Create an Oracle Content and Experience Cloud Instance with a Universal Credits Subscription

Verify That the Cloud Account Administrator Is Part of the OCI_Administrators Group

The administrator who creates the instance must be part of the OCI_Administrators group. You can check My Services to confirm that the administrator is a member of this group.

On the My Services dashboard, click Users in the top menu.
Click Groups under User Management.
Verify that the OCI_Administrators group is listed.
Click OCI_Administrators.
Click Users to list the group members.
Verify that the Cloud Account Administrator user is listed.

If the administrator is not a member of OCI_Administrators, you need to add the administrator to the group. See Assign Users to Groups with Oracle Identity Cloud Service.

Get Region, User, and Tenancy Values

When you create your Oracle Content and Experience Cloud instance, you’ll be asked for values from Oracle Cloud Infrastructure for setting up object storage. To get these values, perform the following steps:

Open the email with the subject: “Welcome to Oracle Cloud. Your Oracle Public Cloud Services are ready for use.”
Click the Access your Cloud Services link in the email, and enter the My Services user name and password from your email. If you’re prompted to do so, reset your password.
On the My Services dashboard, next to Compute, click , and select Open Service Console. This opens the Oracle Cloud Infrastructure Console.

Note:
If you don’t see Compute in the dashboard, click Customize Dashboard, and set Compute to Show.
In the data center drop-down list in the top right (next to , select the data center that’s closest to the region in which your company is based. Note the name of the region. This will be your Region and your Storage Infrastructure Region Name.
In the Oracle Cloud Infrastructure console, from the menu on the top left, click Identity and then Users.
Under Users, look for the Cloud Account Administrator user and note the OCID value. You can use this value as your Storage User OCID. Several users might be listed here, so be sure to use the OCID of a user who has administrator privileges.

Or you can create another user for storage service, assign that user to the Administrators group, and use the OCID of the user you created. To create a user in the OCI Console:
1. On the navigation menu, click Identity, then Users, and then Create User.
2. Enter a user name in the NAME field and then click Create.
3. On the navigation menu, click Identity and then Groups.
4. Click the Administrators link.
5. Click Add User to Group, select the new user in the drop-down list, and then click Add.
6. Get the User OCID of the new user from Group Members. You can use this value as your Storage User OCID.
Important:
Creating a user in the OCI console is not going to add or create the user account in IDCS. The Cloud Account Administrator should use the IDCS Admin Console to create the user and assign the application roles for the user to sign into and access the CECS service.
From the menu on the top left, click Administration and then Tenancy Details. Under Tenancy Information, note the OCID value. You can use this value as your tenancy OCID.

Create a Compartment for OCI Object Storage

In the Oracle Cloud Infrastructure navigation menu, under Governance and Administration, click Identity, and then click Compartments.

Two compartments are created by default, the root compartment of the Tenancy (RC) and the ManagedCompartmentforPaaS (C). Do not use these default compartments. You need to create a new compartment for object storage.
On the Compartments page, click Create Compartment.
Enter a name such as OCIStorageCompartment.
Enter a description such as Compartment for OCI object storage.
Click Create Compartment.
After the compartment is created, next to OCID, click Show, and note the value. This will be your Storage Compartment ID.

You need to create a new compartment the first time you create a Content and Experience Cloud instance, but you do not need to create a new compartment for every instance,. You can use the same compartment for multiple instances.

Generate a Private Key

Use the following OpenSSL commands to generate an API signing key/key pair in the required PEM format.

Note:

If you’re using Windows, you need to run the commands with Git for Windows. If you don't’ have Git for Windows, you can download it from https://git-scm.com/download/win.
If you’re using Linux, OpenSSL is installed by default.

If you haven't already, create an .oci directory to store the credentials:

mkdir ~/.oci
Generate the private key with no passphrase:

openssl genrsa -out ~/.oci/oci_api_key.pem 2048
Ensure that only you can read the private key file:

chmod go-rwx ~/.oci/oci_api_key.pem

You’ll upload this private key file when you create your Oracle Content and Experience Cloud instance.

Generate a Public Key and Add it to OCI

Generate a public key:

openssl rsa -pubout -in ~/.oci/oci_api_key.pem -out ~/.oci/oci_api_key_public.pem
Show the public key:

cat ~/.oci/oci_api_key_public.pem
Copy the full text of the public key.
Add the public key to the Oracle Cloud Infrastructure console:
1. From the menu, click Identity and then Users.
2. Select the user.
3. Click Add Public Key.
4. In the dialog, paste the public key, and then click Add.
5. After you add the public key, note the Fingerprint value. If you've added more than one public key, make sure to note the correct fingerprint value based on the time stamp. This will be your Storage Public Key Fingerprint.

Create Your Oracle Content and Experience Cloud Instance

Return to My Services.
On the My Services dashboard, click Oracle Content and Experience Cloud.
Click Create Instance.

Note:

For successful creation of the instance, be sure to follow the instructions on the Create Instance page exactly as indicated in the Description column for every field. Do not leave any default values prior to committing your information.

Enter the following information, and then click Next:

Field	Description
Instance Name	Specify a unique name for your service instance. If you specify a name that already exists, the system displays an error and the instance is not created.
Description	Optionally, enter a description of the instance.
Notification Email	Enter the email address to which you want provisioning status updates to be sent.
Region	Select the region name you noted when getting region, user, and tenancy values.
Tags	Leave this field blank.
Storage User OCID	Enter the storage user OCID you noted when getting region, user, and tenancy values.
Storage Tenancy OCID	Enter the tenancy OCID you noted when getting region, user, and tenancy values.
Storage Infrastructure Region Name	Enter the region name you noted when getting region, user, and tenancy values.
Storage Compartment ID	Enter the compartment OCID you noted after creating a compartment for OCI object storage.
Storage Public Key Fingerprint	Enter the public key fingerprint you noted after adding the public key to Oracle Cloud Infrastructure.
Storage Private Key	Upload the private key file you generated.

Note:

For more information, see Creating a Service Instance in Getting Started with Oracle Cloud.

What to Do Next

After your service instance is successfully created, you get an email to confirm it. The email includes a link to your instance. To access the Oracle Content and Experience Cloud web client, click Action Menu icon next to your Oracle Content and Experience Cloud service instance, and select Access Content Cloud Service Instance.

Important:

When your service instance is created, a user named CEC_INTERNAL_APPID_USER is automatically created. It’s an internal user that can’t be used to sign in. This user enables communication between Oracle Content and Experience Cloud components. Do not delete this user or some functionality in Oracle Content and Experience Cloud will no longer work.

Next, create groups for the roles in your organization. See Create Groups for Your Organization.