X

The Latest Technology Stack News Directly from EBS Development

New SHA-256 Certificate Now Available for WebADI and Report Manager

Steven Chan
Senior Director

[Updated Sept. 9, 2016: Added additional links to Microsoft resources and background about impact]

WebADI and Report Manager use Visual Basic for Applications (VBA) macros to integrate with Microsoft Office.  All VBA macros must be signed with a valid digital certificate.  If the certificate is invalid or expired, new Microsoft Office will display a warning in the Message Bar like this:

Office Security Warning macros have been disabled

Older Office versions may display a standalone security notice like this:

Office security alert potential security concerns

The workarounds for handling these security alerts vary depending upon how the end-user's desktop is configured or centrally managed via Office group policies. For more information about Microsoft Office macro security handling, see:

What's new in this patch?

Earlier versions of Web ADI for EBS 12.1 and 12.2 were digitally-signed with certificates that expired in August 2016. 

A new SHA-256 digital certificate is now available for EBS 12.1 and 12.2.  This new patch will prevent security alert warning messages from being displayed in Microsoft Office. The new digital certificates are valid through August 2018.

There are four different updates available -- you should pick the patch that corresponds to your EBS version:

Known Issues

Office 2007 does not recognize documents that have been digitally signed using SHA-256 certificates. In such cases adding the documents storage location to 'Trusted Locations' can be used to avoid this issue. Further information is available through the Microsoft document:

References

Join the discussion

Comments ( 2 )
  • Sudhakar Friday, September 9, 2016

    Hi Steven,

    We are using R12.1.3 with webADI. How do I know if we are using the digital certificate and when it is expiring please ?

    Also, I see that "Digital signatures are not supported by Report Manager for EBS 12.1". Is this applicable for us as we are on 12.1.3 and if yes, what should we do ?

    Regards,

    Sudhakar.


  • Steven Chan Friday, September 9, 2016

    Hi, Sudhakar,

    I've updated the article with more background. If you haven't applied this new patch, your Web ADI macros are signed with a digital certification that expired in August 2016.

    Regards,

    Steven


Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.Captcha
Oracle

Integrated Cloud Applications & Platform Services