This sections describes how to install the Oracle Database software securely.

For more information and additional guidelines for securely installing and managing the Oracle database, see the Oracle Database Security Guide:

• https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/index.html

Follow these steps to install the Oracle Database software securely:

• Patch the database regularly and apply security updates
  Periodically check the security site on Oracle Technology Network for details about security alerts for Oracle products.
• Patch the Oracle Java SE regularly and apply security updates
  Periodically check the security site on Oracle Technology Network for security alerts about Oracle Java SE.
• Allow database passwords to expire, and change default passwords
  Oracle Database is installed with several default database user accounts, such as SYS and SYSTEM.
• Configure components to use FIPS 140-2 compliant cryptographic implementations
  You can configure the Oracle Database and Oracle WebLogic Server used with the Oracle Empirica Signal application to use FIPS 140-2 approved and validated encryption modules.
• Enable TDE in the database
  You must protect sensitive data by encryption. Oracle Empirica Signal 9.2.1 supports encrypted tablespaces in an Oracle Database where Transparent Data Encryption (TDE) is enabled.