1. Oracle Autonomous Health Framework User's Guide
  2. Oracle Autonomous Health Framework (AHF) 26.8 Release Notes Summary

Oracle Autonomous Health Framework (AHF) 26.8 Release Notes Summary

  • PKCS12 certificate migration: AHF completes its transition from Java KeyStore (JKS) to the industry-standard PKCS12/P12 format. This applies to all certificate operations, including both root and non-root connections, simplifying certificate management and aligning AHF with a more widely supported format.
  • Network access for certificate synchronization: Nodes in an AHF cluster must have bidirectional TCP connectivity on ports 5000–5005. Port 5000 is the usual TFA daemon port, while ports 5001–5005 can be used if the default is unavailable. This is especially important during fresh installations and when adding nodes; OCI security rules should allow traffic from peer nodes or the cluster subnet.
  • Customer-provided CA-signed certificates: The new ahf security add-certificates command supports certificates issued by an organization’s own certificate authority. Root and non-root connections use separate certificates, and the same intermediate and root CAs must sign the certificates on every cluster node so AHF can synchronize them correctly.
  • Trust for self-signed upload servers: If an AHF upload endpoint uses a self-signed certificate, its public certificate must be imported into AHF before the endpoint is configured. AHF then distributes the trusted certificate across cluster nodes and uses it for registration, health checks, deregistration, and uploads.
  • Updated SSH host-key behavior: Unlike AHF 26.5, AHF 26.8 does not enforce strict SSH host-key validation before first contact. Instead, it records a new host’s SSH fingerprint in known_hosts on first connection, then validates subsequent connections against that saved entry.
  • Oracle Base Database Cloud@Customer support: AHF now supports BaseDB-C@C environments. It can collect logs and diagnostic data for troubleshooting, and it integrates with OCI Monitoring to make database and cluster health metrics visible in the OCI Console.
  • Reliability, performance, and security improvements: AHF 26.8 includes more than 50 smaller enhancements and fixes across framework components, along with critical security updates. The overall intent is to improve stability, diagnostic accuracy, resource efficiency, and security.