Thursday Nov 26, 2015

SHA-2 PKI Certificates Certified with EBS 12.1.3 on Windows

As a follow-up to a prior announcement, SHA-2 signed PKI certificates are now certified for inbound connections to the Oracle HTTP Server (OHS) delivered with Oracle E-Business Suite 12.1.3 on Windows.  

As published in a prior blog article, SHA-2 signed PKI certificates are already certified for outbound connections from Oracle E-Business Suite 12.1.3.

Required Steps

If you are enabling SSL/TLS for the first time for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 3 (Note 376700.1)

If you have already enabled SSL or TLS and are updating to a SHA-2 signed PKI certificate with the OHS for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)

Overview of the Requirements

The following is a summary of the requirements for deploying a SHA-2 signed PKI certificate for inbound connections to the OHS for Oracle E-Business Suite 12.1.3 include the following:

  • Update OPatch

If you have not already updated to the OPatch 9i, 10.1 version 1.0.0.0.63 or later, download and install it. For the latest OPatch information, refer to the following:

OPatch for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4), (Note 283367.1)
  • Apply the minimum required patch level for the Oracle Fusion Middleware 10.1.3 Oracle Home

The minimum requirement is to upgrade the Oracle Fusion Middleware 10.1.3 Oracle Home to 10.1.3.5 per the following:

Upgrading to the Latest OracleAS 10g 10.1.3.x Patch Set in Oracle E-Business Suite Release 12 (Note 454811.1)

  • Apply the October 2015 CPU to the Oracle Fusion Middleware 10.1.3 Oracle Home

The minimum CPU requirement for the Oracle Fusion Middleware 10.1.3.5 is the October 2015 CPU level (Patch 21845960) per the following:

Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (October 2015) (Note 2051000.1)

Note: Testing is performed with all CPU patches applied across the technology stack components and the Oracle E-Business Suite. It is possible to apply the October 2015 CPU (Patch 21845960) to FMW 10g without applying the Oracle E-Business Suite October 2015 CPU or Oracle Database October 2015 CPU/PSU; however, we recommend that customers apply the latest CPU across all technology stack components and the Oracle E-Business Suite.

  • Apply platform-related patch to the Oracle Fusion Middleware 10.1.3 Oracle Home

For Windows, apply patch 22251660 to the Oracle Fusion Middleware 10.1.3.5 Oracle Home.

  • Perform all necessary post steps.

Post steps include generating the CSR to obtain the SHA-2 signed PKI certificate from your certificate authority (CA). Once you have the certificate, you will import it using Oracle Wallet.

Refer to the appropriate section in the following My Oracle Support note for the complete list of post-steps for your environment:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)

Pending Platform Certifications

None. All platforms are now certified.

References

Related Articles

Monday Nov 23, 2015

SHA-2 PKI Certificates Certified with EBS 12.1.3 on AIX and Itanium

As a follow-up to a prior announcement, SHA-2 signed PKI certificates are now certified for inbound connections to the Oracle HTTP Server (OHS) delivered with Oracle E-Business Suite 12.1.3 on AIX and Itanium.  

As published in a prior blog article, SHA-2 signed PKI certificates are already certified for outbound connections from Oracle E-Business Suite 12.1.3.

Required Steps

If you are enabling SSL/TLS for the first time for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 3 (Note 376700.1)

If you have already enabled SSL or TLS and are updating to a SHA-2 signed PKI certificate with the OHS for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)

Overview of the Requirements

The following is a summary of the requirements for deploying a SHA-2 signed PKI certificate for inbound connections to the OHS for Oracle E-Business Suite 12.1.3 include the following:

  • Update OPatch

If you have not already updated to the OPatch 9i, 10.1 version 1.0.0.0.63 or later, download and install it. For the latest OPatch information, refer to the following:

OPatch for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4), (Note 283367.1)
  • Apply the minimum required patch level for the Oracle Fusion Middleware 10.1.3 Oracle Home

The minimum requirement is to upgrade the Oracle Fusion Middleware 10.1.3 Oracle Home to 10.1.3.5 per the following:

Upgrading to the Latest OracleAS 10g 10.1.3.x Patch Set in Oracle E-Business Suite Release 12 (Note 454811.1)

  • Apply the October 2015 CPU to the Oracle Fusion Middleware 10.1.3 Oracle Home

The minimum CPU requirement for the Oracle Fusion Middleware 10.1.3.5 is the October 2015 CPU level (Patch 21845960) per the following:

Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (October 2015) (Note 2051000.1)

Note: Testing is performed with all CPU patches applied across the technology stack components and the Oracle E-Business Suite. It is possible to apply the October 2015 CPU (Patch 21845960) to FMW 10g without applying the Oracle E-Business Suite October 2015 CPU or Oracle Database October 2015 CPU/PSU; however, we recommend that customers apply the latest CPU across all technology stack components and the Oracle E-Business Suite.

  • Apply platform-related patch to the Oracle Fusion Middleware 10.1.3 Oracle Home

For AIX and HP Itanium, apply patch 21948197 to the Oracle Fusion Middleware 10.1.3.5 Oracle Home.

  • Perform all necessary post steps.

Post steps include generating the CSR to obtain the SHA-2 signed PKI certificate from your certificate authority (CA). Once you have the certificate, you will import it using Oracle Wallet.

Refer to the appropriate section in the following My Oracle Support note for the complete list of post-steps for your environment:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)

Pending Platform Certifications

There will be an additional patch required on top of the FMW 10g Oracle Home October 2015 CPU for Windows. The required patch is currently in development.

Oracle's revenue recognition policy prohibits us from providing time lines and dates for future certifications and releases. Please monitor this blog for the latest in certification announcements.

Related Articles

References

The preceding is intended to outline our general product direction.  It is intended for information purposes only, and may not be incorporated into any contract.   It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision.  The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

Tuesday Oct 20, 2015

SHA-2 Signed PKI Certificates Certified with EBS 12.1.3

I'm pleased to announce that SHA-2 signed PKI certificates are now certified for inbound connections to the Oracle HTTP Server (OHS) delivered with Oracle E-Business Suite 12.1.3.

As published in a prior blog article, SHA-2 signed PKI certificates are already certified for outbound connections from Oracle E-Business Suite 12.1.3.

Required Steps

If you are enabling SSL/TLS for the first time for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 3 (Note 376700.1)

If you have already enabled SSL or TLS and are updating to a SHA-2 signed PKI certificate with the OHS for Oracle E-Business Suite 12.1.3, refer to the following for all prerequisite requirements and post steps:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)

Overview of the Requirements

The following is a summary of the requirements for deploying a SHA-2 signed PKI certificate for inbound connections to the OHS for Oracle E-Business Suite 12.1.3 include the following:

  • Update OPatch

If you have not already updated to the OPatch 9i, 10.1 version 1.0.0.0.63 or later, download and install it. For the latest OPatch information, refer to the following:

OPatch for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4), (Note 283367.1)
  • Apply the minimum required patch level for the Oracle Fusion Middleware 10.1.3 Oracle Home

The minimum requirement is to upgrade the Oracle Fusion Middleware 10.1.3 Oracle Home to 10.1.3.5 per the following:

Upgrading to the Latest OracleAS 10g 10.1.3.x Patch Set in Oracle E-Business Suite Release 12 (Note 454811.1)

  • Apply the October 2015 CPU to the Oracle Fusion Middleware 10.1.3 Oracle Home

The minimum CPU requirement for the Oracle Fusion Middleware 10.1.3.5 is the October 2015 CPU level (Patch 21845960) per the following:

Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (October 2015) (Note 2051000.1)

Note: Testing is performed with all CPU patches applied across the technology stack components and the Oracle E-Business Suite. It is possible to apply the October 2015 CPU (Patch 21845960) to FMW 10g without applying the Oracle E-Business Suite October 2015 CPU or Oracle Database October 2015 CPU/PSU; however, we recommend that customers apply the latest CPU across all technology stack components and the Oracle E-Business Suite.

  • Perform all necessary post steps.

Post steps include generating the CSR to obtain the SHA-2 signed PKI certificate from your certificate authority (CA). Once you have the certificate, you will import it using Oracle Wallet.

Refer to the appropriate section in the following My Oracle Support note for the complete list of post-steps for your environment:

Enabling SSL/TLS in Oracle E-Business Suite Release 12, Section 11 (Note 376700.1)

Pending Platform Certifications

For AIX, HP Itanium and Windows, there will be an additional patch required on top of the FMW 10g Oracle Home October 2015 CPU. The required patch is currently in development.

Oracle's revenue recognition policy prohibits us from providing time lines and dates for future certifications and releases. Please monitor this blog for the latest in certification announcements.

Related Articles

References

Critical Patch Update for October 2015 Now Available

The  Critical Patch Update (CPU) for October 2015 was released on October 20, 2015.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • January 19, 2016
  • April 19, 2016
  • July 19, 2016
  • October 18, 2016
E-Business Suite Releases 11i and 12 Reference

Wednesday Jul 15, 2015

Critical Patch Update for July 2015 Now Available

The  Critical Patch Update (CPU) for July 2015 was released on July 14, 2015.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • October 20, 2015
  • January 19, 2016
  • April 19, 2016
  • July 19, 2016
E-Business Suite Releases 11i and 12 Reference

Wednesday Apr 15, 2015

Critical Patch Update for April 2015 Now Available

The  Critical Patch Update (CPU) for April 2015 was released on April 14, 2015.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • July 14, 2015
  • October 20, 2015
  • January 19, 2016
  • April 19, 2016
E-Business Suite Releases 11i and 12 Reference

Tuesday Jan 20, 2015

Critical Patch Update for January 2015 Now Available

The  Critical Patch Update (CPU) for January 2015 was released on January 20, 2015.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • April 14, 2015
  • July 14, 2015
  • October 20, 2015
  • January 19, 2016
E-Business Suite Releases 11i and 12 Reference

Wednesday Oct 15, 2014

Critical Patch Update for October 2014 Now Available

The Critical Patch Update (CPU) for October 2014 was released on October 14, 2014.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the Advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:
  • 13 January 2015
  • 14 April 2015
  • 14 July 2015
  • 13 October 2015

E-Business Suite Releases 11i and 12 Reference

Wednesday Jul 16, 2014

Critical Patch Update for July 2014 Now Available

The  Critical Patch Update (CPU) for July 2014 was released on July 15, 2014.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • October 14, 2014
  • January 13, 2015
  • April 14, 2015
  • July 14, 2015
E-Business Suite Releases 11i and 12 Reference

Wednesday Apr 16, 2014

Critical Patch Update for April 2014 Now Available

The  Critical Patch Update (CPU) for April 2014 was released on April 15, 2014.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • July 15, 2014
  • October 14, 2014
  • January 13, 2015
  • April 14, 2015
E-Business Suite Releases 11i and 12 Reference

Tuesday Jan 14, 2014

Critical Patch Update for January 2014 Now Available

The  Critical Patch Update (CPU) for January 2014 was released on January 14, 2014.  Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • April 15, 2014
  • July 15, 2014
  • October 14, 2014
  • January 13, 2015
E-Business Suite Releases 11i and 12 Reference

Tuesday Oct 15, 2013

Critical Patch Update for October 2013 Now Available

The  Critical Patch Update (CPU) for October 2013 was released on October 15, 2013. Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • January 14, 2014
  • April 15, 2014
  • July 15, 2014
  • October 14, 2013
E-Business Suite Releases 11i and 12 Reference

Wednesday Jul 17, 2013

Critical Patch Update for July 2013 Now Available

The  Critical Patch Update (CPU) for July 2013 was released on July 16, 2013. Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • October 15, 2013
  • January 14, 2014
  • April 15, 2014
  • July 15, 2014
E-Business Suite Releases 11i and 12 Reference

Tuesday Jan 15, 2013

Critical Patch Update for January 2013 Now Available

The  Critical Patch Update (CPU) for January 2013 was released on January 15, 2013. Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • April 16, 2013
  • July 16, 2013
  • October 15, 2013
  • January 14, 2014
E-Business Suite Releases 11i and 12 Reference

Monday Oct 29, 2012

Critical Patch Updates During EBS 11i Exception to Sustaining Support Period

As previously blogged in the EBS 11i and 12.1 Support Timeline Changes entry, two important changes to the Oracle Lifetime Support policies were announced at Oracle OpenWorld 2012 - San Francisco.  These changes affect E-Business Suite Releases 11i and 12.1.

Timeline showing updated EBS Support dates

Critical Patch Updates for EBS 11i during the Exception to Sustaining Support Period

You may be wondering about the availability of Critical Patch Updates (CPU) for EBS 11i during the Exception to Sustaining Support period.  The following details the E-Business Suite Critical Patch Update support policy for EBS 11i during the Exception to Sustaining Support period:

  • Oracle will continue to provide CPUs containing critical security fixes for E-Business Suite 11i. 
  • CPUs will be packaged and released as as cumulative patches for both ATG RUP 6 and ATG RUP 7.
  • As always, we try to minimize the number of patches and dependencies required for uptake of a CPU; however, there have been quite a few changes to the 11i baseline since its release.  For dependency reasons the 11i CPUs may require a higher number of files in order to bring them up to a consistent, stable, and well tested level.
  • EBS 11i customer will continue to receive CPUs up to and including the October 2014 CPU.

Where can I learn more?

There are two interlocking policies that affect the E-Business Suite:  Oracle's Lifetime Support policies for each EBS release (timelines which were updated by this announcement), and the Error Correction Support policies (which state the minimum baselines for new patches).

For more information about how these policies interact, see:

What about E-Business Suite technology stack components?

Things get more complicated when one considers individual techstack components such as Oracle Forms or the Oracle Database.  To learn more about the interlocking EBS+techstack component support windows, see these two articles:

Where can I learn more about Critical Patch Updates?

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents. 

Related Articles

Wednesday Oct 17, 2012

Critical Patch Update for October 2012 Now Available

The Critical Patch Update (CPU) for October 2012 was released on October 16, 2012. Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • January 15, 2013
  • April 16, 2013
  • July 16, 2013
  • October 15, 2013
E-Business Suite Releases 11i and 12 Reference

Tuesday Jul 17, 2012

Critical Patch Update for July 2012 Now Available

The Critical Patch Update (CPU) for July 2012 was released on July 17, 2012. Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • October 16, 2012
  • January 15, 2013
  • April 16, 2013
  • July 16, 2013
E-Business Suite Releases 11i and 12 Reference

Tuesday Apr 17, 2012

Critical Patch Update for April 2012 Now Available

The Critical Patch Update (CPU) for April 2012 was released on April 17, 2012. Oracle strongly recommends applying the patches as soon as possible.

The Critical Patch Update Advisory is the starting point for relevant information. It includes a list of products affected, pointers to obtain the patches, a summary of the security vulnerabilities, and links to other important documents.

Supported products that are not listed in the "Supported Products and Components Affected" Section of the advisory do not require new patches to be applied.

Also, it is essential to review the Critical Patch Update supporting documentation referenced in the Advisory before applying patches, as this is where you can find important pertinent information.

The Critical Patch Update Advisory is available at the following location:

The next four Critical Patch Update release dates are:

  • July 17, 2012
  • October 16, 2012
  • January 15, 2013
  • April 16, 2013
E-Business Suite Releases 11i and 12 Reference
About

Search

Categories
Archives
« June 2016
SunMonTueWedThuFriSat
   
3
4
5
8
9
10
11
12
13
15
16
17
18
19
20
22
23
24
25
26
27
28
29
30
  
       
Today