Before You Begin

This tutorial shows you how to create a vault, encryption key, and secrets in Oracle Cloud Infrastructure console. You must use vault secrets to specify the passwords when installing the Resource Manager stack for PeopleSoft Cloud Manager. You can also use vault secrets to manage passwords for Cloud Manager provisioned environments.This tutorial takes approximately 30 minutes to complete.

See Key Management in the Oracle Cloud Infrastructure documentation.

Background

This is the eighth tutorial in the Install PeopleSoft Cloud Manager series. Read the tutorials in the order listed. The optional tutorials offer alternate methods for setup.


Step 1: Create the Vault

  1. On the Oracle Cloud Infrastructure Console home page, click the menu icon (Menu icon) and select Identity and Security, then Vault.
  2. Click Create Vault.
    Create Vault page
    Description of this illustration (create_vault_page.png)
  3. Select the compartment for the vault.

    Note:

    The vault, encryption key, and secrets can be in different compartments in the same tenancy. They do not need to be in the same compartment as the Cloud Manager instance or provisioned environment.
  4. Enter a name.
  5. Click Create Vault.

Step 2: Create the Encryption Key

  1. On the Identity and Security > Vaults page, select the name of the vault you created, or select View Vault Details from the actions menu.
  2. On the Vault Details page, select Master Encryption Keys from the Resources list.
  3. Click Create Key.
    Create Key page
    Description of this illustration (create_vault_key_page.png)
  4. Select the compartment for the encryption key. 
  5. Select the Protection Mode.
    • HSM — Create a key that is stored and processed on a hardware security module.
    • Software — Create a key that is stored and processed on a server.
  6. Enter a name.
  7. Choose an encryption key algorithms from the drop-down list.
    • AES — Advanced Encryption Standard
    • RSA — Rivest-Shamir-Adleman
    • ECDSA — Elliptic curve cryptography digital signature algorithm
  8. Select 128, 192, or 256 bits for the encryption key length.
  9. Click Create Key.

For more information on the options on this page, see Creating a Master Encryption Key in the Oracle Cloud Infrastructure documentation.

Step 3: Create Secrets

  1. On the Vault Details page, select Secrets from the Resources list on the left.
  2. Click the Create Secret button.
    Create Secret page
    Description of this illustration (create_secret_page.png)
  3. Select a compartment for the secret.
  4. Enter a name and description.

    Tip:

    The name that you enter will be available for selection when you install the Resource Manager stack for Cloud Manager, or when you provision environments in Cloud Manager. Use a descriptive name to make it easy to select the desired secret.
  5. Select an encryption key.

    The key must belong to the same vault. The key must also be a symmetric key. You cannot encrypt vault secrets with asymmetric keys.

  6. Choose plain text or Base-64 from the Secret Type Template drop-down list.
  7. Enter the password in the Secret Contents field. The following table lists the passwords required to deploy the Resource Manager stack for Cloud Manager.

    Parameter Description Requirements
    Db Connect Password
    		 PeopleSoft Connect ID password. The default ID is people. Select the vault secret containing the password. Ensure the password is between 6 and 30 characters in length. It must only contain letters and numbers.
    Access ID PeopleSoft Database Access ID. The default ID is SYSADM. NA
    Access ID Password Password for the Access ID.
    		 Select the vault secret containing the password. Ensure the password begins with a letter, contains only alphanumeric characters, and is no more than 8 characters in length.
    Db Admin Password Database Administrator (SYS and SYSTEM) password. The database administrators are SYS and SYSTEM. Select the vault secret containing the password. Ensure that the password is between 8 and 30 characters in length. It must contain at least one lowercase letter, one uppercase letter, one number, and one special character. The special character must be either an underscore (_), dash (-), or number sign (#).
    Cloud Manager Administrator password
    		 Password for the domain boot user (CLADM). Select the vault secret containing the password. Ensure the password contains only alphanumeric characters and is no more than 8 characters in length.
    Integration Gateway User password
    		 Password for the default Integration Gateway user, which is administrator.
    		Select the vault secret containing the password. Ensure the password contains only alphanumeric characters and is between 8 and 30 characters in length.
    WebLogic Administrator User password
    		 Oracle WebLogic administrator password. The default Oracle WebLogic administrator is system.
    		 Select the vault secret containing the password. Ensure that the password is between 8 and 30 characters in length with at least one lowercase letter and one uppercase letter. It must also contain one number or one special character (!@#$%^&).
    Web profile password
    		 PeopleSoft Web Profile password. The default web profile user is PTWEBSERVER.
    		 Select the vault secret containing the password. Ensure the password contains only alphanumeric characters and is between 8 and 30 characters in length.
    Domain Connect Password Application Server Domain connection password.
    		 Select the vault secret containing the password. Ensure the password contains only alphanumeric characters and is between 8 and 20 characters in length.
    My Oracle Support  (MOS) User ID User ID of registered My Oracle Support account. To use My Oracle Support, you must create an Oracle Single SignOn (SSO) account and register at least one support identifier (SI) with My Oracle Support.
    My Oracle Support (MOS) Password Password for the registered MOS account. Select the vault secret containing the password.

    Note:

    You are not required to supply the My Oracle Support User ID and password when you install the Resource Manager stack. If you do choose to supply it during installation you must use a vault secret. Otherwise, you can specify the credentials after you complete the installation, on the Cloud Manager Settings page.

  8. (Optional) Select the Show Base 64 conversion to view the password in base 64.

    You can provide secret contents in plain-text when you use the Console to create a vault secret or vault secret version, but secret contents do need to be base64-encoded before they're sent to the service. The Console automatically encodes plain-text secret contents for you.

  9. Click Create Secret.
  10. Repeat steps 2-9 for each password.
  11. (Optional) You can add secrets for additional passwords to use when provisioning environments at this point, or you can add them later.
    • Search administrator password
    • Search proxy user password
    • Windows administrator password
    • RMAN backup encryption password
    • Source TDE keystore (wallet) password for refreshing DB system environments
    • Source TDE key file path for refreshing DB system environments

For more information, see Creating a Secret in a Vault in the Oracle Cloud Infrastructure documentation.

Step 4: Install Cloud Manager

When installing the Resource Manager stack for Cloud Manager, select the vault and choose the secrets.


Next Steps

Generate API Signing Keys for PeopleSoft Cloud Manager

Learn More