{"id":41467,"date":"2025-11-07T08:00:00","date_gmt":"2025-11-07T07:00:00","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/?p=41467"},"modified":"2025-11-06T20:46:45","modified_gmt":"2025-11-06T19:46:45","slug":"securing-an-existing-unsecure-goldengate-installation","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/","title":{"rendered":"Securing an Existing Unsecure GoldenGate Installation"},"content":{"rendered":"\n

You might have an existing unsecure GoldenGate installation<\/strong> that you would like to secure, whether it’s for security reasons<\/strong> or because you would like to dissociate the installation and its securing process. After searching everywhere in the Oracle documentation for how to proceed, I decided to try, investigate and eventually even asked Oracle directly. Here is the answer.<\/p>\n\n\n\n

For a TL;DR<\/em> version of the answer, please go to the end of the blog, but in the meantime, here was my reasoning.<\/p>\n\n\n\n

Setup differences between a secure and unsecure GoldenGate installation<\/h2>\n\n\n\n

Installation differences<\/strong><\/h3>\n\n\n\n

From an installation perspective<\/em><\/strong>, the difference between a secure and unsecure installation is narrow<\/strong>. I talked earlier about graphic and silent GoldenGate installations<\/a>, and for the silent installation, the following response file parameters are the only one involved in this security aspect:<\/p>\n\n\n\n

# SECTION C - SECURITY MANAGER\nSECURITY_ENABLED=false\n\n# SECTION H - SECURITY\nTLS_1_2_ENABLED=false\nTLS_1_3_ENABLED=false\nFIPS_ENABLED=false\nSERVER_CERTIFICATE=\nSERVER_CERTIFICATE_KEY_FILE=\nSERVER_CA_CERTIFICATES_FILE=\nCLIENT_CERTIFICATE=\nCLIENT_CERTIFICATE_KEY_FILE=\nCLIENT_CA_CERTIFICATES_FILE<\/code><\/pre>\n\n\n\n
*_ENABLED<\/code> parameters are just flags that should be set to true to secure the installation (at least for SECURITY_ENABLED<\/code> and one TLS parameter), and then you need to provide the certificate files (client and server, three for each).<\/p>\n\n\n\n
To summarize, there is not much you have to do to configure a secure<\/strong> GoldenGate setup. So it shouldn’t be that difficult to enable these security features after installation: one flag, and a few certificates.<\/p>\n\n\n\n
Configuration differences<\/strong><\/h3>\n\n\n\n
From a configuration perspective<\/em><\/strong>, there are not many differences either. Looking at the deploymentConfiguration.dat<\/code> file for both secure and unsecure service managers, the only difference lies in the SecurityManager.config.securityDetails<\/code> section. After cleaning what is similar, here are the differences:<\/p>\n\n\n\n
# Secure installation\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"securityDetails\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"network\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"common\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"fipsEnabled\": false,\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"inbound\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"authMode\": \"clientOptional_server\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"cipherSuites\": [\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"TLS_AES_256_GCM_SHA384\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"TLS_AES_128_GCM_SHA256\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"TLS_CHACHA20_POLY1305_SHA256\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ],\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"protocolVersion\": \"TLS_ALL\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"outbound\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"authMode\": \"clientOptional_server\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },\n\n# Unsecure installation\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"securityDetails\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"network\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"common\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"fipsEnabled\": false,\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"inbound\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"authMode\": \"clientOptional_server\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"cipherSuites\": \"^((?!anon|RC4|NULL|3DES).)*$\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"outbound\": {\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \"authMode\": \"client_server\",\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 }\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 },<\/code><\/pre>\n\n\n\n
Basically, securityDetails.outbound.authMode<\/code> is set to clientOptional_server<\/code> on one side, and client_server<\/code> on the other. And the unsecure configuration has a different securityDetails.inbound.cipherSuites<\/code> parameter, and a missing securityDetails.protocolVersion<\/code> parameter.<\/p>\n\n\n\n
But nothing in the configuration points to the wallet files, locates in $OGG_ETC_HOME\/ssl<\/code>. So, how to add them here ?<\/p>\n\n\n\n
Can you secure an unsecure GoldenGate installation ?<\/h2>\n\n\n\n
When connecting to an unsecure GoldenGate service manager, you still have the ability to add and manage certificates from the UI<\/strong>, the same way you would do on a secure installation:<\/p>\n\n\n\n
\"Certificates<\/figure>\n\n\n\n
It is unfortunate, but just adding the certificates from the UI doesn’t make your installation secure<\/strong>. In fact, even after modifying the deploymentConfiguration.dat<\/code> files, the last piece missing in the configuration, as described above, it doesn’t work. You will only end up with a broken installation<\/strong>, even when doing the same with all your deployments and restarting everything.<\/p>\n\n\n\n
Is there really no way to secure an already existing GoldenGate installation ?<\/h3>\n\n\n\n
Unfortunately, not at this point. And it was confirmed earlier this week on the MOSC forums<\/a> by Gopal Gaur<\/strong>, Senior Principal Software Engineer<\/em> working on GoldenGate at Oracle.<\/p>\n\n\n\n
\n
You can not convert non secure deployment into secure deployment, you will need a new service manager that supports sever side SSL\/TLS.<\/p>\n\n\n\n
You can not convert non secure deployment into secure deployment at this stage, we have an opened enhancement for this.<\/p>\n<\/blockquote>\n\n\n\n
To wrap up, bad news: it is not possible to secure an existing GoldenGate installation<\/strong>, but good news, Oracle is apparently working<\/strong> on it. In the meantime, just re-install GoldenGate<\/a>…<\/p>\n","protected":false},"excerpt":{"rendered":"
You might have an existing unsecure GoldenGate installation that you would like to secure, whether it’s for security reasons or because you would like to dissociate the installation and its securing process. After searching everywhere in the Oracle documentation for how to proceed, I decided to try, investigate and eventually even asked Oracle directly. Here […]<\/p>\n","protected":false},"author":152,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[197,229,198,59],"tags":[],"type_dbi":[],"class_list":["post-41467","post","type-post","status-publish","format-standard","hentry","category-application-integration-middleware","category-database-administration-monitoring","category-database-management","category-oracle"],"acf":[],"yoast_head":"\nSecuring an Existing Unsecure GoldenGate Installation - dbi Blog<\/title>\n<meta name=\"description\" content=\"Is it possible to secure an already existing unsecure GoldenGate setup ? After explaining differences between secure and unsecure setups, this blog gives the answer.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Securing an Existing Unsecure GoldenGate Installation\" \/>\n<meta property=\"og:description\" content=\"Is it possible to secure an already existing unsecure GoldenGate setup ? After explaining differences between secure and unsecure setups, this blog gives the answer.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-07T07:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"846\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Julien Delattre\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Julien Delattre\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\"},\"author\":{\"name\":\"Julien Delattre\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/764ab019cc9dec42655b4c6b9b8e474e\"},\"headline\":\"Securing an Existing Unsecure GoldenGate Installation\",\"datePublished\":\"2025-11-07T07:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\"},\"wordCount\":504,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image-1024x722.png\",\"articleSection\":[\"Application integration & Middleware\",\"Database Administration & Monitoring\",\"Database management\",\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\",\"name\":\"Securing an Existing Unsecure GoldenGate Installation - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image-1024x722.png\",\"datePublished\":\"2025-11-07T07:00:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/764ab019cc9dec42655b4c6b9b8e474e\"},\"description\":\"Is it possible to secure an already existing unsecure GoldenGate setup ? After explaining differences between secure and unsecure setups, this blog gives the answer.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image.png\",\"contentUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image.png\",\"width\":1200,\"height\":846},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Securing an Existing Unsecure GoldenGate Installation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/764ab019cc9dec42655b4c6b9b8e474e\",\"name\":\"Julien Delattre\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/a97d00e680bbf237126e24b65281cbcb66cd20bd1ed2d14bf928991b2bf68eb5?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a97d00e680bbf237126e24b65281cbcb66cd20bd1ed2d14bf928991b2bf68eb5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a97d00e680bbf237126e24b65281cbcb66cd20bd1ed2d14bf928991b2bf68eb5?s=96&d=mm&r=g\",\"caption\":\"Julien Delattre\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/juliendelattre\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Securing an Existing Unsecure GoldenGate Installation - dbi Blog","description":"Is it possible to secure an already existing unsecure GoldenGate setup ? After explaining differences between secure and unsecure setups, this blog gives the answer.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/","og_locale":"en_US","og_type":"article","og_title":"Securing an Existing Unsecure GoldenGate Installation","og_description":"Is it possible to secure an already existing unsecure GoldenGate setup ? After explaining differences between secure and unsecure setups, this blog gives the answer.","og_url":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/","og_site_name":"dbi Blog","article_published_time":"2025-11-07T07:00:00+00:00","og_image":[{"width":1200,"height":846,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image.png","type":"image\/png"}],"author":"Julien Delattre","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Julien Delattre","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/"},"author":{"name":"Julien Delattre","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/764ab019cc9dec42655b4c6b9b8e474e"},"headline":"Securing an Existing Unsecure GoldenGate Installation","datePublished":"2025-11-07T07:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/"},"wordCount":504,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image-1024x722.png","articleSection":["Application integration & Middleware","Database Administration & Monitoring","Database management","Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/","url":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/","name":"Securing an Existing Unsecure GoldenGate Installation - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image-1024x722.png","datePublished":"2025-11-07T07:00:00+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/764ab019cc9dec42655b4c6b9b8e474e"},"description":"Is it possible to secure an already existing unsecure GoldenGate setup ? After explaining differences between secure and unsecure setups, this blog gives the answer.","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2025\/11\/image.png","width":1200,"height":846},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/securing-an-existing-unsecure-goldengate-installation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Securing an Existing Unsecure GoldenGate Installation"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/764ab019cc9dec42655b4c6b9b8e474e","name":"Julien Delattre","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a97d00e680bbf237126e24b65281cbcb66cd20bd1ed2d14bf928991b2bf68eb5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a97d00e680bbf237126e24b65281cbcb66cd20bd1ed2d14bf928991b2bf68eb5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a97d00e680bbf237126e24b65281cbcb66cd20bd1ed2d14bf928991b2bf68eb5?s=96&d=mm&r=g","caption":"Julien Delattre"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/juliendelattre\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/41467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/152"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=41467"}],"version-history":[{"count":7,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/41467\/revisions"}],"predecessor-version":[{"id":41477,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/41467\/revisions\/41477"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=41467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=41467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=41467"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=41467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}