The below steps detail the process of moving a certificate from a Unix or Windows based system to an Oracle Wallet.
Unix System
- Obtain the 3 files required for TLS "Certificate, Private_Key, and Intermediate_Certificate."
- Using OpenSSL, convert those 3 files into a PKCS12 file named "ewallet.p12" with the command below.
openssl pkcs12 -export -in Certificate -inkey Private_Key -certfile Intermediate_Certificate -out ewallet.p12 - Open the Oracle Wallet Manager Gui interface.
- Under the Wallet menu, click Open. Navigate to your newly created "ewallet.p12" file. It will ask you to enter the password you set in step 2 above.
- Verify the certificate is listed in the wallet and save.
- After completing the above steps, configure the system to use the new wallet. Please contact Oracle support for further assistance.
Windows System
- Export the certificate from IIS or the MMC console as a PKCS12 and use the name "ewallet.pfx."
- Create a Microsoft Management Console (MMC) Snap-in for managing certificates,
- Open the Certificates (Local Computer) snap-in you added, and select Personal > Certificates.
- Right-click on the desired certificate and selectAll Tasks > Export. The Certificate Export Wizard opens, click
- Select the radio button, Yes, export the private key. Click
- In the Export File Formatwindow, ensure the option for Personal Information Exchange - PKCS#12 (.pfx) is selected.
- Select Include all certificates in the certificate path if possible. If you do not select the Include all certificates in the certificate path if possible option, your server may not recognize the issuer of the certificate, which may result in security warnings for your clients. Click
- Enter and confirm a password to protect the PFX file and click
- Choose a file name and location for the export file. Click Next.
- Read the summary and verify that the information is correct. Pay special attention to where you saved the file. Ensure that the information is correct. Click
- Rename the newly created PKCS12 file to "ewallet.p12". Reason being Oracle Wallet will only accept this file name during the import process.
- Open the Oracle Wallet Manager Gui interface.
- Under the Wallet menu, click Open. Navigate to your newly created "ewallet.p12' file. It will ask you to enter the password you set in step 8 above.
- Verify the certificate is listed in the wallet and save.
After completing the above steps, configure the system to use the new wallet. Please contact Oracle support for further assistance.