Configuring Autonomous Data Warehouse and Autonomous Transaction Processing

Learn how to configure Oracle Database Cloud Service types as targets in TCPS mode for Autonomous Data Warehouse and Autonomous Transaction Processing.

Step 1: Install Audit Vault Agent on Registered Host

This configuration step installs Audit Vault Agents on registered host.

Prerequisites

Ensure the right version of JDK is installed. The supported JDK versions are:

• JDK7u80 or higher

• JDK8u71

• JCE Unlimited Strength Jurisdiction Policy Files with both JDK7 and JDK8. JDK 8 .jar files can be downloaded from: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

Follow these steps:

1. Install the Audit Vault Agent on the host machine. See Deploying the Audit Vault Agent on Host Computers for detailed steps.

2. Start the Audit Vault Agent.

Step 2: Create User Accounts on Oracle Cloud Instances

This configuration step creates user account on Oracle Cloud instances.

Complete this procedure to create a user account on an Autonomous Data Warehouse or on an Autonomous Transaction Processing Cloud instance:

1. Ensure that the connection has been established to the Autonomous Data Warehouse Cloud instances through TCPS as user with SYSDBA administrative privilege.

2. Create a user that is used to collect audit data from the database.

3. Run the script to provide relevant privileges to the user: oracle_AVDF_dbcs_user_setup.sql

   See Also: Configuring TCPS Connections for DBCS Instances

Step 3: Create Targets on Audit Vault Server for the Cloud Instances

This configuration step creates a target on Audit Vault Server for the Autonomous Data Warehouse and Autonomous Transaction Processing Cloud instances.

Prerequisites

1. The user must download the client wallet using Oracle Cloud Infrastructure Console. See Download Client Credentials (Wallets) for complete information.

2. Unzip the client wallet. The wallet contains the Single Sign On Wallet file (cwallet.sso).

3. The user can get connection string Using Oracle Cloud Infrastructure Console.

The user must enter these details and specific settings on the target configuration page. Follow the below steps:

1. Log in to Oracle Database Security Central console as an administrator.

2. Select Targets.

3. Select Register on the right.

4. Enter a Name for the target and select the Type as Oracle Database.

5. Optionally fill in the Description field.

6. Under the Audit Connection Details sub, choose the Advanced option.

7. In the Protocol menu, select TCPS.

8. In the Wallet field, upload the Single Sign On Wallet file (cwallet.sso).

9. Enter the TCPS connection string in the Target Location field: jdbc:oracle:thin:@<Connection string from OCI Console>

10. Enter the User Name and Password.

11. Select Save to save the configuration changes.

Step 4: Start Audit Trail on Audit Vault Server for the Autonomous Data Warehouse and Autonomous Transaction Processing Cloud Instances

This configuration step starts an audit trail on Audit Vault Server for the Autonomous Data Warehouse and Autonomous Transaction Processing Cloud instances.

Create audit trail using the Oracle Database Security Central console for the Autonomous Data Warehouse and Autonomous Transaction Processing Cloud instances. See Step 6: Starting Audit Trail on Audit Vault Server for Oracle Database Cloud Services Instances for complete information.

Step 5: (Optional) Revoke Database Security Central Privileges for a User

Use this configuration step to revoke user privileges on Oracle Cloud instances.

If a user no longer requires access to audit data on the database, revoke the privileges by running the following script as the SYS user with the SYSDBA privilege: oracle_AVDF_dbcs_drop_db_permissions.sql.