Table of Contents

• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Related Documents
  • Conventions
• Overview of Oracle Database Appliance Security
  • Basic Security Principles
  • Survivability of Mission-Critical Workloads
  • Defense in Depth to Secure the Operating Environment
  • Least Privilege for Services and Users
  • Accountability of Events and Actions
• Security Features of Oracle Database Appliance
  • About Oracle Database Appliance Security Features
  • About SELinux on Oracle Database Appliance
  • Oracle Database Appliance and Common Vulnerabilities and Exposures (CVEs)
  • Identifying Security Issues and Picking up Security Updates
  • About Multi-User Access for Oracle Database Appliance Security
  • Restricting the Binaries for Starting the System
    • Understanding Secure Boot
    • Enabling and Disabling Secure Boot
  • Using Isolation Policies
    • Isolating Network Traffic
    • Isolating Databases
  • Controlling Access to Data
    • Controlling Network Access
    • Controlling Database Access
    • About Managing Privileges and Security with SUDO
    • Configuring a SUDO Security Policy for the DCS Stack
  • Using Cryptographic Services
  • Monitoring and Auditing of Databases on Oracle Database Appliance
  • About FIPS 140-2 Compliance on Oracle Database Appliance
  • About STIG Compliance on Oracle Database Appliance
    • About Security Content Automation Protocol (SCAP) Findings
  • Using Oracle ILOM for Secure Management
• Planning a Secure Environment
  • Considerations for a Secure Environment
  • Understanding User Accounts
  • Understanding the Default Security Settings
• Keeping Oracle Database Appliance Secure
  • Securing the Hardware
  • Securing the Software
  • Configuring a Third-Party Certificate for Oracle Database Appliance
    • Creating a Key and Java Keystore and Importing a Trusted Certificate
    • Configuring the DCS Server to Use Custom Keystore
    • Configuring the DCS Agent To Use a Custom Certificate
  • Maintaining a Secure Environment
    • About Secure Environments
    • Maintaining Network Security
    • Updating Software and Firmware
    • Ensuring Data Security Outside of Oracle Database Appliance