> For the complete documentation index, see [llms.txt](https://docs.tessell.com/tessell/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tessell.com/tessell/database-engines/tessell-for-oracle/database-connections-using-ssl-tls/windows-platform.md).

# Windows platform

This guide covers connecting to a Tessell Oracle database service over SSL/TLS on Windows using SQL\*Plus.

> **Note:** Applications connecting to the database also need to be reconfigured to enable SSL/TLS. Enabling SSL/TLS for different drivers is beyond the scope of this document.

***

## Step 1 — Obtain the SSL/TLS certificate

1. Go to **Tessell → My Services**, locate the service you want to connect to, and open its **Overview** tab.
2. Scroll to the **CA Certificate** section and download the certificate to a local directory on your Windows client.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-b3fee708d87d4a165cfc843d0b425cc6bf4cbd91%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 1 — Downloading the CA certificate from the service Overview page</em></p>

***

## Step 2 — Install the Oracle Client

Ensure the Oracle Client is installed on your Windows machine. At a minimum you need:

* `sql*plus` — for connecting to the Oracle Database
* `orapki` — for certificate wallet management

The easiest way to get all tools is via the **Oracle Universal Installer (OUI)** selecting the **Administrator** profile. You can also use **Oracle Wallet Manager**, a graphical utility that performs the same wallet operations as `orapki`.

> See the [Oracle Help Center](https://docs.oracle.com/cd/E24628_01/em.121/e37799/ch1_introduction.htm#OUICG107) for OUI installation guidance.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-481cbf073d4652068e6c193e8ee51444ad6c7c15%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 2 — Selecting the Administrator profile in Oracle Universal Installer</em></p>

***

## Step 3 — Configure Oracle Net for SSL/TLS

Edit `sqlnet.ora`, located in `$ORACLE_HOME/network/admin`, to point Oracle Net at your wallet:

```
WALLET_LOCATION = (SOURCE = (METHOD = FILE) (METHOD_DATA = (DIRECTORY = path_to_your_wallet)))

SSL_CLIENT_AUTHENTICATION = FALSE

SSL_VERSION = 1.2
```

> These are the minimum settings. You can also configure allowed cipher suites and other SSL parameters — refer to the Oracle documentation for advanced configuration.
>
> The database listener must already be configured to accept SSL/TLS connections.

If you do not have an existing wallet, proceed to Step 4 to create one.

***

## Step 4 — Create an Oracle Wallet and import the certificate

Oracle uses a Wallet to store trusted certificates. Use either `orapki` (CLI) or **Oracle Wallet Manager** (GUI).

### Option A — Using `orapki` (command line)

```
orapki wallet create -wallet path_to_your_wallet -auto_login
orapki wallet add -wallet path_to_your_wallet -trusted_cert -cert your_certificate.crt
```

Replace `your_certificate.crt` with the path to the certificate downloaded in Step 1. If you already have a wallet, skip the `wallet create` command.

> **Important:** The `-auto_login` flag lets the driver access the wallet without a passphrase. Without it, the driver will fail to open the wallet file. Ensure OS permissions allow the user or service account to read the wallet files.

### Option B — Using Oracle Wallet Manager (GUI)

1. Open Wallet Manager. Use the left menu to create a new wallet or open an existing one.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-4d7a942d8870dd47279c68b9a0eb4c196db3872d%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 3 — Oracle Wallet Manager home</em></p>

2. Enter a passphrase that meets the specified requirements when creating a new wallet.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-45abdfa2e195b406e3aeb86f4dd32a48dc8c25ac%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 4 — New wallet passphrase dialog</em></p>

3. When prompted to create a certificate request, select **No** — you need to import the Tessell certificate instead.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-d6cf4145ba171dfe167168786682daa27dc98f5e%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 5 — Declining the certificate request prompt</em></p>

4. Browse to the directory containing the certificate file downloaded from Tessell and import it.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-38d84c68e58ce8dca551487c1b7596d13333bca0%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 6 — Selecting the Tessell CA certificate to import</em></p>

5. Confirm the certificate appears in the wallet.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-0b00123a2721ac1ce7b36568f267ed1cef457b9e%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 7 — Certificate successfully imported into the wallet</em></p>

6. Save the wallet to the same directory you configured in `sqlnet.ora` in Step 3.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-ba3c171237dbb62c0d684d52098cba0385193150%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 8 — Saving the wallet to the configured directory</em></p>

7. Enable **Auto Login** for the wallet. The setting is saved automatically once selected.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-0672ca28f028511f890e838a28df86fb2c80657c%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 9 — Enabling Auto Login in Wallet Manager</em></p>

***

## Step 5 — Connect using SQL\*Plus

Use SQL\*Plus with a TCPS connection string. The Tessell service Overview page provides a pre-configured connection string as a starting point. You can also add a TNS entry to your `TNSNAMES.ORA` file:

```
MYDB_SSL =
  (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCPS)(HOST = your_db_host)(PORT = your_ssl_port))
    (CONNECT_DATA =
      (SERVICE_NAME = your_service_name)
      (SSL_SERVER_CERT_DN = "CN=mydb.service.com")
    )
  )
```

Replace `path_to_your_wallet`, `your_certificate.crt`, `your_db_host`, `your_ssl_port`, `your_service_name`, and `mydb.service.com` with your actual values.

<div align="center"><img src="https://3421475909-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKiIctERJykfezXfUU2%2Fuploads%2Fgit-blob-393b3f2d7d8538330f7dd1fd9322a3393ff406e2%2Funknown.png?alt=media" alt="" width="800"></div>

<p align="center"><em>Figure 10 — Pre-configured connection string on the Tessell service Overview page</em></p>

***

## Additional notes

* The steps above may vary depending on your Oracle Database version and network environment.
* Refer to Oracle documentation specific to your version for detailed SSL setup instructions, as there may be version-specific requirements.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.tessell.com/tessell/database-engines/tessell-for-oracle/database-connections-using-ssl-tls/windows-platform.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.