About communication security

You can secure (encrypt and prevent tampering of) communications by using Transport Layer Security (TLS) and, optionally, by signing authorization information issued by the application server.

With Transport Layer Security, all web traffic between the client applications and the web server is encrypted and tamper resistant. You configure TLS through IIS with an X.509 certificate obtained using your company certificate store or a third party application.

Oracle recommends that you enable TLS. For more information about enabling TLS, refer to the Microsoft documentation about configuring TLS for your operating system.

Note:

When you start the client applications, enter the address of the application server, including the correct protocol (either HTTP or HTTPS). If you enable TLS, the address of the application server must begin with HTTPS