What is a wallet?įrom the Oracle documentation, a wallet is a secure container that stores authentication and signing credentials. This technique works for SQL Plus and JDBC connections so we should definitively use it more. You can use it without restriction on any Oracle editions (see note Using The Secure External Password Store – Doc ID 340559.1). This features doesn’t require an extra-cost option. Our objective on this blog is to remove the clear text password from the script or from a configuration file. The thing is that anyone having access to the user who owns the file can just open the file and grab the password to connect directly to the database from another machine. And in general, the configuration itself is a simple clear text file whitout encryption and we rely on file system permissions to deny read access to the file for other users.

We find passwords for Oracle users in configuration files more often than we want. I had the question from a customer how can we encrypt the password in our application and monitoring scripts? In this blog we will discuss one solution: using the Oracle client wallet Storing password is a very important topic because if a machine is compromised, we can assume that any password stored in clear text are also compromised. In our more and more connected world, security is a big concern.

No valid oracle clients found