By Elke Phelps-Development-Oracle on Nov 23, 2015
As a follow-up to a prior announcement, SHA-2 signed PKI certificates are now certified for inbound connections to the Oracle HTTP Server (OHS) delivered with Oracle E-Business Suite 12.1.3 on AIX and Itanium.
As published in a prior blog article, SHA-2 signed PKI certificates are already certified for outbound connections from Oracle E-Business Suite 12.1.3.
If you are enabling SSL/TLS for the first time for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:
If you have already enabled SSL or TLS and are updating to a SHA-2 signed PKI certificate with the OHS for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)
Overview of the Requirements
The following is a summary of the requirements for deploying a SHA-2 signed PKI certificate for inbound connections to the OHS for Oracle E-Business Suite 12.1.3 include the following:
- Update OPatch
If you have not already updated to the OPatch 9i, 10.1 version 18.104.22.168.63 or later, download and install it. For the latest OPatch information, refer to the following:OPatch for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4), (Note 283367.1)
- Apply the minimum required patch level for the Oracle Fusion Middleware 10.1.3 Oracle Home
The minimum requirement is to upgrade the Oracle Fusion Middleware 10.1.3 Oracle Home to 10.1.3.5 per the following:
- Apply the October 2015 CPU to the Oracle Fusion Middleware 10.1.3 Oracle Home
The minimum CPU requirement for the Oracle Fusion Middleware 10.1.3.5 is the October 2015 CPU level (Patch 21845960) per the following:
Note: Testing is performed with all CPU patches applied across the technology stack components and the Oracle E-Business Suite. It is possible to apply the October 2015 CPU (Patch 21845960) to FMW 10g without applying the Oracle E-Business Suite October 2015 CPU or Oracle Database October 2015 CPU/PSU; however, we recommend that customers apply the latest CPU across all technology stack components and the Oracle E-Business Suite.
- Apply platform-related patch to the Oracle Fusion Middleware 10.1.3 Oracle Home
For AIX and HP Itanium, apply patch 21948197 to the Oracle Fusion Middleware 10.1.3.5 Oracle Home.
- Perform all necessary post steps.
Post steps include generating the CSR to obtain the SHA-2 signed PKI certificate from your certificate authority (CA). Once you have the certificate, you will import it using Oracle Wallet.
Refer to the appropriate section in the following My Oracle Support note for the complete list of post-steps for your environment:
Pending Platform Certifications
There will be an additional patch required on top of the FMW 10g Oracle Home October 2015 CPU for Windows. The required patch is currently in development.
Oracle's revenue recognition policy prohibits us from providing time lines and dates for future certifications and releases. Please monitor this blog for the latest in certification announcements.
- SHA-2 Signed PKI Certificates Certified with EBS 12.1.3
- Critical Patch Update for October 2015 Now Available
- Using SHA-2 Signed Certificates with EBS
- Enhance E-Business Suite Security By Switching to TLS
- Enabling SSL in Oracle E-Business Suite Release 12 (Note 376700.1)
- Secure Configuration Guide for Oracle E-Business Suite Release 12 (Note 403537.1)
The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.