Credentials

Setting Named Credentials

In Enterprise Manager, as part of the target type definition, you can define the types of credentials specific to the plug-in target type. Examples could be the user name and password required by the plug-in to connect to a target instance to collect metric data, or to invoke a specific Enterprise Manager job.

A named credential is a users' authentication information on a system. A named credential can be a user name/password, a public key-private key pair, or an X509v3 certificate. An Enterprise Manager administrator can store these credentials as named entities in Enterprise Manager to use when performing operations like running jobs, patching, and other system management tasks. For example, you can store the user name and password that you want to use for patching as MyPatchingCreds. You can then later submit a patching job that uses MyPatchingCreds to patch the production databases. Named credentials ensure an additional layer of security passwords because an operator would use the selected named credential, which is saved and stored by an administrator, and not know the actual user name and password associated with it.

To define Named Credentials, navigate to: Setup menu > Security > Named Credentials. For details on Named Credentials, see the Oracle Enterprise Manager Cloud Control Administrator’s Guide.

For the Oracle Application Management Pack for Oracle E-Business Suite, you must create named credentials for the Oracle E-Business Suite or Oracle E-Business Suite Node based on the management activity you are performing. Create all of the named credentials listed below if you plan on using all of the features of the management pack:

• A credential to access the Oracle E-Business Suite (applications login)

• Credentials to access the Oracle E-Business Suite Database

• A credential to monitor the Oracle E-Business Suite Database

Creating a Named Credential for Oracle E-Business Suite Applications Login

Follow these steps in defining this credential:

1. Specify a name and description for your credential.

2. Select 'Oracle E-Business Suite' as the Authenticating Target Type.

3. Select 'E-Business Suite Application Login Credentials' as the Credential Type.

4. The parameter Scope determines if this named credential is applicable for all instances of Oracle E-Business Suite or to a specific instance. So if you choose Target for the scope, you need to select Oracle E-Business Suite as target type and provide the name of the Oracle E-Business Suite for which this named credential is applicable.

5. If necessary based on the previous step, select 'Oracle E-Business Suite' as the Target Type and choose your Target Name.

6. Define your Credential Properties.

Creating Named Credentials to Access the Database

Follow these steps to create a named credential to access the Oracle E-Business Suite database:

1. Specify a name and description for your credential.

2. Select 'Oracle E-Business Suite' as the Authenticating Target Type.

3. Select 'E-Business Suite Database Credentials' as the Credential Type.

4. The parameter Scope determines if this named credential is applicable for all instances of Oracle E-Business Suite or to a specific instance. So if you choose Target for the scope, you need to select Oracle E-Business Suite as target type and provide the name of the Oracle E-Business Suite for which this named credential is applicable.

5. Define your Credential Properties.

The following examples illustrate creating named credentials for database access.

Example: Creating a Named Credential for the Oracle E-Business Suite Database APPS Schema

1. Specify a name and description for your credential.

2. Select 'Oracle E-Business Suite' as the Authenticating Target Type.

3. Select 'E-Business Suite Database Credentials' as the Credential Type.

4. The parameter Scope determines if this named credential is applicable for all instances of Oracle E-Business Suite or to a specific instance. So if you choose Target for the scope, you need to select Oracle E-Business Suite as target type and provide the name of the Oracle E-Business Suite for which this named credential is applicable.

5. Define your Credential Properties. Specify the username and password for your APPS schema.

Example: Creating a Named Credential for the Oracle E-Business Suite Database APPLSYS Schema

Use the following steps to create a credential to access the APPLSYS schema:

1. Specify a name and description for your credential.

2. Select 'Oracle E-Business Suite' as the Authenticating Target Type.

3. Select 'E-Business Suite Database Credentials' as the Credential Type.

4. The parameter Scope determines if this named credential is applicable for all instances of Oracle E-Business Suite or to a specific instance. So if you choose Target for the scope, you need to select Oracle E-Business Suite Node as the target type and provide the name of the Oracle E-Business Suite target for which this named credential is applicable.

5. Define your Credential Properties. Specify the username and password for your APPLSYS schema.

Example: Creating a Named Credential for the Oracle E-Business Suite Database System Schema

Use the following steps to create the Oracle E-Business Suite Database System Schema credential:

1. Specify a name and description for your credential.

2. Select 'Oracle E-Business Suite' as the Authenticating Target Type.

3. Select 'E-Business Suite Database Credentials' as the Credential Type.

4. The parameter Scope determines if this named credential is applicable for all instances of Oracle E-Business Suite or to a specific instance. So if you choose Target for the scope, you need to select Oracle E-Business Suite Node as the target type and provide the name of the Oracle E-Business Suite target for which this named credential is applicable.

5. Define your Credential Properties. Specify the username and password for your SYSTEM schema.

Creating a Named Credential to Monitor the Oracle E-Business Suite Database

Create this credential using the following steps:

1. Specify a name and description for your credential.

2. Select 'Host' as the Authenticating Target Type.

3. Select 'Host Credentials' as the Credential Type.

4. The parameter Scope determines if this named credential is applicable for all instances of Oracle E-Business Suite or to a specific instance. So if you choose Target for the scope, you need to select Oracle E-Business Suite Node as the target type and provide the name of the Oracle E-Business Suite target for which this named credential is applicable.

5. Specify the APPL_TOP context.

6. Define your Credential Properties.

Setting Oracle E-Business Suite Preferred Credentials

Oracle E-Business Suite administration uses Preferred Credentials for connecting to the system and executing various commands. Before managing an Oracle E-Business Suite instance from the Administration Dashboard, the preferred credentials must be set for the specific Oracle E-Business Suite target and Oracle E-Business Suite Node target of the specific node. Applications Schema Credentials need to be set for only those targets whose administration requires Applications Schema Credentials. You can set default preferred credentials, which are applicable for all instances, or preferred credentials for just a particular instance.

To set these credentials, navigate to Setup (menu) > Security > Preferred Credentials in Enterprise Manager.

Note: If you wish to perform bulk setup of preferred credentials refer to the section "Setting Preferred Credentials Using EMCLI" in the Oracle Enterprise Manager Cloud Control Upgrade Guide.

Setting the Preferred Credentials for the Oracle E-Business Suite Target Type

The following table lists the credential sets that are used by the management pack. You must set all of these if you plan to use all the features of the management pack.

Name	Description
AppsDBCredsSet	To access the APPS schema
AppsSysDBCredsSet	To access the SYSTEM schema
ApplsysDBCredsSet	To access the APPLSYS schema
AppsUserCredsSet	To log in to the application

To set these credentials, navigate to Setup (menu) > Security > Preferred Credentials in Enterprise Manager. Select Oracle E-Business Suite from the list of target types and click on Manage Preferred Credentials.

You either set the default preferred credentials or set them for a specific target instance. Select the appropriate credential set and click on Set. Here you can choose from an existing named credential or create a new credential and set it.

Set the preferred credentials for each of the credential sets in the table above.

Setting the Preferred Credential Set for Oracle E-Business Suite Node

To set this credential set, navigate to Setup (menu) > Security > Preferred Credentials in Enterprise Manager. Select Oracle E-Business Suite Node from the list of target types and click on Manage Preferred Credentials.

Select OS Credentials and click Set. Here you can choose from existing named credentials or create new credentials and set them.

If Named Credentials are not already set for Oracle E-Business Suite Node, you will get the message "Either there are no credential types or required configuration is missing."

Note: In Release 12.1.0.1.0, these credentials were named "Oracle E-Business Suite Infrastructure".

Setting Preferred Credentials for Change Management

When using Change Management features, you will need to access Oracle E-Business Suite instances. You can set up credentials for these instances for every user as a one-time setup step instead of entering them every time you need to access an instance.

Please note that preferred credentials are not shared across users.

To set up credentials

1. Within Oracle Enterprise Manager, navigate to Setup > Security > Preferred Credentials.

2. Highlight the desired target type, then click Manage Preferred Credentials.

   • For Patch Manager, choose these target types:

     • Oracle E-Business Suite - Set the following credential sets: AppsDBCredsSet, AppsSysDBCredsSet,AppsUserCredsSet. Please refer to section Setting Oracle E-Business Suite Preferred Credentials for more information on these credential sets.

       Named Credentials must be created prior to setting up Preferred Credentials. Review the section Creating Named Credentials for Oracle E-Business Suite for information on creating named credentials as well as reusing the same named credentials across the target instances and sharing them across administrators.

     • Oracle E-Business Suite Node - Set the "OS Credentials" credential set.

       Please refer to section Setting the Preferred Credential Set for Oracle E-Business Suite Node for information on this credential set.

       Named Credentials must be created prior to setting up Preferred Credentials. Review the section Creating Named Credentials for Oracle E-Business Suite for information on creating named credentials as well as reusing the same named credentials across the target instances and sharing them across administrators.

       Set this credential for both APPL_TOP Context and Database Context.

   • For Customization Manager, choose the following target types:

     • Host - You must set the "Normal Username" and "Normal Password" for the host from where files will be checked out. This host is referenced within File Source Mapping.

     • Oracle E-Business Suite Node - Set the "OS Credentials" credential set.

       Please refer to section Setting the Preferred Credential Set for Oracle E-Business Suite Node for information on this credential set.

       Named Credentials must be created prior to setting up Preferred Credentials. Review the section Creating Named Credentials for Oracle E-Business Suite for information on creating named credentials as well as reusing the same named credentials across the target instances and sharing them across administrators.

       Set this credential for the APPL_TOP Context.

     • Oracle E-Business Suite - Set the following credential set: AppsDBCredsSet.

     You must set the credentials for Oracle E-Business Suite Node for every instance that is used for building Java patches or reports. Both the Applications and the Database context credentials for each Oracle E-Business instance must be set.

     For Customization Manager, it is also required to set the APPLSYS schema credentials, APPS schema credentials and SYSTEM schema credentials for using the custom applications registration and validation functionality for the given Oracle E-Business Suite instance. You can do this by setting the following credential sets: AppsDBCredsSet, AppsSysDBCredsSet, ApplsysDBCredsSet. Please refer to section Setting Oracle E-Business Suite Preferred Credentials for more information on these credential sets.

     Named Credentials must be created prior to setting up Preferred Credentials. Review the section Creating Named Credentials for Oracle E-Business Suite for information on creating named credentials as well as reusing the same named credentials across the target instances and sharing them across administrators.