The Latest Oracle E-Business Suite Technology News direct from
Oracle E-Business Suite Development & Product Management

Frequently Asked Questions about EBS Security

Elke Phelps
Product Management Director

(07-May-2020:  An updated blog article has been published.  Reference: Updated: Oracle E-Business Suite Security FAQ)

We often receive questions about Oracle E-Business Suite security.  To assist with answering the most frequently asked questions about Oracle E-Business Suite security including secure configuration, auditing and encryption and others, the following new document is now available:

The questions in the FAQ are organized in the following sections:

  • Section 1: Secure Configuration and Architecture
  • Section 2: Auditing
  • Section 3: Access and Authentication
  • Section 4: Encryption and Masking             
  • Section 5: Connection Encryption

 Examples of questions answered in the new FAQ include:

  • What features are available for auditing Oracle E-Business Suite?
  • Do all DBAs require the APPS password?
  • Why should you migrate from SSL to TLS?
  • What versions of TLS are currently certified with Oracle E-Business Suite?
  • How do you configure HTTPs for Oracle E-Business Suite?
  • Can you use SHA-2 signed PKI certificates with Oracle E-Business Suite?

We plan to update this document on a regular basis.  As you read through the new document, please let us know if there are additional questions that we should consider adding.

Where can I learn more?

There are several guides and documents that cover Oracle E-Business Suite secure configuration and encryption for Release 12.1 and 12.2. You can learn more by reading the following:

Related Articles

Join the discussion

Comments ( 2 )
  • John Piwowar Tuesday, June 28, 2016

    Hi Elke,

    This is a timely post; thank you for collecting all this content. I'm working for a client who's raised some concerns about the level of privileges granted to the APPS user, that doesn't seem to be covered in the FAQ (unless I'm reading too quickly). Thus far, our engagement with Support has resulted in "these privileges are simply required for the Apps to work properly," which is an understandable first-line response, but doesn't really get us the sort of conversation we're looking for. :-) Can you recommend a course of action that would help us have a deeper discussion of the issues?

  • Elke Phelps (Oracle Development) Wednesday, June 29, 2016


    Thanks for the inquiry.

    In general, we follow a least privileges model for database accounts (including APPS) that are owned by Oracle E-Business Suite. Some of the privileges that customers have in their database may have been inherited from older Oracle E-Business Suite releases.

    The minimum set of privileges that are supported for the Oracle E-Business Release 12.1 or 12.2 are reflected in latest production database. You can install the latest production database using Rapid Install and then make changes to bring your database to be consistent with the privileges in the latest production database.

    If you find that the privileges in the latest production database do not meet your requirements, please log an SR and request an enhancement request. You can also email me your SR number after it is logged.



    P.S. Due to your post, we will add this information to the next version of "FAQ: Oracle E-Business Suite Security (Doc ID 2063486.1)". We appreciate the feedback!

Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.

Recent Content