ADD CREDENTIALSTORE goldengate 12c

The ADD CREDENTIALSTORE is a new command in Oracle GoldenGate 12c and the default location of the credential store is “$GG_HOME/dircrd” directory of the GoldenGate software home. Before 12c to hide the passwords from param files we need to encrypt the passwords and place them in all param files

Check here for: How to encrypt passwords before 12c

Let’s add a user to credential store

GGSCI (oradev01) 3> DBLOGIN USERID GGADMIN, PASSWORD xxxxx

Successfully logged into database.

GGSCI (oradev01 as GGADMIN@testdb) 4> ADD CREDENTIALSTORE

Credential store created in ./dircrd/.

GGSCI (oradev01 as GGADMIN@testdb) 5> ALTER CREDENTIALSTORE ADD USER GGADMIN ALIAS ggadmin

Password:

Credential store in ./dircrd/ altered.

Now check the login with newly created alias name……..

GGSCI (oradev01 as GGADMIN@testdb) 6> dblogin useridalias ggadmin

Successfully logged into database.

oradev01:testdb:/opt/oracle/GG/home $ cd dircrd

oradev01:testdb:/opt/oracle/GG/home/dircrd $ ls -lrth

total 4.0K

-rw-r----- 1 oracle dba 517 Feb 22 22:55 cwallet.sso

From above we see that Auto Login wallet has been created

To verify:

GGSCI (oradev01) 1>  INFO CREDENTIALSTORE

Reading from ./dircrd/:

Default domain: OracleGoldenGate

  Alias: ggadmin

  Userid: GGADMIN

GGSCI (oradev01 as GGADMIN@testdb) 1> edit params mgr
PORT 7809
USERIDALIAS ggadmin
PURGEOLDEXTRACTS /opt/oracle/GG/RT, USECHECKPOINTS

NOTE: "ggadmin" in param file is case sensitive

UPDATE Password:

In any company we will change the passwords on regular basis due to security and when you change the GGADMIN password then your Extract/pump/replicat will go ABENDED so when ever you change the password for ggadmin then you also need to update the credentialstore password too

if password modified then perform below steps to update:

GGSCI (oradev01) 1> dblogin useridalias ggadmin

ERROR: Unable to connect to database using user GGADMIN. Please check privileges.

Unable to initialize database connection because of error ORA-01017: invalid username/password; logon denied.

GGSCI (oradev01) 2> alter credentialstore replace user GGADMIN alias ggadmin

Password:

Credential store in ./dircrd/ altered.

GGSCI (oradev01) 3> info credentialstore

Reading from ./dircrd/:

Default domain: OracleGoldenGate

  Alias: ggadmin

  Userid: GGADMIN

GGSCI (oradev01) 4> dblogin useridalias ggadmin

Successfully logged into database.