The Latest Technology Stack News Directly from EBS Development
-
Application Tier
June 14, 2016
Frequently Asked Questions about EBS Security
We often receive questions about Oracle E-Business Suite security. To assist with answering the most frequently asked questions about Oracle E-Business Suite security including secure configuration, auditing and encryption and others, the following new document is now available:
- FAQ: Oracle E-Business Suite Security (Doc ID 2063486.1)
The questions in the FAQ are organized in the following sections:
- Section 1: Secure Configuration and Architecture
- Section 2: Auditing
- Section 3: Access and Authentication
- Section 4: Encryption and Masking
- Section 5: Connection Encryption
Examples of questions answered in the new FAQ include:
- What features are available for auditing Oracle E-Business Suite?
- Do all DBAs require the APPS password?
- Why should you migrate from SSL to TLS?
- What versions of TLS are currently certified with Oracle E-Business Suite?
- How do you configure HTTPs for Oracle E-Business Suite?
- Can you use SHA-2 signed PKI certificates with Oracle E-Business Suite?
We plan to update this document on a regular basis. As you read through the new document, please let us know if there are additional questions that we should consider adding.
Where can I learn more?
There are several guides and documents that cover Oracle E-Business Suite secure configuration and encryption for Release 12.1 and 12.2. You can learn more by reading the following:
- Oracle E-Business Suite Security Guide - Secure Configuration (HTML)
- Secure Configuration for Oracle E-Business Release 12 (Note 403537.1)
- Enabling SSL/TLS in Oracle E-Business Suite 12.2 (Note 1367293.1)
- Enabling SSL/TLS in Oracle E-Business Suite 12.1 (376700.1)
Related Articles
- Critical Patch Update for April 2016 Now Available
- Enhance E-Business Suite Security By Switching to TLS
- Using SHA-2 Signed Certificates with EBS
- SHA-2 Signed PKI Certificates Certified with EBS 12.1.3
- SHA-2 PKI Certificates Certified with EBS 12.1.3 on AIX and Itanium
- SHA-2 PKI Certificates Certified with EBS 12.1.3 on Windows
Hi Elke,
This is a timely post; thank you for collecting all this content. I'm working for a client who's raised some concerns about the level of privileges granted to the APPS user, that doesn't seem to be covered in the FAQ (unless I'm reading too quickly). Thus far, our engagement with Support has resulted in "these privileges are simply required for the Apps to work properly," which is an understandable first-line response, but doesn't really get us the sort of conversation we're looking for. :-) Can you recommend a course of action that would help us have a deeper discussion of the issues?
John,
Thanks for the inquiry.
In general, we follow a least privileges model for database accounts (including APPS) that are owned by Oracle E-Business Suite. Some of the privileges that customers have in their database may have been inherited from older Oracle E-Business Suite releases.
The minimum set of privileges that are supported for the Oracle E-Business Release 12.1 or 12.2 are reflected in latest production database. You can install the latest production database using Rapid Install and then make changes to bring your database to be consistent with the privileges in the latest production database.
If you find that the privileges in the latest production database do not meet your requirements, please log an SR and request an enhancement request. You can also email me your SR number after it is logged.
Thanks.
Elke
P.S. Due to your post, we will add this information to the next version of "FAQ: Oracle E-Business Suite Security (Doc ID 2063486.1)". We appreciate the feedback!