Contents

List of Figures

Title and Copyright Information

Send Us Your Comments

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Customer Support
• Review Patch Documentation
• Improved Process for Oracle Retail Documentation Corrections
• Oracle Retail Documentation on the Oracle Technology Network
• Conventions

1 Security Overview

• Physical Deployment Model
• Dependent Applications
  • Oracle Retail Integration Bus Administration User Interface
• General Security Principles
  • The Foundations of Security
• Oracle Credential Store Framework API Principles
• Oracle Retail Recommended Security Approach
  • Oracle Software Security Assurance (OSSA)
  • OSSA compliance

2 RIB Secure Installation and Configuration

• Security in RIB Application Builder
• Security in RIB Deployment Configuration File Editor
• Security During RIB Deployment Process
• Security During RIB Runtime
• RIB Administration Security
• Security in RIHA
• Security in RDMT
• Security in PL/SQL Application API Stubs
• Security in Integration Gateway Services
• Secure Sockets Layer Configuration
• Security in Injector Service
  • RIB-OMS Security Configuration
  • RIB-OMS to RSB-OMS Routing Service Security Configuration

3 Secure IGS Web Services Using Administration Console

• Server-side Setup for Username and Password Authentication
  • Attach the Policy File to the Web Service
  • Create Roles and Users
• Client-side Setup for Username and Password Authentication
• Server-side Setup for Encrypted Username and Password Token Authentication
• Client-side Setup for Encrypted Username and Password Token Authentication

4 Security Feature Overview

• Securing Sensitive Data
  • Cardholder Data
  • Communication with web service Application
• Securing the Application
  • Passwords
  • Default Accounts and Passwords
  • Tools
• Securing the Application Environment and Configuration
  • Database

A Credential Store Framework

• Oracle Retail RIB CSF Implementation

B Keytool Utility

• Creating a Self-Signed Certificate
  • Creating a Certificate Signing Request
  • Exporting and Importing Certificates

C Secure Web Services

• WS-Security
• Web Service Security Implementation
• Oracle Retail Management System Web Service

Glossary