Configuring Oracle Database Exadata Express Cloud Service Target Using TCPS

Learn how to configure Oracle Database Exadata Express Cloud Service targets in TCPS mode.

Step 1: Installing Audit Vault Agent on registered On-premises Hosts and Configuring TCPS

This step installs Oracle Audit Vault Agent on registered on-premises hosts and configures TCPS.

Prerequisites

Ensure the right version of JDK is installed. The supported JDK versions are:
- JDK7u80 or higher
- JDK8u71
- JCE Unlimited Strength Jurisdiction Policy Files with both JDK7 and JDK8. JDK 8 .jar files can be downloaded from: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

This configuration step creates user accounts on Oracle Exadata Express Cloud Service Instances.

Procedure:

Ensure that the connection has been established to the Oracle Database Cloud Service instances through TCPS as user with SYSDBA administrative privilege.
Create Server Wallet and certificate.
Create Client Wallet and certificate.
Exchange Client and Server certificates.
Configure Server network.
After the above steps are complete, you can now connect to the DBCS instances in TCPS using the Audit Vault Agent or tools like SQLPlus and SQLDeveloper.
Run the following commands to create audit retrieval user account scripts:

oracle_AVDF_E1_user_setup.sql

oracle_AVDF_E1_drop_db_permissions.sql

See Also: Configuring TCPS Connections for DBCS Instances for creating Server Wallet, Client Wallet, certificates, and exchanging certificates.

This configuration step creates targets on Oracle Audit Vault Server for Oracle Exadata Express Cloud Service instances.

Create a target on Oracle Audit Vault Server for the DBCS Instance. See Step 5: Creating Targets on Audit Vault Server for Oracle Database Cloud Service Instances.
Run the following command to set mandatory target attribute for SSL version:

av.collector.stconn.oracle.net.ssl_version = 1.2