1 Copyright 2013, Oracle and/or its affiliates. All rights reserved.

Insert Information Protection Policy Classification from Slide 12

Setting Host Credentials in

Enterprise Manager 12c
Rachel Bridden
Principal Support Analyst

Program Agenda
What are Host Credentials?
The Host Credentials Created by Agent Deployment
Why set Host Preferred Credentials
How to Set and Test the Host Credentials
The Host Credential User
Summary

3 Copyright 2013, Oracle and/or its affiliates. All rights reserved.

What are Host Credentials

Host Credentials are an encrypted username/password combination,

used to access the host machine

Host credentials are mandatory for any kind of job in Enterprise
Manager including Database Jobs
Host credentials are presented when host access is required

The Host Credentials Created by Agent

Deployment
Host named credentials are created and used when the agent is

deployed for the first time on a host.

The credentials which were created for agent deployment are saved as

global named credentials

They are not set as preferred credentials by default
The host named credentials, can be set as preferred credentials.

Why Set Host Preferred Credentials?

Not used for automatic host access
List of named credentials presented could be large
Setting preferred credentials, associates a named credential with a host
Choice of Privileged Host or Normal Host

How to Set and Test Host Credentials

Setup/security/named credential/click on 'create'/ choose credential

type 'host' or
Setup/security/Preferred credentials/highlight <host>/manage
credentials.
Test the credentials by highlighting the host and clicking on Test
root.sh needs to have been run from the agent $ORACLE_HOME

otherwise the error (Failed to launch process:Error:NMO not setuidroot will be generated (Unix only)

Demo

The Host Credential User

What user can be set for the Host Credentials?
Privileged User for example root or Windows Administrator
Normal User for example oracle
A windows user set for the host credentials must have log on as a

batch job and may need access on c:\windows\system32\cmd on some

versions of windows
User with privilege delegation (eg. Sudo privilege user)
User authenticated by key/private key pair (ssh key named credentials)

Summary
Host credentials need to be supplied for any operation which needs to log into the

host
Host credentials are mandatory for jobs
The Host credentials can be saved as a named credential
The host named credential can be set as a preferred credential to make access to
a host easier
The user set against the host credential can be a privileged or a normal user.
The user set in the host credentials must have the correct privileges to perform the
requested task
User set in host credentials can specify different run privilege (sudo, powerbroker)
User set in host credentials can be authenticated by ssh key based credentials

References
Note: 1369907.1 Understanding Host Credentials in 12C Cloud Control
Note: 1551792.1 How to grant access to Named Credentials to EM Administrators?
Note: 1530975.1 Testing Host Credentials in Custom Mode in EM Cloud Control 12c fails

with ERROR: Execution failed due to binary missing or permission issues

Note: 1580249.1 Creating a Host SSH Credential Set for a Database Host in Enterprise

Manager 12c Cloud Control

Note: 1453530.1 How to set SSH-key Named Credential as preferred credential

Note: 362384.1 Host Credentials: How to Configure the Operating System User on Windows

to be Used for Host Credentials in Grid Control or dbconsole

Note: 761863.1 Host Credentials: How to Configure Privilege Delegation Provider Settings
('Run As' / Profile Options) For a Host in the Grid Console
Note: 789261.1 How to use Sudo Privilege Delegation Provider Settings When Executing

Grid Control Jobs