Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

I have to enable network encryption on a specific instance. We have a single DB machine runnning one listener from /etc/listener.ora and several instances. TNS_ADMIN is set to /etc. Oracle 11.2g is installed once and the Advanced Security is installed too.

Following properties have to be set by me:

SQLNET.ENCRYPTION_TYPES_SERVER = (AES256)
SQLNET.ENCRYPTION_SERVER = REQUIRED
SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = (SHA1)

Even eventually the client counterpart.

Now, I have read the docs and realized that I have to set that in the sqlnet.ora but which one? For the client only? In TNS_ADMIN? Which would force all instance to require encryption. On the server?

Who is actually enforcing the encryption? I guess the listener, right? If so, can I set up a second listener for that?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.