Overview Introduction to Oracle Reports Security

Securing Oracle Reports Services 15-5

15.1.4 Credential Store

A Credential Store is the repository of security data that certify the authority of entities used by Java 2, JavaEE and ADF applications. Applications can use the credential store, a single, consolidated service provider to store and manage the credentials securely. A domain includes one credential store. Application-specific credentials are supported and migrated to credentials in the domain credential store when the application is deployed. Thus, all servers and all applications deployed in a domain use a common credential store, the domain credential store. Oracle Reports 11g Release 1 11.1.1 uses credential store to store a password as a key. You can also use the credential store to configure database connection information for jobStatusRepository and jobRepository elements. For example: Portal password is stored in the reports credential map with key in the following syntax: portalpasswd_DomainName_InstanceName

15.1.4.1 Credential Types

Oracle Platform Security supports the following types of credentials according to the data they contain: ■ A password Credential encapsulates a user name and a password ■ A generic credential encapsulates any customized data or arbitrary token, such as a symmetric key. In Credential Store Framework CSF, a credential is uniquely identified by a map name and a key name. Typically, the map name corresponds with the name of an application and all credentials with the same map name define a logical group of credentials, such as the credentials used by the application. All map names in a credential store must be distinct. If the credential store is intended to be the repository of X.509 certificates, it is recommended the use of an Oracle Wallet or a Java keystore. The credential store does not allow the storage of end-user digital certificates. For more information on how to manage credentials in a domain credential store through Oracle Enterprise Manager, see Section 7.8.8, Managing Credentials . For more information about Wallet-Based and LDAP-Based Credential Stores and Configuring the Credential Store, see Oracle Fusion Middleware Security Guide.

15.2 Out-of-the-Box Behavior

It is recommended that you specify information about Oracle Internet Directory while installing Oracle Reports 11g Release 1 11.1.1. For more information, see Oracle Fusion Middleware Quick Installation Guide for Oracle Portal, Forms, Reports, and Discoverer. Note: You must create credentials under the Reports folder as the server accesses credentials from this folder in CSF. Note: CSF keys are stored in rwserver.conf and rwservlet.properties file.