did not used to perform an automatic relink.Rapid Clone always relink the database executable files automatically.
Thanks,
Hussein

Oracle Wallet Manager

Hi I have a server.key , a server.cer and server-ca.crt. I need to import these using oracle wallet manager. How do I do that?

hi,
The installation consists of three main parts:
a) Importing the Primary Root CA
b) Import the Intermediate Certificate and Cross Certificate
c) Installing your SSL123 certificate
a) Importing the Primary Root CA
1. Get a copy of the root certificate
2. Launch Oracle Wallet Manager.
3. Click Operations and select Import Trust Certificates from the menu
4. When the Import Trusted Certificate window appears, click Paste the Certificate and click OK.
5. When the message "Please provide a base64 format certificate and paste it below" appears, paste the entire contents of Primary Root CA text into the box and click OK.
6. A message should appear that the import was successful and you will see the Root Certificate at the bottom of the Trusted Certificates tree.
b) Importing the Intermediate and Cross certificates
1. Launch the Oracle Wallet Manager.
2. Click Operations > Import Trust Certificates from the menu.
3. When the Import Trusted Certificate window appears, click Paste the Certificate and click OK.
4. When the message "Please provide a base64 format certificate and paste it below" appears, paste the entire contents of the Intermediate Certificate text into the box and click OK.
5. A message should appear that the import was successful and you will see the Intermediate Certificate at the bottom of the Trusted Certificates tree.
6. Repeat the same steps for the Cross certificate
c) Importing your SSL123 certificate
1. Click Operations > Import User Certificate from the menu bar.
2. The Import Certificate dialog appears.
3. Select the Paste the Certificate radio button, and click OK.
4. The Import Certificate dialog appears.
5. Paste the entire contents of your SSL123 Certificate file and click OK.
6. A message should show that the certificate was imported successfully.
7. When you return to the main window, wallet status should show "Ready."
Hope this will help you,
Regards
Fabian

Oracle wallet manager and how can I import a .cer f

Hi where can I download oracle wallet manager and how can I import a .cer file to a wallet file .p12 that OAS uses in Apache configuration.

Hi where can I download oracle wallet manager and how can I import a .cer file to a wallet file .p12 that OAS uses in Apache configuration.

Oracle Wallet Manager question..

Similar Messages

Maybe you are looking for