Installation and Upgrade > Advanced Deployment Considerations > Advanced Database Configurations > Configuring Windchill to Use JDBC over SSL > Configuring Windchill with Oracle Database to Use JDBC over SSL
  
Configuring Windchill with Oracle Database to Use JDBC over SSL
* 
ATTENTION: This topic refers to the Windchill Server Host as the “client” and the Oracle Database Host on which the Oracle Server is running is referred to as the “server”. In the context of database interactions, the Windchill server acts as a client to the database server.
The high-level steps for configuring the Oracle 19c Database Server for encrypted communication with its client (the Windchill server) using Microsoft JDBC Driver for Oracle Database Server is as follows:
1. Create Self-signed Certificate and Exchange it at Client and Server side
2. Create CA Certificate and Exchange it at Client and Server side
3. Configure Database to Use TCPS with the Server key
4. Configure JDBC over SSL
The subsequent sections describe the procedure for each of these steps.
The configuration described in this section is valid for 19c databases.
Oracle wallets created by Oracle Wallet Manager or ORAPKI use the standard PKCS12 format to store X.509 certificates and private keys. The wallet is stored in a file named ewallet.p12. In the example given below, you will use existing Windchill Java keystore at the client side. At the server side, you will use ORAPKI to create wallets, as Oracle provides SSL support for Oracle wallet. The OraclePKI command is stored in the $ORACLE_HOME/bin folder. For more information on Oracle wallets, see https://docs.oracle.com/middleware/1213/wls/JDBCA/oraclewallet.htm#JDBCA598
After completing the configuration steps, restart Windchill. The new setup will enable communication between Windchill and Oracle database server using JDBC over SSL.
For more information on configuring a database client connection, see the following documentation from Oracle:
https://docs.oracle.com/cd/E12517_01/back_office/pdf/141/html/pos_sg/appendix_jdbc_oracle.htm
http://www.oracle.com/technetwork/topics/wp-oracle-jdbc-thin-ssl-130128.pdf