Information Security Policies, InfoSec Policy Compliance, TLS for Communication, Transport Layer Security

Transport Layer Security (TLS) for Communication

Oracle Fusion Cloud Enterprise Performance Management and Oracle Fusion Cloud Enterprise Data Management use Transport Layer Security (TLS) versions 1.2 and 1.3 with strong ciphers to secure data in transit and meet encrypted communication requirements.

TLS is used to encrypt communication between Cloud EPM and Cloud EDM environments and all clients including:

Web browsers
Oracle Smart View for Office
EPM Automate
EPM Agent

Supported TLS Versions

Cloud EPM and Cloud EDM support the following TLS versions:

TLS 1.2
TLS 1.3

All communication sessions are encrypted. Session information stored in cookies is encrypted, and session IDs are randomly generated to protect against session hijacking.

Supported Cipher Suites

Cloud EPM and Cloud EDM support the following cipher suites:

TLS_AES_128_GCM_SHA256
TLS_AES_256_GCM_SHA384
TLS_AES_128_CCM_SHA256
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-RSA-AES256-GCM-SHA384
ECDHE-ECDSA-AES128-CCM
ECDHE-ECDSA-AES256-CCM

Cloud EPM and Cloud EDM do not support mutual TLS (mTLS) authentication.

Browser Requirements

Oracle recommends that you install the newest version of the supported browser. Generally, the newest version is compatible with higher cipher strengths and has improved security. See Supported Browsers.