About ezTLS

Oracle AI Database encryption-only, zero-configuration TLS (ezTLS) provides TLS-based encryption for Oracle AI Database client-server communications, entirely eliminating the need to deploy and manage wallets or certificates.

While traditional certificate-based TLS provides strong identity verification, it adds significant operational overhead to a database deployment. Administrators must manually issue certificates, distribute them to clients and servers, configure wallets and trust stores, renew certificates before they expire, revoke them when necessary, and keep trust configurations consistent across every connection. Because large environments can have many databases, application servers, client drivers, and operating systems, this certificate rollout and renewal process is often time-consuming and prone to configuration errors. Furthermore, even a simple certificate change can require coordination across application owners and infrastructure teams.

ezTLS bypasses this complexity for use cases where certificate-based identity verification is not required. It provides a simple deployment experience by allowing you to enable TLS-based protection without creating and distributing client certificates, or maintaining a customer-managed certificate chain for every database connection.

Because it is built directly on the standard TLS stack, ezTLS ensures your connections benefit from modern cipher suites and cryptography, and continue to evolve alongside future industry standards and cryptographic improvements—all without additional management overhead.

With ezTLS, you can:

• Encrypt SQL*Net data and ensure integrity protection in transit.
• Deploy TLS immediately without managing client wallets, trust stores, or certificate chains.
• Retain existing workflows by keeping your current application connection methods and database authentication.
• Migrate at your own pace by enabling ezTLS globally or for specific, targeted connections.