Home Discussions Questions & Answers Configuring TLS for Oracle Enterprise Command Center Framework

Configuring TLS for Oracle Enterprise Command Center Framework

Avatar photoCustomer February 8, 2024 at 6:01 am

Security audits require us to ensure all communication to and from the Oracle Enterprise Command Center (ECC) Framework and the Integrated SOA Gateway (ISG) uses secure protocols. What steps are required to configure TLS/HTTPS for the ECC Framework?

Viewing 6 reply threads
  • Author
    Replies
    • Support February 8, 2024 at 10:09 pm  

      Configuring TLS/HTTPS for the ECC Framework is essential for security. This process involves specific steps to secure the communication channel, ensuring data integrity and confidentiality between EBS and the ECC components. ECC TLS/HTTPS with EBS configuration references are available in our technical posts.

    • Avatar photoCustomer February 9, 2024 at 9:22 am  

      We also rely on ISG for custom integrations. Are the steps for configuring TLS/HTTPS for the Integrated SOA Gateway similar, and are there different procedures for EBS 12.1 and 12.2?

    • Support February 9, 2024 at 8:44 pm  

      The requirement to secure ISG communications is also critical. We provide detailed instructions for configuring TLS/HTTPS for Oracle EBS Integrated SOA Gateway (ISG) in both EBS 12.1 and EBS 12.2 environments. While the goal is the same, the underlying architectural differences between 12.1 and 12.2 may necessitate slightly different steps.

    • Avatar photoCustomer February 11, 2024 at 2:44 am  

      Given the importance of securing the EBS application tier, especially in 12.2 with its layered architecture, how does enforcing HTTPS protect against general attacks through HTTP?

    • Support February 11, 2024 at 4:37 pm  

      Enforcing HTTPS protects your EBS 12.2 environment from various security risks associated with unencrypted HTTP traffic. This is part of the larger strategic recommendation to maintain modern security postures, including proper configuration of components like ECC and ISG, which can be vulnerable if left unsecured.

    • Avatar photoCustomer February 13, 2024 at 4:02 am  

      If we enable HTTPS/TLS across all these components, does that affect the functioning or deployment method of Blitz Report?

    • Support February 14, 2024 at 8:37 pm  

      Blitz Report is designed to work within standard, secure EBS environments. Its execution via Forms and the Concurrent Manager remains unaffected, as it continues to use the standard EBS infrastructure (including JWS where applicable). Securing your communication layers (ECC, ISG, core EBS) is a necessary prerequisite for overall operational security.

Viewing 6 reply threads
  • You must be logged in to reply to this post.

Login with: