Setting Credentials

This chapter covers the following topics:

Overview of Credentials

The Enterprise Manager credential subsystem enables Enterprise Manager administrators to store credentials, in a secure manner, as preferences or operation credentials. The credentials can then be used to perform different system management activities, such as real-time monitoring, patching, provisioning, and other target administrative operations.

Preferred Credentials

Preferred credentials are used to simplify access to managed targets by storing target login credentials in the Management Repository. With a preferred credentials set, users can carry out administrative operations using the job system without being prompted to log in to the target. Preferred credentials are set on a per user basis, thus ensuring the security of the managed enterprise environment.

Default Preferred Credentials

Default preferred credentials can be set for a particular target type and will be available for all the targets of the target type. It will be overridden by target preferred credentials.

Target Preferred Credentials

Target credentials are preferred credentials set for a particular target.

Named Credentials

To set a preferred credential, you must first create a named credential. Credentials are stored within Enterprise Manager as "named" entities. Administrators can define and store credentials within Enterprise Manager and refer to the credential by a credential name.

If only the senior DBAs have knowledge of higher privileged credentials like sys credentials for a database, they can store these credentials in a named credential and share the name with the junior administrators. Junior administrators can perform their jobs using the named credentials without knowing what the actual credentials are.

If the administrators have the same credentials for targets, they can create one named credential containing those credentials and share the name with appropriate personnel. This simplifies credential maintenance (changing passwords, for example) by eliminating the need to create several copies of named credentials containing the same credentials.

Preferred Credentials for Oracle E-Business Suite Application Login

Create named credential for Oracle E-Business Suite Application Login

  1. Navigate to Setup menu > Security > Named Credentials.

  2. On the Named Credentials page, click Create.

  3. Provide an appropriate name and description.

  4. Select Oracle E-Business Suite from the Authenticating Target Type drop-down list.

  5. Select E-Business Suite Applications Login Credential from the Credential Type drop-down list.

  6. Select the scope.

    • If you choose Global, this named credential will be applicable for all Oracle E-Business Suite targets.

    • If you choose Target:

      • Select Oracle E-Business Suite as the target type.

      • Select the Oracle E-Business Suite for which this named credential is applicable.

  7. Enter the applications login user name and password in the credential properties.

  8. You can test and save the credentials.

    the picture is described in the document text

Set Preferred Credential for Oracle E-Business Suite Application Login

  1. Navigate to Setup menu > Security > Preferred Credentials.

  2. Search for and select the Target Type "Oracle E-Business Suite."

  3. Click Manage Preferred Credentials.

Set Default Preferred Credentials for Oracle E-Business Suite Application Login

If you want to set a preferred credential for Oracle E-Business Suite Application Login which is applicable for all Oracle E-Business Suite targets, go to the Default Preferred Credentials section.

  1. Select AppsUserCredsSet as the Credential Set.

  2. Click Set.

  3. Choose the named credentials. Only those named credentials with scope as "global" will appear in the list.

  4. You can test and save the credentials.

Set Target Preferred Credentials for Oracle E-Business Suite Application Login

If you want to set a preferred credential for Oracle E-Business Suite Application Login applicable only to a specific Oracle E-Business Suite target, go to the Target Preferred Credential section.

  1. Select the Oracle E-Business Suite instance.

  2. Select AppsUserCredsSet as Credential Set.

  3. Click Set.

  4. Choose the named credentials.

  5. You can test and save the credentials.

Preferred Credentials for Oracle E-Business Suite Database Login

Preferred credentials for database login are needed if you are using Customization Manager or Patch Manager. You must set the preferred credentials for the APPS, APPLSYS, and SYSTEM schemas.

Create named credential for Oracle E-Business Suite Database Login

  1. Navigate to Setup menu > Security > Named Credentials and click Create.

  2. Provide an appropriate name and description.

  3. Select "Oracle E-Business Suite" from the Authenticating Target Type drop-down list.

  4. Select "E-Business Database Credentials" from the Credential Type drop-down list.

  5. Select the scope.

    • If you choose Global, this named credential will be applicable for all Oracle E-Business Suite targets.

    • If you choose Target:

      • Select Oracle E-Business Suite as the target type.

      • Select the Oracle E-Business Suite for which this named credential is applicable.

  6. Enter the schema name and password in credential properties.

  7. You can test and save the credentials.

Note: You must create three named credentials here: one for the APPS schema, one for the APPLSYS schema, and one for the SYSTEM schema.

the picture is described in the document text

Set preferred credential for Oracle E-Business Suite Database Login

  1. Navigate to Setup menu > Security > Preferred Credentials.

  2. Select Oracle E-Business Suite.

  3. Click Manage Preferred Credentials.

Credential Sets for Oracle E-Business Suite Database Login

The following table lists the credential sets and the schemas they access:

Name Schema
AppsDBCredsSet To access the APPS schema
AppsSysDBCredsSet To access the SYSTEM schema
ApplsysDBCredsSet To access the APPLSYS schema

Set Default Preferred Credentials for Oracle E-Business Suite Database Login

If you want to set a preferred credential for the Oracle E-Business Suite Application Database which is applicable for all Oracle E-Business Suite targets, go to the Default Preferred Credentials section.

  1. Select the Credential Set for the corresponding schema.

  2. Click on Set.

  3. Choose the named credentials and save. Only those named credentials with scope as "global" will appear in the list.

Set Target Preferred Credentials for Oracle E-Business Suite Database Login

If you want to set a preferred credential for Oracle E-Business Suite Database Login applicable only to a specific Oracle E-Business Suite target, go to the Target Preferred Credential section.

  1. Select the Oracle E-Business Suite instance.

  2. Select Credential Set for the corresponding schema.

  3. Click Set.

  4. Choose the named credentials.

  5. You can test and save the credentials.

Preferred Credentials for Oracle E-Business Suite Node

Preferred credentials for nodes are needed if you are using Customization Manager or Patch Manager. You must set them for both the applications node and database node. If the Oracle E-Business Suite instance features online patching, then credentials must be set for targets in both the run and patch file systems.

Create Named Credentials for Oracle E-Business Suite Node Using Host Credentials

  1. Navigate to Setup menu > Security > Named Credentials and click Create.

  2. Provide an appropriate name and description.

  3. Select Host from the Authenticating Target Type drop-down list.

  4. Select Host Credentials from the Credential Type drop-down list.

  5. Select the scope.

    • If you choose Global, this named credential will be applicable for all Oracle E-Business Suite Nodes.

    • If you choose Target:

      • Select Oracle E-Business Suite Node as the target type.

      • Select the Oracle E-Business Suite Node for which this named credential is applicable.

  6. Enter the user name and password in the credential properties.

  7. You can test and save the credentials.

    the picture is described in the document text

Create Named Credentials for Oracle E-Business Suite Node Using SSH Key Credentials

  1. Provide an appropriate name and description.

  2. Select Host from the Authenticating Target Type drop-down list.

  3. Select SSH Key Credentials from the Credential Type drop-down list.

  4. Select the scope.

    • If you choose Global, this named credential will be applicable for all Oracle E-Business Suite Nodes.

    • If you choose Target:

      • Select Oracle E-Business Suite Node as the target type.

      • Select the Oracle E-Business Suite Node for which this named credential is applicable.

  5. Enter the user name and upload private and public keys.

  6. You can test and save the credentials.

    the picture is described in the document text

Set preferred credential for Oracle E-Business Suite Node

  1. Navigate to Setup menu > Security > Preferred Credentials.

  2. Select Oracle E-Business Suite Node.

  3. Click Manage Preferred Credentials.

Set Default Preferred Credentials for Oracle E-Business Suite Node

If you want to set a preferred credential for Oracle E-Business Suite Node which is applicable for all Oracle E-Business Suite nodes, go to the Default Preferred Credentials section.

  1. Select OS Credentials as Credential Set.

  2. Click Set.

  3. Choose the named credentials. Only those named credentials with scope as "Global" will appear in the list.

  4. You can test and save the credentials.

Set Target Preferred Credentials for Oracle E-Business Suite Node

If you want to set a preferred credential for Oracle E-Business Suite Node applicable only to a specific Oracle E-Business Suite Node, go to the Target Preferred Credential section.

  1. Select the Oracle E-Business Suite Node.

  2. Select OS Credentials for Credential Set.

  3. Click Set.

  4. Choose the named credentials.

  5. You can test and save the credentials.

Preferred Credentials for Oracle WebLogic Server

A preferred credential for Oracle WebLogic Server is needed if you are using Patch Manager. You must set it for the Admin server.

In addition, the WebLogic Administrator credentials must be set before you register a custom application on the patch edition in Oracle E-Business Suite Release 12.2.

Create named credential for Oracle WebLogic Server

  1. Navigate to Setup menu > Security > Named Credentials and click on the Create button.

  2. Provide an appropriate name and description.

  3. Select Oracle WebLogic Server from the Authenticating Target Type drop-down list.

  4. Select Oracle WebLogic Credentials from the Credential Type drop-down list.

  5. Select the scope.

    • If you choose Global, then this named credential will be applicable for all WLS Servers.

    • If you choose Target:

      • Select Oracle WebLogic Server as the target type.

      • Select the Oracle WebLogic Admin Server for which this named credential is applicable.

  6. Enter the user name and password in the credential properties.

  7. You can test and save the credentials.

    the picture is described in the document text

Set preferred credential for Oracle WebLogic Server

  1. Navigate to Setup menu > Security > Preferred Credentials.

  2. Select Oracle WebLogic Server.

  3. Click on Manage Preferred Credentials.

Set Default Preferred Credentials for Oracle WebLogic Server

If you want to set a preferred credential for Oracle WebLogic Server which is applicable for all Oracle E-Business Suite instances, go to the Default Preferred Credentials section.

  1. Select Oracle WebLogic Administration Credentials for Credential Set.

  2. Click Set.

  3. Choose the named credentials. Only those named credentials with scope as "Global" will appear in the list.

  4. You can test and save the credentials.

Set Target Preferred Credentials for Oracle WebLogic Server

If you want to set a preferred credential for Oracle WebLogic Server of a specific Oracle E-Business Suite target, go to the Target Preferred Credential section.

  1. Select Oracle WebLogic Server of the specific Oracle E-Business Suite target.

  2. Select Oracle WebLogic Administration Credentials as Credential Set.

  3. Click Set.

  4. Choose the named credentials.

  5. You can test and save the credentials.

Preferred Credentials for Host

Host Preferred credentials must be set for the host from where files will be checked out by Customization Manager. This is the same host which is referenced in file source mapping. You must set the Normal Username and Normal Password for the host. Navigate to Setup menu > Security > Preferred Credentials. On the Preferred Credentials page, select Host and click Manage Preferred Credentials. On the Host Preferred Credentials page, set the operating system credentials of the host.