{"type":"doc","content":[{"type":"paragraph","content":[{"text":"This article describes how to install and set up the Oracle database, used in ","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]},{"text":"Smart ID Certificate Manager","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}},{"type":"link","attrs":{"href":"/wiki/spaces/PUB/pages/65346056"}}]},{"text":".","type":"text","marks":[{"type":"textColor","attrs":{"color":"#172b4d"}}]}]},{"type":"paragraph","content":[{"text":"For detailed information about how to install an Oracle database, see the Oracle documentation available at ","type":"text"},{"text":"http://www.oracle.com/","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.oracle.com/"}}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"When Oracle is used for the CMDB database, tables and users must be created before the CM server is installed.","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Download the Oracle Database installation package.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"During installation of the Oracle database, do the following:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Extract the Oracle database scripts located at ","type":"text"},{"text":"program_files/install/Oracle","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":", from the server installation zip file, ","type":"text"},{"text":"cm_server_.zip","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Decide whether the table spaces should be stored in the ordinary file system on the Oracle server or in the ASM (Automatic Storage Management).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If they are to be stored in ASM, ","type":"text"},{"text":"create_tablespace_and_user_cm.sql","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":" has to be adjusted. Make changes according to the following example:","type":"text"}]},{"type":"codeBlock","content":[{"text":"Create tablespace CMDB datafile 'cmdb.dbf' size 100m reuse autoextend on next 100m;","type":"text"}]},{"type":"paragraph","content":[{"text":"should be changed to:","type":"text"}]},{"type":"codeBlock","content":[{"text":"Create tablespace CMDB datafile '+DATA' size 100m reuse autoextend on next 100m;","type":"text"}]},{"type":"paragraph","content":[{"text":"DATA is just an example name of an ASM disk group. Read more about ASM groups on ","type":"text"},{"type":"inlineCard","attrs":{"url":"http://www.oracle.com/"}},{"text":" .","type":"text"}]}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Step-by-step instruction","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Edit settings on the Oracle server","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Login as an Oracle database administrator (","type":"text"},{"text":"dba","type":"text","marks":[{"type":"code"}]},{"text":") user in the operating system and run the script, that creates the tablespace and the ","type":"text"},{"text":"lcmadmin","type":"text","marks":[{"type":"code"}]},{"text":" user:","type":"text"}]},{"type":"codeBlock","content":[{"text":"sqlplus sysdba/ @create_tablespace_and_user_cm.sql >create_tsu.log","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check the log file.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Run the script for creating the CMDB tables:","type":"text"}]},{"type":"codeBlock","content":[{"text":"sqlplus lcmadmin/REQreq01 @create_cmdb.sql >create_cmdb.log","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Check the log file.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"type":"hardBreak"},{"text":"Edit settings on the CM server","type":"text"}]},{"type":"paragraph","content":[{"text":"When installing the CM server, include the JDBC component to create the Oracle database connection parameters, which are stored in the ","type":"text"},{"text":"cm.conf","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":" configuration file. The instance name is usually ","type":"text"},{"text":"orcl","type":"text","marks":[{"type":"code"}]},{"text":", in Oracle Express it is ","type":"text"},{"text":"XE","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Secure the connection","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enable TLS support for the connection to the Oracle database server. ","type":"text"},{"type":"hardBreak"},{"text":"Oracle database supports client authentication for the TLS connection based on certificates. Enable this feature to further enhance the security between CM and the Oracle database. A complete guide on how to enable TLS with client authentication can be found here: ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://docs.oracle.com/en/database/oracle/oracle-database/12.2/dbseg/configuring-secure-sockets-layer-authentication.html"}},{"text":" .","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After completing the guide and installing the database's certificate and the trusted issuer's certificate on the Oracle database, additional changes are required in the ","type":"text"},{"text":"cm.conf","type":"text","marks":[{"type":"em"}]},{"text":" file in order for CM and the Oracle JDBC driver to be able to connect to the database. A detailed explanation of relevant parameters of the Oracle JDBC driver can be found here: ","type":"text"},{"type":"inlineCard","attrs":{"url":"http://www.oracle.com/technetwork/"}},{"text":" ","type":"text"},{"type":"hardBreak"},{"text":"Follow these steps:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Change the ","type":"text"},{"text":"Database.name","type":"text","marks":[{"type":"code"}]},{"text":" parameter to provide the whole connection information as defined in the Oracle database file ","type":"text"},{"text":"tnsnames.ora","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"For example:","type":"text"}]},{"type":"paragraph","content":[{"text":"Example: Change Database.name","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"Database.name = jdbc:oracle:thin:@(DESCRIPTION=\n(ADDRESS= (PROTOCOL=tcps)\n(HOST=localhost) (PORT=1521) ) (CONNECT_DATA= (SERVER =\nDEDICATED)(SERVICE_NAME=XE)))","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To pass any additional required parameter to the Oracle JDBC driver, add new ","type":"text"},{"text":"Database.security","type":"text","marks":[{"type":"code"}]},{"text":" parameters.","type":"text"},{"type":"hardBreak"},{"text":"For example:","type":"text"}]},{"type":"paragraph","content":[{"text":"Example: Additional parameters","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"Database.security.# = = ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In order for the Oracle JDBC to trust the Oracle database's certificate, the certificate's issuer has to be trusted. To achieve this, add the issuer's certificate in a keystore with trusted certificates. ","type":"text"},{"type":"hardBreak"},{"text":"For example:","type":"text"}]},{"type":"paragraph","content":[{"text":"Example: Add issuer's certificate in keystore with trusted certificates","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":"Database.security.1 = javax.net.ssl.trustStore = \nDatabase.security.2 = javax.net.ssl.trustStoreType = JKS\nDatabase.security.3 = javax.net.ssl.trustStorePassword = ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If TLS client authentication is also activated on the server, the Oracle JDBC driver needs to be provided with the key and certificate to be used for authenticating to the Oracle database. This certificate has to be signed by an issuer trusted by the Oracle database. ","type":"text"},{"type":"hardBreak"},{"text":"For example:","type":"text"}]},{"type":"paragraph","content":[{"text":"Example: Sign certificate by an issuer trusted by the Oracle database","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","content":[{"text":";If PKCS12 file is used as storage for key and certificate\nDatabase.security.4 = javax.net.ssl.keyStore = \nDatabase.security.5 = javax.net.ssl.keyStoreType = PKCS12\nDatabase.security.6 = javax.net.ssl.keyStorePassword = \n;If JKS keystore file is used\n;Database.security.4 = javax.net.ssl.keyStore = \n;Database.security.5 = javax.net.ssl.keyStoreType = JKS\n;Database.security.6 = javax.net.ssl.keyStorePassword = ","type":"text"}]},{"type":"paragraph"}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Additional information","type":"text"}]},{"type":"expand","attrs":{"title":"Useful links"},"content":[{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"http://www.oracle.com/"}},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://nexusdoc.atlassian.net/wiki/spaces/PUB/pages/65355548"}},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://nexusdoc.atlassian.net/wiki/spaces/PUB/pages/65354780"}},{"text":" ","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}],"version":1}