SSL in Oracle Business Intelligence

5-2 Security Guide for Oracle Business Intelligence Enterprise Edition

5.2 About SSL

SSL is a cryptographic protocol that enables secure communication between applications across a network. Enabling SSL communication provides several benefits, including message encryption, data integrity, and authentication. An encrypted message ensures confidentiality in that only authorized users have access to it. Data integrity ensures that a message is received intact without any tampering. Authentication guarantees that the person sending the message is who they claim to be. For more information about SSL concepts and public key cryptography, see How SSL Works in Oracle Fusion Middleware Administrators Guide.

5.2.1 SSL in Oracle Business Intelligence

By default, Oracle Business Intelligence components communicate with each other using TCPIP. Configuring SSL between the Oracle Business Intelligence components enables secured network communication. Oracle Business Intelligence components can communicate only through one protocol at a time. It is not possible to use SSL between some components, while using simple TCPIP communications between others. To enable secure communication, all instances of the following Oracle Business Intelligence components must be configured to communicate over SSL: ■ Oracle BI Server ■ Oracle BI Presentation Services ■ Oracle BI JavaHost ■ Oracle BI Scheduler ■ Oracle BI Job Manager ■ Oracle BI Cluster Controller ■ Oracle BI Server Clients, such as Oracle BI ODBC Client SSL requires that the server possess a public key and a private key for session negotiation. The public key is made available through a server certificate. The certificate also contains information that identifies the server. The private key is protected by the server. The SSL Everywhere central configuration feature configures SSL throughout the Oracle Business Intelligence installation from a single centralized point. Certificates Configure SSL communication between the Oracle WebLogic Server Managed servers. The Web server must be configured to use HTTPS before enabling SSL communication for Oracle Business Intelligence. Section 5.3, Configuring the Web Server to Use the HTTPS Protocol SSL Configuration in Oracle Fusion Middleware in Oracle Fusion Middleware Administrators Guide Configure SSL communication between components. Configure SSL communication between Oracle Business Intelligence components. Section 5.4, Configuring SSL Communication Between Components Table 5–1 Cont. Task Map: Configuring SSL Communication for Oracle Business Task Description Information SSL Configuration in Oracle Business Intelligence 5-3 are created for you and every Oracle Business Intelligence component is configured to use SSL. The following default security level is configured by the SSL Everywhere feature: ■ SSL encryption is enabled. ■ Mutual SSL authentication is not enabled. Since mutual SSL authentication is not enabled, clients do not need their own private SSL keys. All security sensitive inter-component communication links are authenticated by the BISystemUser credentials, or a user’s credential. ■ The default cipher suites are used. For information about how to use a non-default cipher suite, see Section 5.6, Advanced SSL Configuration Options . ■ When scaling out, the centrally managed SSL configuration is automatically propagated to any new components that are added. If a higher level of security is required, manual configuration might be used to augment or replace the SSL Everywhere central configuration. This is considerably more complex. For more information about how to configure SSL manually, contact Oracle Support. For more information, see Access to Oracle Support .

5.2.2 Creating Certificates and Keys in Oracle Business Intelligence