Oracle Cloud Infrastructure Documentation

Connecting a Compute Cloud@Customer Infrastructure to OCI

The Compute Cloud@Customer infrastructure in the data center needs to be connected to Oracle Cloud Infrastructure (OCI) before it can be used. This task involves a registration process during which a secure connection is established.

As of June 2025, a certificate chain of trust is used to authenticate the registration process that establishes the connection. Prior to June 2025, the connection used PIN-based authentication as described in (Legacy Method) Connecting an Infrastructure. We recommend all Compute Cloud@Customer infrastructures transition to the certificate-based registration process.

The first time implementing this new registration process requires you to work with Oracle to establish certificate-based authentication with OCI. After that, the certificate is automatically renewed every 30 days, which is within the 60 day certificate lifespan.

Connecting an infrastructure with this new registration process applies to the following situations:

  • New installations: Establishing the connection is part of the Oracle managed installation, and you don't need to request a connection.
  • Existing installations: If the infrastructure was installed before <date>, the infrastructure needs to be transitioned to the certificate-based registration before the 90-day legacy connection expires. In this case, Oracle might contact you to plan a connection, or you can request a connection.
  • Connection loss: If a prolonged connection outage occurs, and the connection is in the REJECTED state, request a connection.

Requesting a Connection

Prerequisites:

  • A Compute Cloud@Customer infrastructure must be set up in OCI. See Creating a Compute Cloud@Customer Infrastructure in OCI.

  • The Compute Cloud@Customer infrastructure must be installed in your data center.

  • In your tenancy, have a group with a user whose sole purpose is to run the registration process. See Create Users and Groups.
  • Create a policy for the registration group that allows the group the CCC_CERTIFICATE_REGISTER permission. Don't grant the group any other permissions. See Add Required Policies.

  • The connection must be in the REJECT connection state for a minimum of 20 minutes before you reconnect an infrastructure. See Viewing the Connection State.

    Newly installed infrastructures are in the REJECT state by default. If you need to put the infrastructure into a REJECT state (for example, if you believe the security of the connection has been compromised), see Rejecting a Connection.

Open a Support Request

If you need to reconnect the infrastructure for any reason, open a Support Request. See Creating a Support Request. To access support, sign in to the Oracle Cloud Console as described in Sign In to the OCI Console.