Oracle Kye-vault Installation (Version 21.4 ) ( Chapter -I )
Interesting story behind this: I have received a customer requirement for a DBA position, and the main criteria was: the DBA must know oracle key vault, for their security solution project. I have received around 25/30 resumes where everyone has written, they know Oracle key-vault. While interviewing, someone saying it's a security file 😆, someone saying it's a parameter that exists since 12c on-words 😀, others saying it's a tool like oracle wallet & TDE 😟. Everyone disappointed me, although it's just a matter of little more detail reading of (https://docs.oracle.com/en/database/oracle/key-vault/21.4/). So thought of writing this blog and share it across for quick understanding.
Note: I have done this installation/deployment of appliance image in my VM ware server. Created a 300Gigs vm with 8 GB of RAM & 2 vCPUs, and deployed it. Very simple.
Oracle Kye-vault is a security solution soft appliance from Oracle. It comes as an ISO image from edelivery website. It also comes with a complete image of the machine OS (OEL7) with DB inbuilt in it & the application already preinstalled. All security rules from DB to network & OS are pre-hardened. You can't modify them.
It provides a secure, central repository for security objects,
such as keys, certificates, passwords, and opaque objects. As an enterprise key
management platform, Oracle Key Vault provides a central platform to manage
these security objects and their lifecycle.
Although it is a hardware appliance, you can pretty much
simulate it by your own using oracle provided ISO in your own vm.
I will show you how to create your own appliance using
Oracle key-vault, (step by step), & will explain below points in multiple chapters.
- Download options
- Installation
- Configuration
- Administration.
- Experienced Tips.
Software can be downloaded from oracle’s e-delivery site.(https://edelivery.oracle.com)
The OS comes with the ISO is OEL-7 (17GB). So make sure, your vm
configuration is compatible with OEL7 only.
Below are the rest of Hardware configurations.
Map the ISO to VM disk drive & boot from there.
Solution:
Open the Host Client, and log in to the ESXi.
Locate the Windows
Server 2016 virtual machine for which you are enabling the disk UUID attribute,
and power off the virtual machine.
After power-off,
right-click the virtual machine, and choose Edit Settings.
- Click VM Options tab, and select Advanced.
- Click Edit Configuration in Configuration Parameters.
- Click Add parameter.
- In the Key column, type disk.EnableUUID.
- In the Value column, type TRUE.
- Click OK and click Save.
Power on the virtual machine
Now I restated the installation again. This time totally cool.. no errors at all.
11
12
13
15
16
18
19
20
21
22
24
25
All done. ! Good Job.
The total installation took around 5 hours for me. But Oracle says it should be in 30 mins. May be my hardware resources are not enough to speed it up.
Post installation Task:
Save the passwords, else it will very hard to restore.
After 1st login you again need to change it.
Save your password carefully.
Chapter -2: (Configuration) .... continues !!
In the next chapter I will explain difference between sysadmin Vs keyadmin & will configure endpoints.
Comments
Post a Comment