Attention: To align with new corporate security policies, and to match policies adopted by other communities within Oracle, the My Oracle Support Community access requirements will change beginning September 18, 2025. MOSC will now require that member accounts in our community be associated to a *corporate* email address. This means that users with generic domains (such as gmail.com, yahoo.com, and others) will no longer be granted access to the discussion forums and ideas labs. If this policy affects you, act now to change the email address that is associated with your Oracle (and community) account. Alternatively, you can opt to create a new Oracle account that uses your corporate email domain.

Identity Management (MOSC)

Encryption standard and strength for OIM Database Key and Challenge Response Security Questions?

Feb 4, 2014 6:49PM edited Mar 14, 2014 11:08AM in Identity Management (MOSC) 3 commentsAnswered

Hi, we are in middle of a security assessment and few questions that we are trying to find an answer are:-

What Encryption standard and strength is used for OIM Database Key?
What Encryption standard and strength is used to encrypt Answers for Challenge Response Security Questions for user accounts?
Is it possible to change Encryption method, if required?

I did find a related article (Doc ID 739559.1) but that is for older version (ver 9.x) of OIM. Our OIM version is 11g 11.1.1.3 BPO7.

An urgent closure is required for these items, so an expedited response will be highly appreciated.

Thanks

Tagged:

oim

1

Howdy, Stranger!

To view full details, sign in to My Oracle Support Community.

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month