Configuring PKI Certificate Authentication

You can configure Oracle AI Database to use PKI certificates for end-user authentication.

• How Oracle Database Uses Transport Layer Security for Authentication
  Transport Layer Security works with the core Oracle Database features such as encryption and data access controls.

• Enabling Oracle Internet Directory to Use Transport Layer Security Authentication
  To enable Oracle Internet Directory (OID) to use Transport Layer Security (TLS), create a wallet and certificates, and modify tnsnames.ora and sqlnet.ora.

• Configuring User Authentication with Transport Layer Security
  Both the client and server side can authenticate administrative users with Transport Layer Security (TLS).

• Configuring Transport Layer Security for Client Authentication and Encryption with X.509 Certificates
  You must perform this type of configuration on the server first, then the client.

• Configuring Email over Transport Layer Security with an Oracle Wallet
  You can use an Oracle wallet, PL/SQL packages, and security access control lists (ACLs) to configure email over a Transport Layer Security (TLS) connection.

• Troubleshooting Transport Layer Security Errors
  Oracle provides a utility to help troubleshoot PKI certificate configurations as well as additional guidance below. A utility is available through the support website to review and provide feedback on your PKI certificate authentication client and server configuration.