Configuring TLS for Oracle Enterprise Command Center Framework

Customer December 24, 2022 at 4:11 am

We are deploying Oracle Enterprise Command Center (ECC) Framework and need to ensure all communication is secured using Transport Layer Security (TLS)/HTTPS. What is involved in Configuring TLS for Oracle Enterprise Command Center Framework?

Viewing 10 reply threads

Author
Replies
- Support December 26, 2022 at 1:34 am
  Configuring TLS for ECC is critical for security. This process typically involves setting up the necessary SSL certificates on the ECC web server components (often WebLogic) and configuring the ECC Framework properties to use HTTPS protocols for both administrative and managed server ports.
- Customer December 26, 2022 at 11:25 am
  If we run scripts during the TLS configuration, what kind of errors might indicate a problem with the certificate handshake or environment setup?
- Support December 27, 2022 at 2:05 am
  During TLS setup, various scripting or certificate errors can occur. Common issues include errors related to certificate chain trust, incorrect keystore passwords, or issues with common name (CN) mismatch, such as the `ERR_CERT_COMMON_NAME_INVALID` error sometimes seen in Chrome on Windows when dealing with self-signed certificates.
- Customer December 27, 2022 at 7:56 am
  We are running EBS 12.2. Does the standard EBS web tier already enforce HTTPS, and if so, how does this interact with the ECC setup?
- Support December 29, 2022 at 3:35 am
  Ensuring your EBS 12.2 is protected from attacks through HTTP is a major security consideration. While separate setup posts exist for securing ISG in 12.2 and ECC V11 properties show default HTTP configurations (`EBS_MIDDLETIER_PROTOCOL=http`) , securing ECC requires explicit configuration to use SSL ports (e.g., `ECC_ADMIN_SSL_PORT=7777`, `ECC_MANAGED_SSL_PORT=7778`). You must ensure OHS and WebLogic components are correctly handling the secured connection.
- Customer December 31, 2022 at 5:21 am
  In case of configuration issues, we sometimes lose access to the standard EBS login or dashboard. Are there troubleshooting tools available from the DBA perspective?
- Support January 2, 2023 at 6:17 am
  DBAs simplify their life by using Blitz Report for diagnostic and support reports. This includes querying FND tables and monitoring concurrent requests. Such tools provide visibility into system status and parameters that may be causing connection errors, even when standard interfaces are inaccessible.
- Customer January 4, 2023 at 7:43 am
  We need to ensure all custom reports run through Blitz Report also adhere to data access rules, regardless of the user’s connection method (HTTP or HTTPS).
- Support January 6, 2023 at 2:13 am
  Blitz Report enforces data security through Oracle VPD. This is enforced at the database layer based on the user’s context and privileges, entirely independent of the network protocol (TLS/HTTPS) used to access the EBS application tier.
- Customer January 7, 2023 at 6:03 pm
  We noticed that ECC dashboards for V11 specifically list parameters related to enabling PDF export. Is this standard functionality?
- Support January 9, 2023 at 5:47 am
  Yes, ECC V11 configuration parameters include settings like `EXPORT_PDF_ENABLED = true` and defining a `EXPORT_PDF_MAX_COUNT` (default 100). Separately, Blitz Report also supports generating PDF output from its reports via post-processing.
Author
Replies