Set Up Oracle HTTP Server Authentication

Create an Oracle HTTP Server record in order to authenticate to an Oracle HTTP server running on a Windows or Unix host, and scan it for compliance. For Windows hosts, Windows authentication is required so you'll also need a Windows record for the host running the server. For Unix hosts, Unix authentication is required so you'll also need a Unix record for the host running the server.

This record type is only available in accounts with PC or SCA, and is only supported for compliance scans.

Which technologies are supported?

For the most current list of supported authentication technologies and the versions that have been certified for VM and PC by record type, please refer to the following article: 

Authentication Technologies Matrix

How do I get started?

- Go to Scans > Authentication.

- Check that you already have a record defined for each host running an Oracle HTTP server. For Windows hosts, a Windows record is required. For Unix hosts, a Unix record is required.

- Create an Oracle HTTP Server record for the same host (IP). Go to New > Applications > Oracle HTTP Server.

Note: If the Network Support feature is enabled, then the Windows/Unix record must have the same network selected as the Oracle HTTP Server record.

Tell me about user permissionsTell me about user permissions

Managers can add authentication records.

Unit Managers must be granted these permissions:
- Manage PC module / Manage SCA module
- Create/edit authentication records/vaults

Windows/Unix Configuration

You’ll need to tell us the home path where the Oracle HTTP Server is installed. Then enter the full directory path where domains are configured (required for Oracle HTTP Server 12c and above), the full path where instances are configured (required for Oracle HTTP Server 11g), and the instance name you want to authenticate to. Leave the instance name empty to auto discover the instances.

Quick Links

Why use host authentication