SecureAnyCloud
Deployment guide

Oracle Database 21c Express on Windows

Overview

Oracle Database 21c Express Edition (XE) is a free, resource-limited edition that suits development, testing and small production workloads. It provides the same core SQL, PL/SQL and JSON capabilities as the full Oracle Database.

This SecureAnyCloud AMI from the AWS Marketplace runs Oracle Database 21c XE on Windows Server with a preconfigured database that starts automatically on boot.

What you get:

  • Oracle Database 21c Express Edition (XE) 21.3.0.0.0 installed on Windows Server
  • A preconfigured ORCL database instance that starts automatically on boot
  • Oracle Listener preconfigured on port 1521
  • Oracle administration utilities on the Desktop
  • A SQL*Plus shortcut on the Desktop for command-line database access
  • Randomly generated SYSTEM database user credentials on the Desktop
  • 24/7 SecureAnyCloud support with guaranteed 24 hour response SLA

Prerequisites

Before you launch this AMI, make sure you have:

  • An active AWS account
  • An active subscription to the Oracle Database 21c Express on Windows listing on AWS Marketplace
  • An EC2 key pair for decrypting the Windows Administrator password
  • A Remote Desktop (RDP) client application
  • Familiarity with EC2 instance management

Recommended instance type: m5.large (2 vCPU, 8 GB RAM) or larger.

The minimum requirements are 1 vCPU, 1 GB RAM and 30 GB of disk space. Oracle Database on Windows benefits significantly from additional memory for production workloads.

1

Launch the AMI

  • Open the AWS Marketplace and search for "Oracle Database 21c Express Windows SecureAnyCloud".
  • Click Continue to Subscribe, accept the terms, then click Continue to Configuration.
  • Select your preferred Region and Software Version.
  • Click Continue to Launch.
  • Choose Launch through EC2 for full control over instance configuration.
  • Select your instance type (m5.large recommended).
  • Configure storage: 30 GB gp3 minimum.
  • Configure your Security Group with the inbound rules listed below.
  • Port 3389 (TCP), source: your IP: Remote Desktop (RDP) access
  • Port 1521 (TCP), source: your IP: Oracle Database Listener port

Important: Restrict both ports to your IP or trusted networks only. Do not open RDP or the Oracle Listener port to the public internet.

Select your EC2 key pair and launch the instance.

2

Retrieve the Administrator Password

  • Wait for the instance to reach 2/2 status checks and the Running state.
  • In the EC2 Console, select your instance.
  • Click Actions > Security > Get Windows password.
  • Click Browse and upload the key pair (.pem file) you selected during launch.
  • Click Decrypt password.
  • Copy the decrypted Administrator password.

Important: The Windows password can take up to 15 minutes after launch to become available. If the console says the password is not yet available, wait and try again.

3

Connect via Remote Desktop (RDP)

  • Open your Remote Desktop client application.
  • Enter the public IP address of your EC2 instance as the PC name.
  • Click Add or Connect.
  • When prompted for credentials, enter Username: Administrator and Password: the decrypted password from the previous step.
  • If a certificate warning appears, accept it and click Continue.

The Windows Server desktop opens, with the Oracle Database utilities available.

4

Access SQL*Plus

SQL*Plus has a shortcut on the Desktop. Double-click the SQL Plus icon to open it.

When prompted, log in with the SYSTEM credentials:

  • Username: SYSTEM
  • Password: see the oracle-credentials file on the Desktop

Alternatively, open a Command Prompt and run:

sqlplus / as sysdba
5

Connect Remotely with SQL Developer

To connect from an external tool such as SQL Developer on your local machine, enter these connection settings:

  • Database Type: Oracle
  • Authentication Type: Default
  • Username: SYSTEM
  • Password: from the oracle-credentials file on the Desktop
  • Connection Type: Basic
  • Hostname: your instance public IP
  • Port: 1521
  • Service Name: orcl.us.oracle.com

Server Components

  • Oracle Database 21c XE: version 21.3.0.0.0
  • Windows Server: see the AMI description for the version

Filesystem Layout

  • C: the system drive, which holds Windows Server and the Oracle Database installation

Managing the Oracle Database Service

The Oracle Database service and the ORCL instance start automatically on boot. You can manage the service from Windows Services or the command line.

Check service status in Windows Services:

  • Press Win + R, type services.msc and press Enter.
  • Find the Oracle Database service (OracleServiceORCL).
  • Confirm that the status shows Running.

Stop the database service:

net stop OracleServiceORCL

Start the database service:

net start OracleServiceORCL

Stop the Oracle Listener:

lsnrctl stop

Start the Oracle Listener:

lsnrctl start

Scripts and Log Files

  • oracle-credentials (Desktop): Oracle Database SYSTEM user credentials

Troubleshooting

Cannot connect via RDP

  • Verify that the instance has reached 2/2 status checks in the EC2 console.
  • Confirm that your security group allows inbound TCP port 3389 from your IP.
  • Make sure you are using the correct Administrator password, and decrypt it again if needed.
  • Wait at least 15 minutes after launch for the password to become available.

Oracle Database service is not running

  • Open Windows Services (services.msc) and check the OracleServiceORCL status.
  • Try starting the service: net start OracleServiceORCL
  • Check the Windows Event Viewer for Oracle-related errors.
  • Verify that the C: drive has enough free disk space.

Cannot connect remotely on port 1521

  • Verify that the Oracle Listener is running: lsnrctl status
  • Confirm that your security group allows inbound TCP port 1521 from your IP.
  • Check that Windows Firewall allows port 1521.
  • Test connectivity: telnet <instance-ip> 1521

SQL*Plus connection fails

  • Verify that the OracleServiceORCL service is running.
  • Check the oracle-credentials file on the Desktop for the correct password.
  • Try connecting as sysdba: sqlplus / as sysdba

Security Recommendations

  • Restrict port access: allow RDP (3389) and the Oracle Listener (1521) only from trusted IP addresses.
  • Change the Administrator password: replace the default Windows password after first login.
  • Change default database passwords: update the SYSTEM and SYS user passwords immediately.
  • Use strong passwords: make sure all passwords meet complexity requirements.
  • Enable Windows Firewall rules: verify that only necessary ports are open.
  • Enable Oracle auditing: configure Oracle Database auditing to track access and changes.
  • Encrypt connections: configure Oracle Net Services to use SSL/TLS encryption.
  • Keep the system updated: apply Windows Updates and Oracle Critical Patch Updates regularly.
  • Disable unused Oracle services: stop and disable any Oracle services you do not need.

Support

If you run into any issues with this product, contact SecureAnyCloud support:

  • Email: sales@secureanycloud.com
  • Website: secureanycloud.com
  • Support hours: 24/7 with guaranteed 24 hour response SLA

Deploy on AWS

Launch Oracle Database 21c Express on Windows with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com