Cannot Access Enterprise Manager : Oracle database 11g R2 with error ssl_error_weak_server_cert_key

Hi guys

There is a problem with accessing the Oracle enterprise manager for 11g R2. After a default installation, the EM console will not even load in Internet explorer, while recent versions of firefox will show an error like following:

An error occurred during a connection to FQDN 1158. The server certificate included a public key that was too weak. (Error code: ssl_error_weak_server_cert_key)

This is due to the SSL certificate that used for securing the enterprise management console, if you are not using the database at a production environment, you can disable the secure mode and get the enterprise manager online with minimum efforts.

Please follow the instructions as given below

From an elevated command prompt

set ORACLE_UNQNAME=DATABASENAME

Issue the following command

emctl unsecure dbconsole

(Check the below image for more clarity)


The above exercise restarts the dbconsole service and you should able to access the enterprise manager without any issues.

Side note: Should you allow DBConsole (Enterprise Manager) & other Oracle services start automatically?

Allowing dbconsole & Oracle services starting with each restart of your laptop or desktop boxes having standard hardware configurations would be very displeasing experience. Oracle services require resources(true) and they definitely take much more time to start up and be online against most of other Windows services.

If you have a box that has barely 4GB memory and processor from an old generation, I suggest you to change the startup method to “Manual” from automatic immediately after the installation. Well, your call :)

Below find the Oracle services for which you can safely change the startup mode as “Manual”

OracleDBConsole (Aka Enterprise manager, allows you to change system wide configurations, setup backups etc)
OracleMTSRecoveryService (Microsoft Transaction Server, read more here at http://docs.oracle.com/cd/E11882_01/win.112/e26104/using.htm#NTMTS001)
OracleOraDb11g_home1TNSListener (Oracle listener service, mandatory)
OracleService(Oracle database service)
Once the database configurations are made, you are hardly going to use enterprise manager regularly. That means you don’t even have to start the DBConsole service every time while you restart the database service.


I hope the above guidelines help you to save much of the limited resources and let you use your box more effectively while the Oracle services are running.

ridwan amirudin

"Help young people. Help small guys. Because small guys will be big. Young people will have the seeds you bury in their minds, and when they grow up, they will change the world." "Never give up. Today is hard, tomorrow will be worse, but the day after tomorrow will be sunshine." Jack Ma

No comments:

Post a Comment