Contents

Title and Copyright Information

Send Us Your Comments

Preface

• Audience
• Documentation Accessibility
• Customer Support
• Improved Process for Oracle Retail Documentation Corrections
• Oracle Retail Documentation on the Oracle Technology Network
• Conventions

1 Overview

• General Security Principles
  • Keep Software Up to Date
  • Restrict Network Access to Critical Services
  • Follow the Principle of Least Privilege
  • Monitor System Activity
  • Keep Up to Date on the Latest Security Information

2 Post Installation Configuration

• Configuring Administrator Permissions

3 Security Features

• The Security Model
• Configuring and Using Authentication and Authorization
  • Authentication and Authorization for Hosted Containers
  • Authentication and Authorization for Weblogic Server
• Configuring and Using the Domain Whitelist
  • Configuring the Whitelist for Hosted Containers
  • Configuring the Whitelist for Weblogic Server
• Transport Security

4 Security Considerations for Developers

A Secure Deployment Checklist

B Open Ports