Setting the Usernames and Passwords of Audit Vault Server Users

Set up usernames and passwords for Oracle Database Security Central (Oracle DBSecCentral).

In the post-install configuration page, you set up usernames and passwords for the following Oracle Database Security Central users:

• Super Administrator

• Super Auditor

• Repository Encryption Keystore

See Also: Separation of Duties for a description of each user.

Note: Do not use the root or support users unless instructed to do so in documentation or by a customer support representative.

About Administrator and Auditor User Names

Oracle recommends that you create administrator and auditor user accounts after you install Oracle Database Security Central (Oracle DBSecCentral).

The administrator and auditor user names must follow these rules:

• The first character has to be alphabetical.

• 1 to 30 characters long.

• Each remaining character is either alphanumeric or an underscore (_), dollar sign ($), or number sign (#).

Note: The administrator and auditor user names are upshifted (that is, any lowercase alphabetic characters are replaced by their uppercase equivalents). Also, the Audit Vault Server does not support quoted user names.

See Also: Separation of Duties for a description of each user account.

Password Requirements

Set password management guidelines for the Oracle Database Security Central (Oracle DBSecCentral) user accounts.

For example, you may require that users change their passwords on a regular basis, such as every 120 days, and that they create passwords that are not easily guessed.

The following sections describe the minimum password requirements for Oracle Database Security Central.

Requirements for Passwords Containing Unicode Characters

If your password contains unicode characters (such as non-English characters with accent marks), the password requirement is that it:

• Be between 8 and 30 characters long.

Requirements for English-Only (ASCII) Passwords

If you are using English-only, ASCII printable characters, Oracle Database Security Central requires that passwords:

• Be between 8 and 30 characters long.

• Contain at least one of each of the following:

  • Lowercase letters: a-z.

  • Uppercase letters: A-Z.

  • Digits: 0-9.

  • Punctuation marks: comma (,), period (.), plus sign (+), colon(:), exclamation mark (!), and underscore (_)

• Not contain double quotes (“), back space, or control characters.

In addition, Oracle recommends that passwords:

• Not be the same as the user name.

• Not be an Oracle reserved word.

• Not be an obvious word (such as welcome, account, database, and user).

• Not contain any repeating characters.

See Also:

• Oracle Database Security Guide for additional guidelines on how you can strengthen passwords for your site.

• Changing Your Own Password

• Changing the Password of Another Administrator

Setting the Passwords For Audit Vault Server Users

Steps for setting the passwords for the Audit Vault Server users.

To set the passwords of the Audit Vault Server administrator, auditor, and support user:

1. Access the Audit Vault Server Post-Install Configuration page.

2. Under User Setup:

   • In the Super Administrator field, enter the administrative user name.

   • Under the Super Administrator field, enter the administrator Super Administrator Password, then confirm it in the Re-enter Password field.

   • Select Validate username.

     The administrator username that you entered is validated. If this name is valid, then you can use it; if not, then you must enter a valid name.

   • In the Super Auditor field, enter the super auditor user name.

   • Under the Super Auditor, field, enter the auditor Super Auditor Password, then confirm it in the Re-enter Password field.

   • Select Validate username.

     The auditor username that you entered is validated. If this name is valid, then you can use it; if not, then you must enter a valid name.

3. Under Repository Encryption, enter the Keystore Password, and then re-enter it.

   Audit event data in the Audit Vault Server’s repository is automatically encrypted using Oracle Database Transparent Data Encryption (TDE). The repository encryption keystore password is required to reset the TDE master key.

Related Topics

• Accessing the Audit Vault Server Post-Install Configuration Page