Oracle HTTP Server Adaptable Driver
Automate OHS machine identity lifecycle
Eradicate catastrophic application availability from human oversight
Create, renew, deploy, maintain certificates in automated fashion
Perform onboard discovery natively built out-of-box
Throughout the Global 5000, Oracle applications have formed a core part of the operating infrastructure. Oracle HTTP Server (OHS) and Oracle Fusion Middleware (Fusion) are commonly used web application and API service products in Oracle deployments. However, there hasn’t been a way for security and operations teams to understand the machine identities - TLS certificates - in use, and no way to automate the machine identity lifecycle.
With sponsorship from the Machine Identity Management Development Fund, SamaraTech, an Oracle Solution and IT consultant, has developed an adaptable driver Oracle HTTP Server to automate TLS machine identities. This integration will help security and operations teams discover machine identities in Oracle Wallet, generate requests for TLS machine identities, and install and renew TLS machine identities and CA chains.
The solution handles typical machine identity management activities for Oracle HTTP Server. It starts with scanning the server(s) to identify existing installations and/or versions of Oracle HTTP Server. Next, it generates CSRs for those servers, then procures and implements the approved certificates. It maintains an inventory of these certificates with their validating information in its own Venafi Platform inventory and triggers the renewal events as applicable. This adaptable application driver is also designed to include onboard discovery among multiple of VMs, if required, to further streamline the automation process. The solution also handles the decommissioning process when a copy of OHS gets uninstalled from one of those servers.