If your host server has a 32-bit or 64-bit architecture, ensure the corresponding directory exists; if not, create it manually.
On Linux:
|
Parameter |
Definition |
|
[32 bit] |
$ORACLE_BASE/extapi/32/hsm[/hsm-manufacturer/library-version/] |
|
[64 bit] |
$ORACLE_BASE/extapi/64/hsm[/hsm-manufacturer/library-version/] |
List of Parameters and Definitions
Make ownership and permissions on the above directory as:
owner=oracle; group=oinstall; permissions=775.
On Windows:
|
Parameter |
Definition |
|
[32 bit] |
C:\oracle\extapi\32\hsm[\hsm-manufacturera\library-version\] |
|
[64 bit] |
C:\oracle\extapi\64\hsm[\hsm-manufacturera\library-version\] |
List of Parameters and Definitions
Make sure the 'oracle' user can access the above Windows folder.
-
To set folder ownership, use Command Prompt (Admin).
takeown /F "C:\oracle\extapi\64\hsm\utimaco\6.1.1" /A
-
Then use ICACLS to assign ownership.
icacls "C:\oracle\extapi\64\hsm\utimaco\6.1.1" /setowner oracle
-
Set Permissions.
icacls "C:\oracle\extapi\64\hsm\utimaco\6.1.1" /grant oracle:(OI)(CI)F oinstall:(OI)(CI)M Users:(OI)(CI)R
Valid directory examples on 64-bit are:
|
Parameter |
Definition |
|
Linux |
/opt/oracle/extapi/64/hsm/utimaco/6.1.1/ |
|
Windows |
C:\oracle\extapi\64\hsm\utimaco\6.1.1\ |
List of Parameters and Definitions
Please copy the Utimaco PKCS#11 (cs_pkcs11_R3.dll or libcs_pkcs11_R3.so) library for your host architecture to the folder mentioned above to allow the Oracle database to access the cryptographic library.
Oracle Database should now be able to access the Utimaco PKCS#11 HSM provider.