SecureAnyCloud
Deployment guide

Oracle Database Standard Edition 2 Windows

Overview

This page is the entry point for the SecureAnyCloud Hardened AMIs for Oracle Database SE2 on Windows Server listing on AWS Marketplace. The listing is a single product that offers several products and releases as separate software versions. Subscribe once, choose a version from the Software version list at launch, then open its guide below for the full setup and connection walk-through.

What you get with every version:

  • Every image is built by SecureAnyCloud on its hardened Windows Server base. It is fully patched by Windows Update at build time, with the Microsoft Security Baseline applied with Microsoft's LGPO tool.
  • Oracle Database is installed from Oracle's base release media. On the database versions, the SYS and SYSTEM passwords are generated per instance on first boot, so no default credential exists.
  • Build residue is removed and free space is wiped before capture.

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. Then choose the product and release you want in Version. Each version is a separate software version, named <product> <release> on <operating system> - <date>, for example Oracle Database 19c SE2 on Windows Server 2019 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended) and your EC2 key pair. Select a security group that opens Remote Desktop (3389) from your own network only, then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • Oracle Database: 19c on Windows Server 2019
  • Oracle Database Client: 19c on Windows Server 2019

Security model

Every version in this listing follows the same model:

  • No default login. The images contain the Oracle software only. On the database versions, each instance creates its own database on first boot and generates its own SYS, SYSTEM and PDBADMIN passwords, written to a file only Administrators can read. Oracle Database Client 19c on Windows Server 2019 holds the Oracle Database Client only, with no database, no listener and no Oracle credential. EC2Launch sets a random Administrator password on first boot. Read it with Get Windows password and your EC2 key pair. No two instances share a secret.
  • Listener on localhost, Remote Desktop only. On the database versions, the database listener is bound to 127.0.0.1, and the security group and the Windows Firewall allow Remote Desktop (3389) only. Sign in over Remote Desktop and use SQL*Plus on the instance, or tunnel to it. To accept direct client connections, first require Oracle native network encryption or TLS (TCPS) as the guide shows. Then open port 1521 in the Windows Firewall and the security group to your own networks only, never to 0.0.0.0/0. On the client versions, no Oracle process listens on any port, and the security group and the Windows Firewall allow Remote Desktop (3389) only. The client connects out to your own databases.
  • Hardened, patched Windows Server. Every update Windows Update offers is installed when the image is built. The Microsoft Security Baseline is applied with Microsoft's LGPO tool. For Oracle Database 19c SE2 on Windows Server 2019 and Oracle Database Client 19c on Windows Server 2019, the guide shows the measured report and the rules waived for EC2. Remote Desktop requires Network Level Authentication, and SMBv1 is off.
  • IMDSv2. Instance metadata requires a session token, and the Oracle processes cannot reach the instance metadata service at all.

Choose your product

Product Software version OS Guide

Oracle Database Oracle Database 19c SE2 on Windows Server 2019 Windows Server 2019 Open guide

Oracle Database Client Oracle Database Client 19c on Windows Server 2019 Windows Server 2019 Open guide

How to tell which version you launched

The version you chose appears on the instance's launch record in the EC2 console (AMI name and description) and in your AWS Marketplace subscription.

On the instance itself, C:\ProgramData\SecureAnyCloud\baseline\tool-versions.json names the product, its release and the Windows baseline. Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket in the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Their use does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened AMIs for Oracle Database SE2 on Windows Server with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS