SecureAnyCloud
Deployment guide

Oracle Database 21c Standard on Windows

Overview

Oracle Database 21c Standard Edition on Windows Server provides core relational database functionality with recent innovations, including blockchain tables and the native JSON datatype.

This guide shows how to deploy and configure it from a SecureAnyCloud AMI on the AWS Marketplace. The AMI includes a preconfigured ORCL instance that starts automatically on boot.

What you get:

  • Oracle Database 21c Standard Edition 21.3.0.0.0 installed on Windows Server
  • A preconfigured ORCL database instance that starts automatically on boot
  • An Oracle Listener preconfigured on port 1521
  • Oracle administration utilities available on the Desktop
  • A SQL*Plus shortcut on the Desktop for command-line database access
  • Randomly generated SYSTEM database user credentials on the Desktop
  • 24/7 SecureAnyCloud support with a guaranteed 24-hour response SLA

Prerequisites

Before you launch the AMI, make sure you have:

  • An active AWS account
  • An active subscription to the Oracle Database 21c Standard on Windows listing on AWS Marketplace
  • An EC2 key pair for decrypting the Windows Administrator password
  • A Remote Desktop (RDP) client application
  • Familiarity with EC2 instance management

Recommended instance type: m5.large (2 vCPU, 8 GB RAM) or larger. The minimum requirements are 1 vCPU, 1 GB RAM and 30 GB of disk space. Oracle Database on Windows benefits significantly from additional memory for production workloads.

1

Launch the AMI

  • Open the AWS Marketplace and search for "Oracle Database 21c Standard Windows SecureAnyCloud"
  • Click Continue to Subscribe, accept the terms, then click Continue to Configuration
  • Select your preferred Region and Software Version
  • Click Continue to Launch
  • Choose Launch through EC2 for full control over instance configuration
  • Select your instance type (m5.large recommended)
  • Configure storage: 30 GB gp3 minimum
  • Configure your Security Group with these inbound rules:

Port Protocol Source Purpose

3389 TCP Your IP Remote Desktop (RDP) access

1521 TCP Your IP Oracle Database Listener port

Important: Restrict both ports to your IP or trusted networks only. Never open RDP or the Oracle Listener port to the public internet.

  • Select your EC2 key pair and launch the instance
2

Retrieve the Administrator Password

  • Wait for the instance to reach 2/2 status checks and the Running state
  • In the EC2 Console, select your instance
  • Click Actions > Security > Get Windows password
  • Click Browse and upload the key pair (.pem file) you selected during launch
  • Click Decrypt password
  • Copy the decrypted Administrator password

Important: The Windows password can take up to 15 minutes after launch to become available. If a message says the password is not yet available, wait and try again.

3

Connect via Remote Desktop (RDP)

  • Open your Remote Desktop client application
  • Enter the public IP address of your EC2 instance as the PC name
  • Click Add or Connect

When prompted for credentials, enter:

  • Username: Administrator
  • Password: The decrypted password from the previous step

If prompted, accept the certificate warning and click Continue. The Windows Server desktop appears, with the Oracle Database utilities available.

4

Access SQL*Plus

The Desktop has a shortcut to the SQL*Plus utility. Double-click the SQL Plus icon to open it.

When prompted, log in with the SYSTEM credentials:

  • Username: SYSTEM
  • Password: Read it from the oracle-credentials file on the Desktop

Alternatively, open a Command Prompt and run:

sqlplus / as sysdba
5

Connect Remotely with SQL Developer

To connect from an external tool such as SQL Developer on your local machine, use these connection settings:

Setting Value

Database Type Oracle

Authentication Type Default

Username SYSTEM

Password From oracle-credentials file on Desktop

Connection Type Basic

Hostname Your instance public IP

Port 1521

Service Name orcl.us.oracle.com

Server Components

Component Version

Oracle Database 21c Standard 21.3.0.0.0

Windows Server See AMI description

Filesystem Layout

Drive Description

C: System drive with Windows Server and Oracle Database installation

Managing the Oracle Database Service

The Oracle Database service and ORCL instance are configured to start automatically on boot. Manage the service with Windows Services or the command line.

Check service status using Windows Services:

  • Press Win + R, type services.msc, and press Enter
  • Look for the Oracle Database service (OracleServiceORCL)
  • The status should show Running

Stop the database service:

net stop OracleServiceORCL

Start the database service:

net start OracleServiceORCL

Stop the Oracle Listener:

lsnrctl stop

Start the Oracle Listener:

lsnrctl start

Scripts and Log Files

File Location Description

oracle-credentials Desktop Oracle Database SYSTEM user credentials

Oracle Environment and Paths

The Oracle Database installation uses these key directories and environment variables:

Variable / Path Value

ORACLE_HOME D:\app\oracle\product\\dbhome_1

ORACLE_BASE D:\app\oracle

ORACLE_SID ORCL

TNS_ADMIN %ORACLE_HOME%\network\admin

Data files D:\app\oracle\oradata\ORCL

Recovery area D:\app\oracle\fast_recovery_area

Alert log D:\app\oracle\diag\rdbms\orcl\ORCL\trace\alert_ORCL.log

Open a command prompt with Oracle environment:

set ORACLE_HOME=D:\app\oracle\product\<version>\dbhome_1 set PATH=%ORACLE_HOME%\bin;%PATH% set ORACLE_SID=ORCL

SQL*Plus Database Operations

Check database status:

sqlplus / as sysdba SQL> SELECT INSTANCE_NAME, STATUS, DATABASE_STATUS FROM V$INSTANCE; INSTANCE_NAME STATUS DATABASE_STATUS ---------------- ------------ ----------------- ORCL OPEN ACTIVE

Check listener status and registered services:

lsnrctl status Services Summary... Service "orcl.us.oracle.com" has 1 instance(s). Instance "ORCL", status READY, has 1 handler(s) for this service...

Shutdown and startup the database:

sqlplus / as sysdba SQL> SHUTDOWN IMMEDIATE; SQL> STARTUP;

View database size:

SQL> SELECT SUM(BYTES)/1024/1024/1024 AS SIZE_GB FROM DBA_DATA_FILES;

Create a new tablespace:

SQL> CREATE TABLESPACE users_data DATAFILE 'D:\app\oracle\oradata\ORCL\users_data01.dbf' SIZE 500M AUTOEXTEND ON NEXT 100M MAXSIZE 5G;

Windows Firewall Configuration

In addition to EC2 security groups, Windows Firewall can need explicit rules for Oracle connectivity.

Check if port 1521 is allowed:

netsh advfirewall firewall show rule name="Oracle Listener"

Add a firewall rule if missing:

netsh advfirewall firewall add rule name="Oracle Listener" dir=in action=allow protocol=TCP localport=1521

Troubleshooting

Cannot connect via RDP

  • Verify the instance has reached 2/2 status checks in the EC2 console
  • Confirm your security group allows inbound TCP port 3389 from your IP
  • Ensure you are using the correct Administrator password (re-decrypt if needed)
  • Wait at least 15 minutes after launch for the password to become available

Oracle Database service is not running

  • Open Windows Services (services.msc) and check the OracleServiceORCL status
  • Try starting the service: net start OracleServiceORCL
  • Check the Windows Event Viewer for Oracle-related errors
  • Verify sufficient disk space is available on the C: drive

Cannot connect remotely on port 1521

  • Verify the Oracle Listener is running: lsnrctl status
  • Confirm your security group allows inbound TCP port 1521 from your IP
  • Check Windows Firewall allows port 1521
  • Test connectivity: telnet <instance-ip> 1521

SQL*Plus connection fails

  • Verify the OracleServiceORCL service is running
  • Check the oracle-credentials file on the Desktop for the correct password
  • Try connecting as sysdba: sqlplus / as sysdba

Security Recommendations

  • Restrict port access: Only allow RDP (3389) and Oracle Listener (1521) from trusted IP addresses
  • Change the Administrator password: Update the default Windows password after first login
  • Change default database passwords: Update the SYSTEM and SYS user passwords immediately
  • Use strong passwords: Ensure all passwords meet complexity requirements
  • Enable Windows Firewall rules: Verify only necessary ports are open
  • Enable Oracle auditing: Configure Oracle Database auditing to track access and changes
  • Encrypt connections: Configure Oracle Net Services to use SSL/TLS encryption
  • Keep the system updated: Apply Windows Updates and Oracle Critical Patch Updates regularly
  • Disable unused Oracle services: Stop and disable any Oracle services not required

Support

If you encounter any issues with this product, contact SecureAnyCloud support:

  • Email: sales@secureanycloud.com
  • Website: secureanycloud.com
  • Support hours: 24/7 with a guaranteed 24-hour response SLA

Deploy on AWS

Launch Oracle Database 21c Standard on Windows with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com