Recommendations for Oracle Database

The following settings are recommended for Oracle database:

Note: When you attempt to create a database using Oracle Database 12c, the option to create a pluggable database will be enabled by default. If you do not want to create a container database, deselect the Create As Container Database check box during the database creation process. If you create a container database, you must also create a pluggable database on which to install your EnterpriseTrack instance.

Separation of Duties

If required, you can separate the database administration role and the EnterpriseTrack system administration role, so that the database administrator is not required to share the database password with the system administrator. When the database password is changed, the database administrator can use the below URL to generate an encrypted password by entering a plain text password in the servlet.

http://etrack_host/SiteWand/Encrypt/submit

This new encrypted string can be copied and communicated with the EnterpriseTrack system administrator. The system administrator can then configure system properties with the encrypted string.

TDE

Oracle recommends using TDE with Oracle Wallet, and recommends keeping the Oracle Wallet and TDE keys very secure. Refer to the Oracle Database Operation Guide for instructions on how to setup TDE and Key Management for Oracle Database.

Availability

As followed in Oracle Cloud,  ensure that the database is replicated, and secure backups are taken frequently (more than 30 days). Oracle recommends using Oracle RAC which has inbuilt features of replication and high availability. This ensures PII data is available once entered and can be retrieved even in case of disaster or server failure.

Character Set Recommendations

For Unicode national language support, the NLS_CHARACTERSET should be set to AL32UTF8 while creating the database. Review this with your database administrator before adapting and implementing it to your environment.

Check the character set by using the following syntax:

SQL> select name, value$ from sys.props$ where name = 'NLS_CHARACTERSET';

This should return AL32UTF8.

Byte Length Semantics

Check for byte length semantics using the following syntax:

SQL> select name, value$ from sys.props$ where name = 'NLS_LENGTH_SEMANTICS';

This should return BYTE.