SecureAnyCloud
Deployment guide

Oracle Database 19c Standard on Windows

Overview

Oracle Database 19c is the long-term support release of the Oracle Database. Standard Edition on Windows Server provides core relational database functionality for departmental and workgroup applications.

This guide covers deploying the SecureAnyCloud AMI for Windows Server from the AWS Marketplace. The ORCL instance and listener are preconfigured, so the database is running as soon as the instance boots.

What you get:

  • Oracle Database 19c Standard Edition 19.3.0.0.0 installed on Windows Server
  • A preconfigured ORCL database instance that starts automatically on boot
  • Oracle Listener preconfigured on port 1521
  • Oracle administration utilities on the Desktop
  • A SQL*Plus shortcut on the Desktop for command-line database access
  • Randomly generated SYSTEM database user credentials on the Desktop
  • 24/7 SecureAnyCloud support with a guaranteed 24-hour response SLA

Prerequisites

Before you launch the AMI, make sure you have:

  • An active AWS account
  • An active subscription to the Oracle Database 19c Standard on Windows listing on AWS Marketplace
  • An EC2 key pair for decrypting the Windows Administrator password
  • A Remote Desktop (RDP) client application
  • Familiarity with EC2 instance management

Recommended instance type: m5.large (2 vCPU / 8 GB RAM) or larger. The minimum requirements are 1 vCPU, 1 GB RAM and 30 GB of disk space. Oracle Database on Windows benefits significantly from additional memory for production workloads.

1

Launch the AMI

  • Go to the AWS Marketplace and search for "Oracle Database 19c Standard Windows SecureAnyCloud".
  • Click Continue to Subscribe, accept the terms, then click Continue to Configuration.
  • Select your preferred Region and Software Version.
  • Click Continue to Launch.
  • Choose Launch through EC2 for full control over instance configuration.
  • Select your instance type (m5.large recommended).
  • Configure storage: 30 GB gp3 minimum.
  • Configure your Security Group with the inbound rules listed below.
  • Select your EC2 key pair and launch the instance.

Inbound rules for the security group:

  • Port 3389, TCP, source: your IP. Remote Desktop (RDP) access.
  • Port 1521, TCP, source: your IP. Oracle Database Listener port.

Important: Restrict both ports to your IP or trusted networks only. Do not open RDP or the Oracle Listener port to the public internet.

2

Retrieve the Administrator password

  • Wait for the instance to reach 2/2 status checks and the Running state.
  • In the EC2 Console, select your instance.
  • Click Actions > Security > Get Windows password.
  • Click Browse and upload the key pair (.pem file) you selected during launch.
  • Click Decrypt password.
  • Copy the decrypted Administrator password.

Important: The Windows password can take up to 15 minutes after launch to become available. If you see a message that the password is not yet available, wait and try again.

3

Connect with Remote Desktop (RDP)

  • Open your Remote Desktop client application.
  • Enter the public IP address of your EC2 instance as the PC name.
  • Click Add or Connect.
  • When prompted for credentials, enter Administrator as the username and the decrypted password from the previous step as the Password.
  • If a certificate warning appears, accept it and click Continue.

The Windows Server desktop opens with the Oracle Database utilities available.

4

Access SQL*Plus

SQL*Plus is available as a shortcut on the Desktop. Double-click the SQL Plus icon to open it.

When prompted, log in with the SYSTEM credentials:

  • Username: SYSTEM
  • Password: in the oracle-credentials file on the Desktop

You can also open a Command Prompt and run:

sqlplus / as sysdba
5

Connect remotely with SQL Developer

To connect to the database from an external tool such as SQL Developer on your local machine, use these connection settings:

  • Database Type: Oracle
  • Authentication Type: Default
  • Username: SYSTEM
  • Password: from the oracle-credentials file on the Desktop
  • Connection Type: Basic
  • Hostname: your instance public IP
  • Port: 1521
  • Service Name: orcl.us.oracle.com

Server components

  • Oracle Database 19c Standard, version 19.3.0.0.0
  • Windows Server: see the AMI description for the version

Filesystem layout

  • C:: the system drive, with Windows Server and the Oracle Database installation

Managing the Oracle Database service

The Oracle Database service and the ORCL instance start automatically on boot. You can manage the service from Windows Services or the command line.

Check the service status in Windows Services:

  • Press Win + R, type services.msc and press Enter.
  • Find the Oracle Database service (OracleServiceORCL).
  • Confirm that the status is Running.

Stop the database service:

net stop OracleServiceORCL

Start the database service:

net start OracleServiceORCL

Stop the Oracle Listener:

lsnrctl stop

Start the Oracle Listener:

lsnrctl start

Scripts and log files

  • oracle-credentials (on the Desktop): Oracle Database SYSTEM user credentials

Oracle environment and paths

The Oracle Database installation uses these key directories and environment variables:

  • ORACLE_HOME: D:\app\oracle\product\<version>\dbhome_1
  • ORACLE_BASE: D:\app\oracle
  • ORACLE_SID: ORCL
  • TNS_ADMIN: %ORACLE_HOME%\network\admin
  • Data files: D:\app\oracle\oradata\ORCL
  • Recovery area: D:\app\oracle\fast_recovery_area
  • Alert log: D:\app\oracle\diag\rdbms\orcl\ORCL\trace\alert_ORCL.log

Open a command prompt with the Oracle environment:

set ORACLE_HOME=D:\app\oracle\product\<version>\dbhome_1 set PATH=%ORACLE_HOME%\bin;%PATH% set ORACLE_SID=ORCL

SQL*Plus database operations

Check the database status:

sqlplus / as sysdba SQL> SELECT INSTANCE_NAME, STATUS, DATABASE_STATUS FROM V$INSTANCE; INSTANCE_NAME STATUS DATABASE_STATUS ---------------- ------------ ----------------- ORCL OPEN ACTIVE

Check listener status and registered services:

lsnrctl status Services Summary... Service "orcl.us.oracle.com" has 1 instance(s). Instance "ORCL", status READY, has 1 handler(s) for this service...

Shut down and start up the database:

sqlplus / as sysdba SQL> SHUTDOWN IMMEDIATE; SQL> STARTUP;

View the database size:

SQL> SELECT SUM(BYTES)/1024/1024/1024 AS SIZE_GB FROM DBA_DATA_FILES;

Create a new tablespace:

SQL> CREATE TABLESPACE users_data DATAFILE 'D:\app\oracle\oradata\ORCL\users_data01.dbf' SIZE 500M AUTOEXTEND ON NEXT 100M MAXSIZE 5G;

Windows Firewall configuration

In addition to EC2 security groups, Windows Firewall may need explicit rules for Oracle connectivity.

Check whether port 1521 is allowed:

netsh advfirewall firewall show rule name="Oracle Listener"

Add a firewall rule if missing:

netsh advfirewall firewall add rule name="Oracle Listener" dir=in action=allow protocol=TCP localport=1521

Troubleshooting

Cannot connect over RDP

  • Verify that the instance has reached 2/2 status checks in the EC2 console.
  • Confirm that your security group allows inbound TCP port 3389 from your IP.
  • Make sure you are using the correct Administrator password. Decrypt it again if needed.
  • Wait at least 15 minutes after launch for the password to become available.

Oracle Database service is not running

  • Open Windows Services (services.msc) and check the status of OracleServiceORCL.
  • Try starting the service: net start OracleServiceORCL
  • Check the Windows Event Viewer for Oracle-related errors.
  • Verify that the C: drive has sufficient free disk space.

Cannot connect remotely on port 1521

  • Verify that the Oracle Listener is running: lsnrctl status
  • Confirm that your security group allows inbound TCP port 1521 from your IP.
  • Check that Windows Firewall allows port 1521.
  • Test connectivity: telnet <instance-ip> 1521

SQL*Plus connection fails

  • Verify that the OracleServiceORCL service is running.
  • Check the oracle-credentials file on the Desktop for the correct password.
  • Try connecting as sysdba: sqlplus / as sysdba

Security notes

  • Restrict port access. Allow RDP (3389) and Oracle Listener (1521) only from trusted IP addresses.
  • Change the Administrator password. Replace the default Windows password after your first login.
  • Change default database passwords. Update the SYSTEM and SYS user passwords immediately.
  • Use strong passwords. Make sure all passwords meet complexity requirements.
  • Review Windows Firewall rules. Verify that only necessary ports are open.
  • Enable Oracle auditing. Configure Oracle Database auditing to track access and changes.
  • Encrypt connections. Configure Oracle Net Services to use SSL/TLS encryption.
  • Keep the system updated. Apply Windows Updates and Oracle Critical Patch Updates regularly.
  • Disable unused Oracle services. Stop and disable any Oracle services you do not need.

Support

If you have a problem with this product, contact SecureAnyCloud support:

  • Email: sales@secureanycloud.com
  • Website: secureanycloud.com
  • Support hours: 24/7, with a guaranteed 24-hour response SLA

Deploy on AWS

Launch Oracle Database 19c Standard on Windows with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com