Managing Resource Security

Certificate Rotation

When certificates are rotated on VM clusters associated with the Globally Distributed Database, a process that happens outside of the distributed database user interfaces, you need to also rotate the wallets on the GSMs.

See Rebuilding GSM Wallets for instructions.

Password Rotation

It is a best practice to regularly rotate the GSMUSER and GSMCATUSER passwords for the shards and catalog of the Globally Distributed Database. This operation will also refresh the passwords on any node created for a Distributed Database CLI Shell if present.

See RotateDistributedAutonomousDatabasePasswords for the REST API details.

Database Connection Wallet

You need the connection information to connect to your Globally Distributed Database. The connection strings are bundled into a wallet for you to download.

See Downloading Client Credentials for instructions.

  • Rebuilding GSM Wallets
    When certificates are rotated on VM clusters associate with the Globally Distributed Daabase, you must rebuild the GSM wallets.

Parent topic: Create and Manage a Globally Distributed Autonomous AI Database