SecureAnyCloud
Deployment guide

Oracle Database 12.2 Standard on Windows

Overview

Oracle Database 12c Release 2 Standard Edition provides core relational database functionality that suits departmental and workgroup applications in a Windows environment.

This SecureAnyCloud AMI from the AWS Marketplace delivers Oracle Database 12c Standard Edition (12.2.0.1) on Windows Server, preinstalled and configured. This guide walks you through deployment and configuration.

What you get:

  • Oracle Database 12c Standard Edition (12.2.0.1) installed on Windows Server
  • A preconfigured ORCL database instance that starts automatically on boot
  • Oracle Listener preconfigured on port 1521
  • Oracle administration utilities on the Desktop
  • A SQL*Plus shortcut on the Desktop for command-line database access
  • Randomly generated SYSTEM database user credentials on the Desktop
  • 24/7 SecureAnyCloud support with a guaranteed 24-hour response SLA

Prerequisites

Before you launch this AMI, make sure you have:

  • An active AWS account
  • An active subscription to the Oracle Database 12.2 Standard on Windows listing on AWS Marketplace
  • An EC2 key pair for decrypting the Windows Administrator password
  • A Remote Desktop (RDP) client application
  • Familiarity with EC2 instance management

Recommended instance type: m5.large (2 vCPU, 8 GB RAM) or larger. The minimum requirements are 1 vCPU, 1 GB RAM and 30 GB of disk space, but Oracle Database on Windows benefits significantly from additional memory for production workloads.

1

Launch the AMI

  • Open the AWS Marketplace and search for "Oracle Database 12.2 Standard Windows SecureAnyCloud".
  • Choose Continue to Subscribe, accept the terms, then choose Continue to Configuration.
  • Select your preferred Region and Software Version.
  • Choose Continue to Launch.
  • Choose Launch through EC2 for full control over the instance configuration.
  • Select your instance type (m5.large is recommended).
  • Configure storage with a minimum of 30 GB gp3.
  • Configure your Security Group with the following inbound rules:

Port 3389, protocol TCP, source Your IP: Remote Desktop (RDP) access.

Port 1521, protocol TCP, source Your IP: Oracle Database Listener port.

Important: Restrict both ports to your IP or trusted networks only. Do not open RDP or the Oracle Listener port to the public internet.

  • Select your EC2 key pair and launch the instance.
2

Retrieve the Administrator Password

  • Wait for the instance to reach 2/2 status checks and the Running state.
  • In the EC2 console, select your instance.
  • Choose Actions > Security > Get Windows password.
  • Choose Browse and upload the key pair (.pem file) you selected during launch.
  • Choose Decrypt password.
  • Copy the decrypted Administrator password.

Important: The Windows password can take up to 15 minutes after launch to become available. If you see a message that the password is not yet available, wait and try again.

3

Connect via Remote Desktop (RDP)

  • Open your Remote Desktop client application.
  • Enter the public IP address of your EC2 instance as the PC name.
  • Choose Add or Connect.
  • When prompted for credentials, enter the following:
  • Username: Administrator
  • Password: The decrypted password from the previous step.
  • If a certificate warning appears, accept it and choose Continue.

The Windows Server desktop opens, with the Oracle Database utilities available.

4

Access SQL*Plus

SQL*Plus is available as a shortcut on the Desktop. Double-click the SQL Plus icon to open it.

When prompted, log in with the SYSTEM credentials:

  • Username: SYSTEM
  • Password: See the oracle-credentials file on the Desktop.

Alternatively, open a Command Prompt and run:

sqlplus / as sysdba
5

Connect Remotely with SQL Developer

To connect to the database from an external tool such as SQL Developer on your local machine, use the following connection settings:

  • Database Type: Oracle
  • Authentication Type: Default
  • Username: SYSTEM
  • Password: From the oracle-credentials file on the Desktop
  • Connection Type: Basic
  • Hostname: Your instance public IP
  • Port: 1521
  • Service Name: orcl.us.oracle.com

Server Components

Oracle Database 12.2 Standard: version 12.2.0.1.

Windows Server: see the AMI description for the version.

Filesystem Layout

The C: drive is the system drive. It holds Windows Server and the Oracle Database installation.

Managing the Oracle Database Service

The Oracle Database service and the ORCL instance start automatically on boot. You can manage the service from Windows Services or the command line.

Check the service status in Windows Services:

  • Press Win + R, type services.msc and press Enter.
  • Find the Oracle Database service (OracleServiceORCL).
  • Confirm that the status shows Running.

Stop the database service:

net stop OracleServiceORCL

Start the database service:

net start OracleServiceORCL

Stop the Oracle Listener:

lsnrctl stop

Start the Oracle Listener:

lsnrctl start

Scripts and Log Files

The oracle-credentials file is on the Desktop. It holds the Oracle Database SYSTEM user credentials.

Oracle Environment and Paths

The Oracle Database installation uses the following key directories and environment variables:

  • ORACLE_HOME: D:\app\oracle\product\\dbhome_1
  • ORACLE_BASE: D:\app\oracle
  • ORACLE_SID: ORCL
  • TNS_ADMIN: %ORACLE_HOME%\network\admin
  • Data files: D:\app\oracle\oradata\ORCL
  • Recovery area: D:\app\oracle\fast_recovery_area
  • Alert log: D:\app\oracle\diag\rdbms\orcl\ORCL\trace\alert_ORCL.log

Open a command prompt with the Oracle environment:

set ORACLE_HOME=D:\app\oracle\product\<version>\dbhome_1 set PATH=%ORACLE_HOME%\bin;%PATH% set ORACLE_SID=ORCL

SQL*Plus Database Operations

Check the database status:

sqlplus / as sysdba SQL> SELECT INSTANCE_NAME, STATUS, DATABASE_STATUS FROM V$INSTANCE; INSTANCE_NAME STATUS DATABASE_STATUS ---------------- ------------ ----------------- ORCL OPEN ACTIVE

Check listener status and registered services:

lsnrctl status Services Summary... Service "orcl.us.oracle.com" has 1 instance(s). Instance "ORCL", status READY, has 1 handler(s) for this service...

Shut down and start up the database:

sqlplus / as sysdba SQL> SHUTDOWN IMMEDIATE; SQL> STARTUP;

View the database size:

SQL> SELECT SUM(BYTES)/1024/1024/1024 AS SIZE_GB FROM DBA_DATA_FILES;

Create a new tablespace:

SQL> CREATE TABLESPACE users_data DATAFILE 'D:\app\oracle\oradata\ORCL\users_data01.dbf' SIZE 500M AUTOEXTEND ON NEXT 100M MAXSIZE 5G;

Windows Firewall Configuration

In addition to EC2 security groups, Windows Firewall may need explicit rules for Oracle connectivity.

Check whether port 1521 is allowed:

netsh advfirewall firewall show rule name="Oracle Listener"

Add a firewall rule if the port is not allowed:

netsh advfirewall firewall add rule name="Oracle Listener" dir=in action=allow protocol=TCP localport=1521

Troubleshooting

Cannot connect over RDP

  • Verify that the instance has reached 2/2 status checks in the EC2 console.
  • Confirm that your security group allows inbound TCP port 3389 from your IP.
  • Make sure you are using the correct Administrator password, and decrypt it again if needed.
  • Wait at least 15 minutes after launch for the password to become available.

Oracle Database service is not running

  • Open Windows Services (services.msc) and check the OracleServiceORCL status.
  • Try starting the service: net start OracleServiceORCL
  • Check the Windows Event Viewer for Oracle-related errors.
  • Verify that enough disk space is available on the C: drive.

Cannot connect remotely on port 1521

  • Verify that the Oracle Listener is running: lsnrctl status
  • Confirm that your security group allows inbound TCP port 1521 from your IP.
  • Check that Windows Firewall allows port 1521.
  • Test connectivity: telnet <instance-ip> 1521

SQL*Plus connection fails

  • Verify that the OracleServiceORCL service is running.
  • Check the oracle-credentials file on the Desktop for the correct password.
  • Try connecting as sysdba: sqlplus / as sysdba

Security Recommendations

  • Restrict port access. Allow RDP (3389) and the Oracle Listener (1521) only from trusted IP addresses.
  • Change the Administrator password. Update the default Windows password after your first login.
  • Change the default database passwords. Update the SYSTEM and SYS user passwords immediately.
  • Use strong passwords. Make sure all passwords meet complexity requirements.
  • Review Windows Firewall rules. Verify that only the necessary ports are open.
  • Enable Oracle auditing. Configure Oracle Database auditing to track access and changes.
  • Encrypt connections. Configure Oracle Net Services to use SSL/TLS encryption.
  • Keep the system updated. Apply Windows Updates and Oracle Critical Patch Updates regularly.
  • Disable unused Oracle services. Stop and disable any Oracle services you do not need.

Support

If you have any issues with this product, contact SecureAnyCloud support:

  • Email: sales@secureanycloud.com
  • Website: secureanycloud.com
  • Support hours: 24/7 with a guaranteed 24-hour response SLA

Deploy on AWS

Launch Oracle Database 12.2 Standard on Windows with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com