Databases

Oracle instance parameter

Oracle Instance Parameter are documented in the "NEXEED Industrial Application System" Operations Manual in the section "4.4.1. Oracle database - Instance parameters".

Securing data on the network (service to database)

Oracle Documentation: Configuring network data encryption and integrity

Oracle supports two ways to encrypt the Data between Client and Database: Database Native Network Encryption and Transport Layer Security.

Since Transport Layer Security uses a Certificate that expires, we recommend Native Network Encryption.

Choosing Between Native Encryption And TLS

The setting must be set on the Oracle Database in sql.net For details check the topic 18.3.2 in the Linked Documentation

For maximum security on the server, set the following sqlnet.ora parameters:

SQLNET.ENCRYPTION_SERVER = REQUIRED
SQLNET.ENCRYPTION_TYPES_SERVER = (AES256)
SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = (SHA512)
SQLNET.ALLOW_WEAK_CRYPTO_CLIENTS = FALSE