SecureAnyCloud
Deployment guide

Oracle Database 21c Enterprise on Windows

Overview

This guide shows you how to deploy and configure Oracle Database 21c Enterprise Edition on Windows Server, using a SecureAnyCloud AMI from the AWS Marketplace. Oracle Database 21c includes blockchain tables, the native JSON datatype and AutoML capabilities.

What you get:

  • Oracle Database 21c Enterprise Edition 21.3.0.0.0 installed on Windows Server.
  • A preconfigured ORCL database instance that starts automatically on boot.
  • Oracle Listener preconfigured on port 1521.
  • Oracle administration utilities on the Desktop.
  • A SQL*Plus shortcut on the Desktop for command-line database access.
  • Randomly generated SYSTEM database user credentials on the Desktop.
  • 24/7 SecureAnyCloud support with a guaranteed 24-hour response SLA.

Prerequisites

Before you launch this AMI, make sure that you have:

  • An active AWS account.
  • An active subscription to the Oracle Database 21c Enterprise on Windows listing on AWS Marketplace.
  • An EC2 key pair for decrypting the Windows Administrator password.
  • A Remote Desktop (RDP) client application.
  • Familiarity with EC2 instance management.

Recommended instance type: m5.large (2 vCPU, 8 GB RAM) or larger. The minimum requirements are 1 vCPU, 1 GB RAM and 30 GB disk space. Oracle Database on Windows benefits significantly from additional memory for production workloads.

1

Launch the AMI

  • Go to the AWS Marketplace and search for "Oracle Database 21c Enterprise Windows SecureAnyCloud".
  • Choose Continue to Subscribe, accept the terms, then choose Continue to Configuration.
  • Select your preferred Region and Software Version.
  • Choose Continue to Launch.
  • Choose Launch through EC2 for full control over instance configuration.
  • Select your instance type (m5.large recommended).
  • Configure storage with 30 GB gp3 as the minimum.

Configure your Security Group with these inbound rules:

  • Port 3389, TCP, source: your IP. Remote Desktop (RDP) access.
  • Port 1521, TCP, source: your IP. Oracle Database Listener port.

Important: Restrict both ports to your IP or trusted networks only. Do not open RDP or the Oracle Listener port to the public internet.

Then select your EC2 key pair and launch the instance.

2

Retrieve the Administrator password

  • Wait for the instance to reach 2/2 status checks and the Running state.
  • In the EC2 Console, select your instance.
  • Choose Actions > Security > Get Windows password.
  • Choose Browse and upload the key pair (.pem file) that you selected during launch.
  • Choose Decrypt password.
  • Copy the decrypted Administrator password.

Important: The Windows password can take up to 15 minutes after launch to become available. If a message says that the password is not yet available, wait and try again.

3

Connect with Remote Desktop (RDP)

  • Open your Remote Desktop client application.
  • Enter the public IP address of your EC2 instance as the PC name.
  • Choose Add or Connect.
  • When prompted for credentials, enter these values:
  • Username: Administrator
  • Password: the decrypted password from the previous step.
  • If a certificate warning appears, accept it and choose Continue.

The Windows Server desktop opens, with the Oracle Database utilities available.

4

Access SQL*Plus

The SQL*Plus utility is available as a shortcut on the Desktop. Double-click the SQL Plus icon to open it.

When prompted, log in with the SYSTEM credentials:

  • Username: SYSTEM
  • Password: see the oracle-credentials file on the Desktop.

You can also open a Command Prompt and run:

sqlplus / as sysdba
5

Connect remotely with SQL Developer

To connect to the database from an external tool such as SQL Developer on your local machine, use these connection settings:

  • Database Type: Oracle
  • Authentication Type: Default
  • Username: SYSTEM
  • Password: from the oracle-credentials file on the Desktop
  • Connection Type: Basic
  • Hostname: your instance public IP
  • Port: 1521
  • Service Name: orcl.us.oracle.com

Server Components

  • Oracle Database 21c Enterprise: 21.3.0.0.0
  • Windows Server: see the AMI description

Filesystem Layout

  • C: the system drive, with Windows Server and the Oracle Database installation

Managing the Oracle Database service

The Oracle Database service and the ORCL instance start automatically on boot. You can manage the service with Windows Services or the command line.

Check the service status in Windows Services:

  • Press Win + R, type services.msc and press Enter.
  • Find the Oracle Database service (OracleServiceORCL).
  • Check that the status shows Running.

Stop the database service:

net stop OracleServiceORCL

Start the database service:

net start OracleServiceORCL

Stop the Oracle Listener:

lsnrctl stop

Start the Oracle Listener:

lsnrctl start

Scripts and log files

  • oracle-credentials (on the Desktop): the Oracle Database SYSTEM user credentials

Oracle environment and paths

The Oracle Database installation uses these key directories and environment variables:

  • ORACLE_HOME: D:\app\oracle\product\\dbhome_1
  • ORACLE_BASE: D:\app\oracle
  • ORACLE_SID: ORCL
  • TNS_ADMIN: %ORACLE_HOME%\network\admin
  • Data files: D:\app\oracle\oradata\ORCL
  • Recovery area: D:\app\oracle\fast_recovery_area
  • Alert log: D:\app\oracle\diag\rdbms\orcl\ORCL\trace\alert_ORCL.log

Open a command prompt with the Oracle environment:

set ORACLE_HOME=D:\app\oracle\product\<version>\dbhome_1 set PATH=%ORACLE_HOME%\bin;%PATH% set ORACLE_SID=ORCL

SQL*Plus database operations

Check the database status:

sqlplus / as sysdba SQL> SELECT INSTANCE_NAME, STATUS, DATABASE_STATUS FROM V$INSTANCE; INSTANCE_NAME STATUS DATABASE_STATUS ---------------- ------------ ----------------- ORCL OPEN ACTIVE

Check the listener status and registered services:

lsnrctl status Services Summary... Service "orcl.us.oracle.com" has 1 instance(s). Instance "ORCL", status READY, has 1 handler(s) for this service...

Shut down and start up the database:

sqlplus / as sysdba SQL> SHUTDOWN IMMEDIATE; SQL> STARTUP;

View the database size:

SQL> SELECT SUM(BYTES)/1024/1024/1024 AS SIZE_GB FROM DBA_DATA_FILES;

Create a new tablespace:

SQL> CREATE TABLESPACE users_data DATAFILE 'D:\app\oracle\oradata\ORCL\users_data01.dbf' SIZE 500M AUTOEXTEND ON NEXT 100M MAXSIZE 5G;

Windows Firewall configuration

In addition to EC2 security groups, Windows Firewall may need explicit rules for Oracle connectivity.

Check whether port 1521 is allowed:

netsh advfirewall firewall show rule name="Oracle Listener"

Add a firewall rule if one is missing:

netsh advfirewall firewall add rule name="Oracle Listener" dir=in action=allow protocol=TCP localport=1521

Troubleshooting

Cannot connect with RDP

  • Check that the instance has reached 2/2 status checks in the EC2 console.
  • Confirm that your security group allows inbound TCP port 3389 from your IP.
  • Check that you are using the correct Administrator password, and decrypt it again if needed.
  • Wait at least 15 minutes after launch for the password to become available.

The Oracle Database service is not running

  • Open Windows Services (services.msc) and check the status of OracleServiceORCL.
  • Try starting the service with net start OracleServiceORCL.
  • Check the Windows Event Viewer for Oracle-related errors.
  • Check that enough disk space is available on the C: drive.

Cannot connect remotely on port 1521

  • Check that the Oracle Listener is running with lsnrctl status.
  • Confirm that your security group allows inbound TCP port 1521 from your IP.
  • Check that Windows Firewall allows port 1521.
  • Test connectivity with telnet <instance-ip> 1521.

The SQL*Plus connection fails

  • Check that the OracleServiceORCL service is running.
  • Check the oracle-credentials file on the Desktop for the correct password.
  • Try connecting as sysdba with sqlplus / as sysdba.

Security recommendations

  • Restrict port access. Allow RDP (3389) and the Oracle Listener (1521) only from trusted IP addresses.
  • Change the Administrator password. Replace the default Windows password after your first sign-in.
  • Change the default database passwords. Update the SYSTEM and SYS user passwords immediately.
  • Use strong passwords. Make sure that all passwords meet complexity requirements.
  • Enable Windows Firewall rules. Verify that only the necessary ports are open.
  • Enable Oracle auditing. Configure Oracle Database auditing to track access and changes.
  • Encrypt connections. Configure Oracle Net Services to use SSL/TLS encryption.
  • Keep the system updated. Apply Windows Updates and Oracle Critical Patch Updates regularly.
  • Disable unused Oracle services. Stop and disable any Oracle services that you do not need.

Support

If you have any issues with this product, contact SecureAnyCloud support:

  • Email: sales@secureanycloud.com
  • Website: secureanycloud.com
  • Support hours: 24/7, with a guaranteed 24-hour response SLA

Deploy on AWS

Launch Oracle Database 21c Enterprise on Windows with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com