Issue with Azure SQL connector in FDI

Question

@FDI_USER @EloiLopes-Oracle @Dayne-Oracle

Hello Team

Could you confirm whether the Azure SQL connector in FDI utilizes TLS encryption behind the scenes?

Additionally, we’ve observed that the Azure SQL connector we’ve been attempting to use in FDI does not provide an option to enable TLS. Can you clarify if there is a configuration setting available to enforce TLS encryption?

Furthermore, guidance on configuring the connection string in Oracle FDI for secure connectivity would be appreciated.

Looking forward to your response.

Sumanth V -Oracle · Answer

@PRATHEEK - Create a Service Request with Oracle Support and we will assist in getting it whitelisted. Thanks!

PRATHEEK · Answer

@Sumanth V -Oracle

Azure SQL TLS is set to 1.2

2. I'm pretty sure I can get the certificate for Azure but I know nothing about where Oracles trust store is, I've asked our admin and he too doesn't know, but he is investigating it.

3. This seems to be talking about using a different connection methodology - i.e. JDBC rather than Azure SQL. There are 5 different JDBC connectors listed in the FDI preview features, should I be trying to use one of these? (Oracle JDBC1-5, they seem to be clones of one another). The instructions also seem to talk about assembling connection strings but from what I've seen so far there is no ability to do this in FDI, we're just limited to what we can type in the connector setup form.

2nd approach -Azure SQL TLS is set to 1.2

2. There is no facility to add extra properties to the connection string, I am limited to only entering discrete items into the connection form.

3. I have no idea how I am meant to verify that FDI/Data provider supports TLS 1.2

I'm really not a network person so a lot of this stuff is outside my area of expertise

btw- thank you Sumath for your prompt responses, appreciate. Can you please advise what's the process for

Azure IP address needs to be whitelisted in FDI to establish the connection ?

Sumanth V -Oracle · Answer

@PRATHEEK - Yes, it needs to be whitelisted if not done already.