5-12 Security Guide for Oracle Business Intelligence Enterprise Edition
5.
Navigate to the BIDomain MBean and commit the changes. For information, see
Section 5.4.3, Commit the SSL Configuration Changes .
SSL communication is now enabled between the components. You must restart the Oracle Business Intelligence components for the changes to take effect.
6.
Restart the Oracle Business Intelligence components from the Oracle Business Intelligence Overview page in Fusion Middleware Control.
For more information, see Starting and Stopping Oracle Business Intelligence System Components in Oracle Fusion Middleware System Administrators Guide for
Oracle Business Intelligence Enterprise Edition.
5.4.6 Confirming SSL Status
You can run a SSL report using the BIDomain.BIInstance.SecurityConfiguration MBean to verify that SSL communication is operating between components.
To run the SSL report to confirm status: 1.
From the System MBean Browser, select the BIDomain.BIInstanceSecurityConfiguration MBean.
For information about how to navigate to the MBean, see Section 5.4.2,
Generating the SSL Certificates . You do not need to lock the configuration to run
the SSL report.
2. Select the Operations tab, then select the runSSLReport option.
SSL Configuration in Oracle Business Intelligence 5-13
3. To run the report, click Invoke.
The report indicating the status of SSL communication between components displays. See
Example 5–1, Sample SSL Report Output .
If the SSL ping fails, check the following:
■
Verify the target component is running.
■
Verify that the component has been restarted since SSL was enabled. SSL configuration changes require a restart to take effect.
■
Verify that the SSLEnabled attribute for the BIDomain.BIInstanceSecurityConfiguration MBean is set to true. When
changing SSL properties, both the apply and commit steps must be performed.
Example 5–1 Sample SSL Report Output
OracleBIPresentationServicesComponent 1 machine_name:9710. SSL ping OK. peer: machine_name port: 9710 protocol:
SSLv3 cipher suite: SSL_RSA_WITH_RC4_128_MD5 local certificates: null
peer certificates: 18, expires Tue might 17 15:23:02 BST 2011 for CN=OBIEE Installer Openssl, OU=Business Intelligence, O=Oracle, C=US9879704091745165219,
expires Tue might 17 15:23:02 BST 2011 for C=US, O=org, OU=unit, CN=OBIEE Installer CA
OracleBIClusterControllerComponent No instances configured
OracleBISchedulerComponent 1 machine_name:9705. SSL ping OK. peer: machine_name port: 9705 protocol:
SSLv3 cipher suite: SSL_RSA_WITH_RC4_128_MD5 local certificates: null
peer certificates: 18, expires Tue might 17 15:23:02 BST 2011 for CN=OBIEE Installer Openssl, OU=Business Intelligence, O=Oracle, C=US
OracleBIJavaHostComponent 1 machine_name:9810. SSL ping OK. peer: machine_name port: 9810 protocol:
SSLv3 cipher suite: SSL_RSA_WITH_RC4_128_MD5 local certificates: null
peer certificates: 19, expires Tue might 17 15:23:03 BST 2011 for CN=OBIEE Installer Java, OU=Business Intelligence, O=Oracle, C=US
OracleBIServerComponent 1 machine_name:9703. SSL ping OK. peer: machine_name port: 9703 protocol:
SSLv3 cipher suite: SSL_RSA_WITH_RC4_128_MD5 local certificates: null
peer certificates: 18, expires Tue might 17 15:23:02 BST 2011 for CN=OBIEE Installer Openssl, OU=Business Intelligence, O=Oracle, C=US
SSL ok on 4 out of 4 components.
5.4.7 Configuring the SMTP Server
