SHA-256 Certificate Updates Now Available for WebADI and Report Manager

May 3, 2018 | 2 minute read
Steven Chan
Senior Director
Text Size 100%:

WebADI and Report Manager use Visual Basic for Applications (VBA) macros to integrate with Microsoft Office.  All VBA macros must be signed with a valid digital certificate.  If the certificate is invalid or expired, new Microsoft Office will display a warning in the Message Bar like this:

Office Security Warning macros have been disabled

Older Office versions may display a standalone security notice like this:

Office security alert potential security concerns

The workarounds for handling these security alerts vary depending upon how the end-user's desktop is configured or centrally managed via Office group policies. For more information about Microsoft Office macro security handling, see:

What's new in this patch?

Our last update to Web ADI for EBS 12.1 and 12.2 renewed the digital certificates that were valid to August 2018. 

A new SHA-256 digital certificate is now available for EBS 12.1.3 and 12.2.3 (and later 12.2 releases).  This new patch will prevent security alert warning messages from being displayed in Microsoft Office. The new digital certificates are valid through February 2020.

There are three different updates available -- you should pick the patch that corresponds to your EBS version:

Known Issues

Office 2007 does not recognize documents that have been digitally signed using SHA-256 certificates. In such cases adding the documents storage location to 'Trusted Locations' can be used to avoid this issue. Further information is available through the Microsoft document:


Steven Chan

Senior Director

Steven Chan was a Senior Director in the Oracle Applications Technology Group.  He managed EBS technology stack certifications, ATG product management, ATG documentation and curriculum, and ATG Quality Assurance in the E-Business Suite Development division.

Steven joined Oracle in 1998.  Steven retired from Oracle in 2019. Prior to joining Oracle, he held positions with IBM, Deloitte & Touche Consulting, and other software companies. 

Steven is an Oracle ACE and a three-time recipient of the Oracle Applications User Group 'Ambassador of the Year' Award (2007, 2009, 2010). Steven received the Oracle Applications User Group Lifetime Service Award in 2011.

Previous Post

April 2018 Update to E-Business Suite Technology Codelevel Checker (ETCC)

Steven Chan | 2 min read

Next Post

New White Paper: Creating Dependent List of Values in Web ADI 12.2

Steven Chan | 2 min read