Enabling SSL or TLS in Oracle E-Business Suite Release 12.2.x

Here are the steps to implement SSL/TLS

Set Your Environment

Create a Wallet

Create a Certificate Request

Submit the Certificate Request to a Certificate Authority

Import Server Certificate to the Wallet

Modify the Oracle HTTP Server Wallet

Modify the OPMN Wallet

Fusion Middleware Control Console

Update the JDK Cacerts File

Update the Context File and Config Files

Run AutoConfig

Restart the Application Tier Services

Synchronization Between Run and Patch File System

Transport Layer Security (TLS) vs Secure Socket Layer (SSL)

• TLS creates an encrypted connection between two machines allowing for private

information to be transmitted without the problems of eavesdropping, data tampering,

or message forgery

• TLS is the successor to SSL; SSL 3.0 is no longer recommended (dead)

Review

Copyright © 2015, Oracle and/or its affiliates. All rights reserved. |

• TLS 1.2 is what we will talk about for Oracle E-Business Suite going forward

• HTTPS is HTTP working on top of TLS

• Industry standards mandating the move to TLS 1.2

– OMB NIST mandate (800-52 rev1) to move to TLS 1.2

– PCI council (PCI DSS v3.1) requires new implementations to be on at least TLS 1.1

• Migrate to a minimum of TLS 1.1, preferably TLS 1.2 by June 2018