Oracle GoldenGate - ADD CREDENTIALSTORE Command

 Today, lets dive into  ADD CREDENTIALSTORE command in Oracle GoldenGate. This command is a game-changer, making it easier and more secure to manage user credentials. No more plain-text passwords cluttering your parameter files – let's get those credentials encrypted and safely stored!

ADD CREDENTIALSTORE Command

The ADD CREDENTIALSTORE command is used to create a credential store, which securely manages user IDs and their encrypted passwords. This way, your Oracle GoldenGate processes can communicate with the local database without exposing sensitive information. This feature was introduced in Oracle GoldenGate 12c, and by default, the credential store is located in the $GGHOME/dircrd directory.

Lets add a user to credential-store 

Let’s walk through the steps to add a user to the credential store.

Step 1: Log into the Database & Create the Credential Store

First, log into the database using DBLOGIN.

GGSCI (orahelp.blogger.com) 1> DBLOGIN USERID gguser, PASSWORD ****
Successfully logged into database.

GGSCI (orahelp.blogger.com) 2> ADD CREDENTIALSTORE
Credential store created in ./dircrd/.

Step 2: Add the User to the Credential-store and verify

GGSCI (orahelp.blogger.com) 3> ALTER CREDENTIALSTORE ADD USER gguser ALIAS gguser
Password:
Credential store in ./dircrd/ altered.


GGSCI (orahelp.blogger.com) 4> DBLOGIN USERIDALIAS gguser
Successfully logged into database.

Step 3: Validate the directory contents

Let’s take a look at the credential store directory to see the auto-login wallet that has been created.

 $ cd /u01/app/gghome/dircrd
 $ ls -ltr

-rw-r-- 1 oracle dba 517 Jun 02 09:55 cwallet.sso

Step 4: Verify the Credential Store Information using ggsci prompt

GGSCI (orahelp.blogger.com) 5> INFO CREDENTIALSTORE

Reading from ./dircrd/:

Default domain: OracleGoldenGate
Alias: gguser
Userid: gguser

Wrapping up

 You’ve securely added a user to the Oracle GoldenGate credential store, keeping your credentials encrypted and safe. This not only enhances security but also simplifies your parameter files by removing plain-text passwords. Isn’t that neat? 

Stay tuned for more features to make your Oracle GoldenGate experience even smoother. 

Thank you for reading! 

Happy replicating!

Regards,

Nikhil