4. Register Database Targets

To register databases as targets in Database Security Central, you first need to create a user on each database so that Database Security Central can connect to target Databases with these user credentials, and fetch data to evaluate risks. Second, register database targets in DBSecCentral by providing their connection details.

4.1 Create Connecting User and Grant Privileges

Database Security Central uses setup scripts to grant required privileges to the connecting user on target databases.

To create connecting user and grant privileges:

  1. Log in to the DBSecCentral Console as an administrator or super administrator.

  2. In the DBSecCentral Console, navigate to Administration, then Target Setup.

  3. Download the setup script for the target database type.

  4. Copy the script securely to the target database server.

  5. Run the following command on the database target to create a Database user for DBSecCentral:

    CREATE USER username IDENTIFIED BY password

    Note: Oracle recommends that you use SecurityCentral as username for recognition and management.

  6. Run the setup script. For example, for an Oracle Database target:

    @oracle_user_setup.sql

    • For username, enter the name of the user you created in the previous step.

    • For mode, enter ASSESSMENT_DISCOVERY. This mode is for security, user assessment and data discovery only.

  7. Review the script output and confirm that it completed successfully.

4.2 Register Database Targets

After the Security Central connecting user has been set up on the target database, register the target in Database Security Central.

Option 1: Using Security Central Database Discovery feature

If you have many databases in your fleet, it may be difficult to determine which ones are not yet registered with Oracle Oracle Database Security Central. The Database Discovery feature allows you to scan specified IP address and port ranges using Nmap commands to determine which databases haven’t been registered with Oracle Database Security Central. The results of the Nmap scan will inform you which Oracle, Microsoft SQL, MySQL, DB2, or PostgreSQL databases have not been registered as targets.

The XML file that is the output of the Nmap scan command is the list of databases. This file can be imported to the Oracle Database Security Central console by a super administrator to list all un-registered databases. Each database can be ignored from future scans or assigned to an administrator for target registration. Once you have the Nmap output XML file:

  1. Log in to the Security Central Console as an administrator.

  2. In the Security Central Console, select Targets.

  3. Select Database Discovery from the menu.

  4. Follow the instructions on the page to discover and register Database targets.

  5. Confirm that the targets appear in the target list.

Option 2: Using Security Central console UI

  1. Log in to the Security Central Console as an administrator.

  2. In the left navigation menu, select Targets. Targets is selected by default.

  3. On the Targets page, select Register.

  4. Enter the required database target connection details as follows:

    1. Use Test connection to validate that the Security Central Server can connect to the database target.

    2. Save the target registration.

  5. Confirm that the target appears in the target list.

  6. Repeat these steps for every target.

Note: These steps apply to Oracle Database targets. Oracle Database Security Central also supports a range of databases, operating systems, directory services, and file systems as targets. Register the relevant targets based on your specific use cases and requirements. For details on their registration refer to Configuring Target, Audit Trails, and Database Firewall Monitoring Points in the Database Security Central Administrator’s Guide.