SL8500 - SLC/ SLConsole 6.25 and below - Password Requirements, Logging and Generic Security Questions and Answers (Doc ID 1640445.1)

Last updated on NOVEMBER 27, 2022

Applies to:

Purpose

Answers to customers questions with regard to security on SLC 6.25 and below. This list is by no means exhaustive.

Password Requirements: Minimum Age ? After how many hours/days can a password be changed ?
Password Requirements: Maximum Age ? When does the password needs to be changed ? What is the lifetime of a password?
Password Requirements: Lockout threshold ? How many logon attempts per userid?
Logging enabled ? Can we track successful and unsuccessful logon attempts? Can we track actions done by administrators?
And if log enabled, What is the log retention ? How long are the individual logon entries available within the log?
Where can I find the network settings ?
What are the protecting resources ?

We have some userids defined (apparently only “Permanent” userids):
Admin, advsrv, eng, mfg, oem, remote, service, test: seems ALL to be privileged Userids.
Root (idem above + RootOnlyUtilities): What extra permissions are available with RootOnlyUtilities, which Utilities?

Is a password history active of the SLConsole
Do we have encryption for Data Transmission?
Do we have encryption for File/Database Storage?
Is an antivirus active and what are the Product vendor recommended exclusions ?
 

Questions and Answers

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.