Oracle Analytics and AI

Quick Question - Security Update For Oracle Analytics (Doc ID 3029871.1)

We have Oracle Analytics Cloud configured in our tenancy in OCI Ashburn and through private access channels we access data source Exadata cloud service currently with out using any TLS.

Does the security Update For Oracle Analytics (Doc ID 3029871.1) will impact us in anyway? since we are yet utilizing TLS for data sources in our cloud.

Thank you for your help in advance.

Regards,

Sridhar

Find more posts tagged with

Accepted answers

Gianni Ceresa

If you aren't using a TLS connection, the change in TLS connections will not affect you. The change is that they will "force" to use newer/recent versions and probably desupport old versions (TLS 1.0 and 1.1 I imagine).

If you have connection using TLS, you should perform the test documented to check if they will be good (should be TLS 1.2 or 1.3).

GayathriAnand-Oracle

The validation is only needed if you are using TLS based connections to the datasource. The validation is to check openssl3.x connectivity for all TLS connections. In the January Update of OAC there will be a new System Setting called 'TLS Connection Mode' which will be set to 'Legacy' by default. This setting will make the existing connections work but recommendation is to ensure openssl3 connectivity working and switch 'TLS Connection Mode' to Advanced (this setting will go away in March update). Again none of this applicable for non TLS connections.

Thanks

Gayathri

All comments

Gianni Ceresa

If you have connection using TLS, you should perform the test documented to check if they will be good (should be TLS 1.2 or 1.3).

GayathriAnand-Oracle

Thanks

Gayathri

Sridhar Majety

Thank you very much for your quick response.

JavierMoreno

Hello, good day and happy new year to everyone.
Please, is the day of change defined? to proactively manage the review in our clients.
I remain grateful and attentive.
Greetings

GayathriAnand-Oracle

The change will be rolled out as part of the January 2025 update of OAC. Customers will receive notification on when their instance is getting this update.

Please check KM article: January 2025 Security Update for Oracle Analytics: Impacts Connections Using TLS KB127925

As noted by default Advanced TLS will not be enforced in Jan update (there is a system setting to enable/disable openssl3 enforcement) but from March update it will be enforced.

What Do I Need to Do Before the January 2025 Update to Mitigate Impact?

Before the January 2025 update, test your data connections as described in "What Actions Can I take to Avoid Connection Issues?"

If all your connections pass the tests, take no further action now.
If a test fails, upgrade the database or SMTP server to the latest version that supports TLS1.2 and recreate the certificates.

Important: It’s important that you test and resolve connection issues as soon as possible before the January 2025 update.

What Do I Need to Do After the January 2025 Update?

After the January 2025 update:

If you haven’t done so already, test your data connections as described in "What Actions Can I take to Avoid Connection Issues?"
- If a test fails, upgrade the database or SMTP server to the latest version that supports TLS1.2 and recreate the certificates.
After all your connections pass the tests, go to the Advanced System Settings page in Oracle Analytics and set TLS Connection Mode to Enhanced.
If any of your reports or dashboard fail, test your connection as described in "What Actions Can I Take to Avoid Connection Issues?"
If you're unable to resolve the issue, log a Service Request with Oracle Support and reset TLS Connection Mode to Legacy while you resolve the issue.

Note: The security update will be permanently enabled in subsequent Oracle Analytics updates.

Thanks

Gayathri

JavierMoreno

Indeed, the tests were carried out and were satisfactory. At the year-end meeting, they asked me about the dates of the change, to keep it under control. With the answer you have given me, I will update the internal information so that they are aware and I will mention it to the client at the meeting we will have soon.

Thank you very much for your help, Gayathri!
Best regards!

Javier

Sridhar Majety

Hi Gayathri,

We recently notification saying - After the Oracle Analytics Cloud May 2025 update, the TLS security update will be applied to connections by default.

As we have Oracle Analytics Cloud configured in our tenancy in OCI Ashburn and through private access channels we access data sources in Exadata cloud service databases currently not yet configured to support any TLS.

Does the above change means we need to make we configure TLS (SSL) in our Exadata Cloud Services (X8) environment by then. Even SSL is configure in newer deployments since the above was provisioned longtime ago the configuration was not by default.

Also is there any document you can point us to on steps to take to test TLS connections from OAC to Exacs.

Thank you for your support.

Regards,

Sridhar Majety

SteveF-Oracle

Hi @Sridhar Majety,

Welcome to the Oracle Analytics community!

Sign in to My Oracle Support (https://support.oracle.com) and read the article TLS Security Updates for Connections in Oracle Analytics (KB127925).

This article explains the planned security update and recommends the actions you can take to mitigate potential issues.

Thank you for posting your question.