The Advanced Security tab allows you to specify settings for Oracle Advanced Security (OAS). On this tab, provide values for the options in the following tables; then, click Apply. The fields are optional unless otherwise noted.

Figure 1. Advanced Security tab

The Advanced Security Tab of the ODBC Oracle Wire Protocol Driver Setup dialog box

Connection Options: Advanced Security Description
Encryption Level Specifies a preference on whether to use encryption on data being sent between the driver and the database server.

If set to 0 - Rejected, or if no match is found between the driver and server encryption types, data sent between the driver and the database server is not encrypted or decrypted. The connection fails if the database server specifies REQUIRED.

If set to 1 - Accepted, encryption is used on data sent between the driver and the database server if the database server requests or requires it.

If set to 2 - Requested, data sent between the driver and the database server is encrypted and decrypted if the database server permits it.

If set to 3 - Required, data sent between the driver and the database server must be encrypted and decrypted. The connection fails if the database server specifies REJECTED.

Default: 1 - Accepted
Encryption Types Specifies the encryption algorithms to use if Oracle Advanced Security encryption is enabled using the Encryption Level connection property.

Default: All listed encryption algorithms are selected.

Data Integrity Level Specifies a preference for the data integrity to be used on data sent between the driver and the database server. The connection fails if the database server does not have a compatible integrity algorithm.

If set to 0 - Rejected, a data integrity check on data sent between the driver and the database server is refused. The connection fails if the database server specifies REQUIRED.

If set to 1 - Accepted, a data integrity check can be made on data sent between the driver and the database server. Data integrity is used if the database server requests or requires it.

If set to 2 - Requested, the driver enables a data integrity check on data sent between the driver and the database server if the database server permits it.

If set to 3 - Required, a data integrity check must be performed on data sent between the driver and the database server. The connection fails if the database server specifies REJECTED.

See "Encryption and Data Integrity" for more information.

Default: 1 - Accepted
Data Integrity Types Determines the method the driver uses to protect against attacks that intercept and modify data being transmitted between the client and server. You can enable data integrity protection without enabling encryption.

If multiple values are specified and Oracle Advanced Security data integrity is enabled using the Data Integrity Level option, the database server determines which algorithm is used based on how it is configured.

Default: MD5, SHA1, SHA256, SHA384, SHA512

On the Advanced Security tab, you can configure LDAP settings as well. To specify values for the LDAP options, click LDAP. The LDAP Configuration dialog box appears.

Figure 2. LDAP Configuration tab

LDAP Configuration tab

Connection Options: LDAP Configuration Description
LDAP Encryption Method

Determines whether data is encrypted and decrypted when transmitted over the network between the driver and LDAP server.

If set to 0 - No Encryption, data is neither encrypted nor decrypted.

If set to 1 - SSL, data is encrypted using TLS/SSL. If the LDAP server does not support TLS/SSL, the connection fails and the driver throws an exception.

Default: 0 - No Encryption
LDAP Crypto Protocol Version Specifies a cryptographic protocol or comma-separated list of cryptographic protocols that can be used when TLS/SSL encryption is enabled for connections to the LDAP server (LDAPEncryptionMethod=1).

Default: TLSv1.3,TLSv1.2

LDAP Validate Server Certificate Determines whether the driver validates the certificate sent by the server when TLS/SSL encryption is enabled for connections to the LDAP server (LDAPEncryptionMethod=1).

Default:1
LDAP Trust Store Specifies the absolute path to the truststore file used when TLS/SSL encryption is enabled for connections to the LDAP server (LDAPEncryptionMethod=1).

Default: No default value
LDAP Key Store Specifies the absolute path to the keystore file used when TLS/SSL encryption is enabled for connections to the LDAP server (LDAPEncryptionMethod=1).

Default: No default value

If you have finished configuring your driver, proceed to Step 6 in "Data source configuration through a GUI." Optionally, you can further configure your driver by clicking on the following tabs. The following sections provide details on the fields specific to each configuration tab:

  • General tab allows you to configure options that are required for creating a data source.
  • Advanced tab allows you to configure advanced behavior.
  • Security tab allows you to specify security data source settings.
  • Performance tab allows you to specify performance data source settings.
  • Failover tab allows you to specify failover data source settings.
  • Pooling tab allows you to specify connection pooling settings.
  • Bulk tab allows you to specify data source settings for DataDirect Bulk Load.
  • Client Monitoring tab allows you to specify additional data source settings.