We use Java Archive (JAR) files to deliver certain types of E-Business Suite content to end-user desktop clients. JAR files can be digitally signed for increased security. Oracle E-Business Suite uses a self-signed certificate to sign the JAR files that are downloaded to the client PC when launching forms and other applets (such as Workflow Status Diagram or Account Hierarchy Manager). By default, E-Business Suite JAR files are signed with 1024-bit self-signed digital certificates. Self-signed digital certificates can trigger Windows security warnings like this:
Some E-Business Suite users have advanced requirements for signing JAR files, including the ability to:
Sign E-Business Suite JAR files with 3072-bit certificates
Sign E-Business Suite JAR files with digital certificates from third-party Certificate Authorities (CA) (e.g.Verisign, Comodo, etc.)
I’m pleased to announce that both of these advanced JAR file signing options are now certified for Oracle E-Business Suite Release 11i and 12. What are the benefits of these new signing options? The first of these two new signing options meets the latest recommendations of the US National Institute of Standards and Technology (NIST):
The second option allows you to prevent the potentially-alarming warning from being triggered when your users access certain E-Business Suite functions for the first time. Oracle E-Business Suite Release 12 Certified Platforms
Linux x86 (Oracle Linux 4, 5)
Linux x86 (RHEL 3, 4, 5)
Linux x86 (SLES 9, 10)
Linux x86-64 (Oracle Linux 4, 5)
Linux x86-64 (RHEL 4, 5)
Linux x86-64 (SLES 9, 10)
Oracle Solaris on SPARC (64-bit) (8, 9, 10)
IBM AIX on Power Systems (64-bit) (5.3, 6.1)
IBM Linux on System z** (RHEL 5, SLES 9, SLES 10)
HP-UX Itanium (11.23, 11.31)
HP-UX PA-RISC (64-bit) (11.11, 11.23, 11.31)
Microsoft Windows Server (32-bit) (2003, 2008 for EBS 12.1 only)
Oracle E-Business Suite Release 11i Certified Platforms
Steven Chan was a Senior Director in the Oracle Applications Technology Group. He managed EBS technology stack certifications, ATG product management, ATG documentation and curriculum, and ATG Quality Assurance in the E-Business Suite Development division.
Steven joined Oracle in 1998. Steven retired from Oracle in 2019. Prior to joining Oracle, he held positions with IBM, Deloitte & Touche Consulting, and other software companies.
Steven is an Oracle ACE and a three-time recipient of the Oracle Applications User Group 'Ambassador of the Year' Award (2007, 2009, 2010). Steven received the Oracle Applications User Group Lifetime Service Award in 2011.
