Confirm Secure Configuration with New and Updated Checks in the Secure Configuration Console

The Secure Configuration Console consolidates secure configuration checks in one dashboard to ensure that high-priority security configuration problems can be reviewed, understood, and remediated. The Secure Configuration Console is enabled by default with Oracle E-Business Suite (EBS) Release 12.2.6 or later or R12.ATG_PF.C.Delta.6 or later.

New and updated security checks are delivered on a regular basis. For more information regarding the latest security checks, see Checked Security Guidelines in Secure Configuration Console in the Oracle E-Business Suite Security Guide.

The following new security check is added with EBS Release 12.2.15 or R12.ATG_PF.C.Delta.14:

  • Unified Auditing is enabled: This check fails if Unified Auditing and the recommended default EBS Unified Auditing policies are not enabled.

The following security checks have been updated with EBS Release 12.2.15 or R12.ATG_PF.C.Delta.14:

  • Allowed resources that are unused are denied: If the required access data has been collected, then the check will pass if all allowed resources have been accessed or fail if there are resources that are allowed but have never been accessed. If the required access data has not been collected because the Allowed Resources feature is not enabled in your environment, then the check is automatically disabled.
  • Critical security profile values are set correctly: In addition to verifying that critical security profile values are set as recommended, this check now confirms that the Developer Console is disabled.
  • Database users default passwords have been changed to non-default values: This check now validates password changes only for Oracle Database 11g Release 2 (11.2.0.4) and later. It no longer checks database releases prior to 11.2.0.4.
  • Oracle E-Business Suite CPU patch level is the expected level or later: This check now defaults to verifying that the latest quarterly Critical Patch Update (CPU) has been applied to your environment.

Steps to Enable

You don't need to do anything to enable this feature.

Tips And Considerations

For more information to enable the features for Oracle E-Business Suite Release12.2, see the following:

Key Resources