Oracle database 11g R2 | Issues with accessing enterprise manager | ssl_error_weak_server_cert_key

Hi guys

There is a problem with accessing the Oracle enterprise manager for 11g R2. After a default installation, the EM console will not even load in Internet explorer, while recent versions of firefox will show an error like following:

An error occurred during a connection to FQDN 1158. The server certificate included a public key that was too weak. (Error code: ssl_error_weak_server_cert_key)

This is due to the SSL certificate that used for securing the enterprise management console, if you are not using the database at a production environment, you can disable the secure mode and get the enterprise manager online with minimum efforts.

Please follow the instructions as given below

From an elevated command prompt

set ORACLE_UNQNAME=DATABASENAME

Issue the following command

emctl unsecure dbconsole

(Check the below image for more clarity)

dbconsole_http_change

The above exercise restarts the dbconsole service and you should able to access the enterprise manager without any issues.

Side note: Should you allow DBConsole (Enterprise Manager) & other Oracle services start automatically?

Allowing dbconsole & Oracle services starting with each restart of your laptop or desktop boxes having standard hardware configurations would be very displeasing experience. Oracle services require resources(true) and they definitely take much more time to start up and be online against most of other Windows services.

If you have a box that has barely 4GB memory and processor from an old generation, I suggest you to change the startup method to “Manual” from automatic immediately after the installation. Well, your call :)

Below find the Oracle services for which you can safely change the startup mode as “Manual”

  1. OracleDBConsole<database name> (Aka Enterprise manager, allows you to change system wide configurations, setup backups etc)
  2. OracleMTSRecoveryService (Microsoft Transaction Server, read more here at http://docs.oracle.com/cd/E11882_01/win.112/e26104/using.htm#NTMTS001)
  3. OracleOraDb11g_home1TNSListener (Oracle listener service, mandatory)
  4. OracleService<database name>(Oracle database service)

Once the database configurations are made, you are hardly going to use enterprise manager regularly. That means you don’t even have to start the DBConsole service every time while you restart the database service.

Oracle default Services

I hope the above guidelines help you to save much of the limited resources and let you use your box more effectively while the Oracle services are running.

for windows7bugs

rajesh

 

 

2 thoughts on “Oracle database 11g R2 | Issues with accessing enterprise manager | ssl_error_weak_server_cert_key

    1. Always remember, the workaround with security will cost you more than the ease of getting stuffs done. Unless it is purely learning/TEST instance I suggest you to check with Oracle for a patch to address the issue, rather than disabling it using the provided hack.

      regards,

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.