Oracle Database Advanced Security 10g Release 1, Руководство администратора

Страница: 229 / 518

Managing Wallets
Using Oracle Wallet Manager 8-11
5.
Click OK to continue. If the entered password does not conform to the required
guidelines, then the following message appears:
Password must have a minimum length of eight characters, and contain
alphabetic characters combined with numbers or special characters. Do you
want to try again?
6.
An alert is displayed, and informs you that a new empty wallet has been
created. It prompts you to decide whether you want to add a certificate request.
See
"Adding a Certificate Request" on page 8-21.
If you choose No, you are returned to the Oracle Wallet Manager main window.
The new wallet you just created appears in the left window pane. The certificate
has a status of [Empty], and the wallet displays its default trusted certificates.
7.
Select Wallet > Save In System Default to save the new wallet.
If you do not have permission to save the wallet in the system default, you can
save it to another location. This location must be used in the SSL configuration
for clients and servers.
A message at the bottom of the window confirms that the wallet was
successfully saved.
Creating a Wallet to Store Hardware Security Module Credentials
To create a wallet to store PKCS #11 credentials on a hardware security module,
perform the following tasks:
1.
Choose Wallet
>
New
from the menu bar; the New Wallet dialog box appears.
2.
Follow the "Required Guidelines for Creating Wallet Passwords" on page 8-9
and enter a password in the Wallet Password field.
3.
Re-enter that password in the Confirm Password field.
4.
Choose PKCS11 from the Wallet Type list, and click OK to continue. The New
PKCS11 Wallet window appears.
5.
Choose a vendor name from the Select Hardware Vendor list.
Note:
In the current release of Oracle Wallet Manager, only
nCipher hardware has been certified to interoperate with Oracle
wallets.