Preparing for an SSL Connection with Oracle RAC Server

Before configuring Oracle RAC SSL JDBC data sources in IBM FileNet Content Platform Engine (CPE), you need to prepare the environment to establish secure communication between Content Engine and the Oracle RAC database server.

Before You Begin

You need to configure an SSL connection with the Oracle RAC database server from the WebSphere Application Server environment.

If you want to use an SSL connection with your database, you must import the SSL certificate from the database server into your CPE client machine. You can then configure an SSL-enabled connection to GCD and Object Store databases that use Oracle RAC.

Procedure

1. Copy the Server Certificate

Copy the server certificate from the Oracle RAC server machine to the client machine.

For example, copy the certificate file (such as rac-scan-cert.pem) from the server machine to a location on the client machine.

2. Configure the Scan Listener Name

Configure the Oracle RAC scan listener name in the hosts file on the client machine.

Example:

<scan_listener_IP_address> rac_scan

3. Restart the Application Server

Restart the WebSphere Application Server instance after updating the hosts file.

4. Import the Server Certificate into the WebSphere TrustStore

Use the keytool command to import the Oracle RAC server certificate into the WebSphere truststore.

For example, import the certificate into a PKCS12 truststore:

keytool -importcert -alias rac-scan -file /tmp/orcl-server-cert.pem -keystore "/opt/IBM/WebSphere/AppServer/profiles/AppSrv01/config/cells/esteem1Node01Cell/nodes/esteem1Node01/trust.p12" -storetype PKCS12 -storepass your_password -noprompt

Configuring the GCD JDBC Data Source

Post creating a CMUI profile, navigate to the Configure GCD JDBC Data Sources task.

Under the JDBC Driver Name dropdown, select:

Oracle JDBC Driver (RAC support - SSL enabled)

Provide the required details such as:

• GCD JDBC datasource name

• JDBC XA datasource name

• Oracle RAC SSL database details

• Oracle RAC data (scan listener and port)

• Database service name

• Database username

• Database password

• Oracle JDBC driver JAR (ojdbc jar)

After providing all the required information, save the configuration and perform a Test Database Connection to ensure that the connection is successfully established.

Once the test connection succeeds, click Run Task to execute the GCD datasource configuration task.

After successful execution, the JDBC datasource and XA datasource are created in WebSphere Application Server with the Oracle RAC SSL configuration.

Configuring the Object Store JDBC Data Source

Repeat the same steps under the Configure Object Store JDBC Data Sources task.

Select:

Oracle JDBC Driver (RAC support - SSL enabled)

Provide the Object Store database details, including:

• Object Store JDBC datasource name

• Object Store JDBC XA datasource name

• Oracle RAC SSL database information

• Database service name

• Username and password

• Oracle JDBC driver JAR

• SSL truststore details

Ensure that a different Oracle RAC SSL database is specified for the Object Store configuration.

After entering the required information:

1. Save the configuration.

2. Perform a Test Database Connection.

3. Verify that the connection is established successfully.

4. Click Run Task to create the datasource.

The configured Object Store datasource will be used during Object Store creation while configuring the Administration Console for Content Engine.

Summary

By importing the Oracle RAC SSL certificate into the WebSphere truststore and selecting Oracle JDBC Driver (RAC support - SSL enabled) during datasource configuration, administrators can securely configure both GCD and Object Store JDBC data sources for IBM FileNet Content Platform Engine.

Successful completion of these tasks creates the required datasources in WebSphere Application Server and enables secure SSL communication between Content Platform Engine and Oracle RAC databases.