Multiple Certificate Support - Oracle Database B10772-01 Administrator's Manual

Oracle Wallet Manager Overview
cryptography standards called Public-Key Cryptography Standards, or PKCS for
short. These standards have been developed to establish interoperability between
computer systems that use public-key technology to secure data across intranets
and the Internet.
Oracle Wallet Manager stores X.509 certificates and
format, and generates certificate requests according to the PKCS #10 specification.
This makes the Oracle wallet structure interoperable with supported third party
PKI applications, and provides wallet portability across operating systems.
Oracle Wallet Manager wallets can be enabled to store credentials on hardware
security modules that use APIs that conform to the PKCS #11 specification. When
PKCS11 wallet type is chosen at the time of wallet creation, then all keys stored in
that wallet are saved to a hardware security module or token, such as smart cards,
PCMCIA
store private keys, perform cryptographic operations, or both.
Multiple Certificate Support
Oracle Wallet Manager enables you to store multiple certificates for each wallet,
supporting the following
Oracle Wallet Manager supports multiple certificates for a single digital entity,
where each certificate can be used for a set of Oracle PKI certificate usages, but the
same certificate cannot be used for all such usages (See
8-4 Oracle Database Advanced Security Administrator's Guide
cards, smart diskettes, or other types of portable hardware devices that
See Also:
"Importing Third-Party Wallets"
"Exporting Oracle Wallets to Third-Party Environments"
page 8-14
"Creating a Wallet to Store Hardware Security Module
Credentials"
To view PKCS standards documents, navigate to the following
URL: http://www.rsasecurity.com/rsalabs/PKCS
SSL
S/MIME signature
S/MIME encryption
Code-Signing
CA Certificate Signing
on page 8-13
on page 8-11
Oracle PKI certificate
private keys in PKCS #12
usages:
Table 8–2 and
on
Table 8–3 for