Oracle Analytics Cloud and Server

Home› Oracle Analytics› Oracle Analytics Forums› Oracle Analytics Cloud and Server› Oracle Analytics Cloud and Server

Categories

Welcome to the Oracle Analytics Community: Please complete your User Profile and upload your Profile Picture

OBIEE 12C and TLSv1.2

Received Response
5
Views
2
Comments
user8838589
user8838589 Rank 1 - Community Starter
edited Aug 13, 2024 6:13PM in Oracle Analytics Cloud and Server

Per Oracle's document New Features in Oracle Business Intelligence Security , one of the SSL changes is "Higher security - TLSv1.2 only".  Does this mean that if I use MS Active Directory for authentication of users and groups, then MSAD must also support TLSv1.2?

Answers

  • Venkata Rachuri
    Venkata Rachuri Rank 5 - Community Champion

    One way to use is SHA-256 certs (TSLV1.2)  for SSL in OBIEE and Use non SSL port of MSAD ( in case you cannot update the ldap  TSL) when using LDAP authentication in web logic -- Not a best way

    Other way is both OBIEE and MSAD  must support TLSV1.2 just to have end to end  encrypted communication.

    In my company they did company wide secuirty upgrade of all applications to use SHA256 certs due to security loop holes in earlier version. So It depends

    Thanks

    Venkat

  • handat
    handat Rank 5 - Community Champion

    It will also depend on the version of the JDK you are using. Unless you are using the latest jdk 7 patch or jdk 8, TLS 1.2 is only by default applied to HTTPS protocol but ommited for LDAPS when making connections as a client. You can change the behaviour by changing settings in java.security config file in the jre security folder.