html

• Title and Copyright Information
• Preface
• Introducing Oracle NoSQL Database Security
• Security Configuration
  • Security Configuration Overview
  • Configuring Security with Makebootconfig
  • Configuring Security with Securityconfig
    • Creating the security configuration
    • Adding the security configuration
    • Verifying the security configuration
    • Updating the security configuration
    • Showing the security configuration
    • Removing the security configuration
    • Merging truststore configuration
• Performing a Secure Oracle NoSQL Database Installation
  • Single Node Secure Deployment
    • Adding Security to a New Installation
    • Adding Security to an Existing Installation
  • Multiple Node Secure Deployment
    • Adding Security to a New Installation
    • Adding Security to an Existing Installation
• Kerberos Authentication Service
  • Installation Prerequisites
  • Kerberos Principal
  • Keytabs
  • Kadmin and kadmin.local
  • Kerberos Security Properties
    • Setting Security Properties in a security login file
    • Setting Security Properties through KVStoreConfig
    • Using Security Properties to Log In
      • Using credential cache
      • Using a keytab
  • JAAS programming framework integration
  • Performing a Secure Oracle NoSQL Database Installation with Kerberos
    • Adding Kerberos to a New Installation
    • Adding Kerberos to an Existing Secure Installation
  • Using Oracle NoSQL Database with Kerberos and Microsoft Active Directory (AD)
• External Password Storage
  • Oracle Wallet
  • Password store file
• Security.xml Parameters
  • Top-level parameters
  • Transport parameters
• Encryption
  • SSL model
  • SSL communication properties
  • Disk Encryption in a Linux Environment
• Configuring Authentication
  • User Management
    • User Creation
    • User Modification
    • User Removal
    • User Status
    • User Login
  • Sessions
• Configuring Authorization
  • Privileges
    • System Privileges
    • Object Privileges
    • Table Ownership
    • Privilege Hierarchy
  • Roles
    • System Built-in Roles
    • User-Defined Roles
  • Managing Roles, Privileges and Users
    • Role Creation
    • Role Removal
    • Role Status
    • Grant Roles or Privileges
    • Revoke Roles or Privileges
    • Granting Authorization Access to Namespaces
• Security Policies
  • Security Policy Modifications
• Audit Logging
  • Security Log Messages
• Keeping Oracle NoSQL Database Secure
  • Guidelines for Securing the Configuration
  • Guideline for Securing Store Topology
  • Guidelines for Deploying Secure Applications
  • Guidelines for Securing the SSL protocol
  • Guidelines for Disabling TLSv1.1 and TLSv1 Protocols
  • Guidelines for enabling TLSV1.3 protocol
  • Guidelines for using JMX securely
  • Guidelines for using PKCS12 Java KeyStore
    • Default Security Configuration
    • Updating KeyStore Type of an Existing Security Configuration
    • Updating SSL Keys and Certificates
  • Guidelines for Updating Keystore Passwords
  • Guidelines for Updating Kerberos Passwords
  • Guidelines for Updating SSL Keys and Certificates
  • Guidelines for Configuring External Certificates for a new Installation
  • Guidelines for Configuring External Certificates for an Existing Default Secure Installation
  • Guidelines for Updating the External Certificates
  • Guidelines for Operating System Security
  • Guidelines for Resetting Admin Password
• Password Complexity Policies
• SSL keystore generation
• Java KeyStore Preparation
  • Import Key Pair to Java Keystore
• KVStore Required Privileges
  • Privileges for Accessing CLI Commands
  • Privileges for DDL Commands
  • Privileges for Accessing KVStore APIs
  • Privileges for Accessing KVStore TableAPIs
  • Privileges for Accessing KvLargeObject APIs
  • Privileges for Running XRegion Service
• Configuring the Kerberos Administrative Utility
• Manually Registering Oracle NoSQL Database Service Principal
• Generating Certificate and Private Key for the Oracle NoSQL Database Proxy
  • Guidelines for Generating Self-Signed Certificate and Private Key using OpenSSL
  • Guidelines for Generating Certificate Chain and Private Key using OpenSSL
  • Troubleshooting issues with self-signed certificate