• Pradip
• 13 Dec, 2025
• 0 Comments
• 3 Mins Read

How to Set Up Oracle Wallet in Oracle Database 19c & 21c

Introduction to Oracle Wallet and External Password Stores

In modern database environments, security and ease of connectivity are paramount. Oracle Wallet is a powerful feature provided by Oracle Database that serves as a secure container to store authentication and signing credentials, such as private keys, certificates, and most importantly for this guide, database user credentials.

The primary benefit of using an Oracle Wallet as an External Password Store (EPS) is the ability to achieve passwordless connections. This eliminates the need to hard-code usernames and passwords in application code, configuration files, or shell scripts, significantly improving security and simplifying credential management.

While Oracle Wallet is crucial for features like Transparent Data Encryption (TDE) and SSL/TLS, this guide focuses specifically on its use for storing database login credentials, which is a common and highly sought-after configuration in both Oracle Database 19c and 21c.

What Is Oracle Wallet?

An Oracle Wallet is a password-protected container that securely stores sensitive information such as:

• TDE master encryption keys

• Database credentials

• SSL certificates

• Private keys

Prerequisites Before Creating Oracle Wallet

Ensure the following before you proceed:

• Oracle Database 19c or 21c installed

• OS user: oracle

• Oracle Home & ORACLE_SID set

• Sufficient permissions on wallet directory

• sqlplus and mkstore utility available

Step-by-Step Guide to Create Oracle Wallet (19c & 21c)

---

This guide explains how to create and configure an Oracle Wallet for secure, passwordless database connections using Oracle Database 19c / 21c.

---

Step 1: Create a Wallet Directory

First, create a secure directory to store the wallet files.

On Windows OS

On Linux

Best Practice:
Keep the wallet directory outside ORACLE_HOME and restrict permissions.

---

Step 2: Create the Oracle Wallet

Use the mkstore utility to create the wallet.

On Windows

On Linux

Example Output

This password protects the wallet (ewallet.p12).

---

Step 3: Verify Wallet Files

After creation, verify the wallet directory.

Expected Files

• ewallet.p12 → Password-protected wallet

• cwallet.sso → Auto-login wallet (created automatically in most cases)

If cwallet.sso is missing, password-based wallet will still work, but DB startup may require manual wallet opening.

---

Step 4: Configure sqlnet.ora

Before editing, identify the active Oracle Network directory:

Look for:

Navigate to:

---

sqlnet.ora Configuration (Windows)

---

sqlnet.ora Configuration (Linux)

Ensure there are no syntax errors in sqlnet.ora.

---

Step 5: Create a Database User (Optional)

Connect as SYSDBA and create a common user (for CDB environments).

Skip this step if the user already exists.

---

Step 6: Store Database Credentials in the Wallet

Store credentials securely using the TNS alias.

Syntax

Example (Windows)

Example (Linux)

---

Step 7: Verify Stored Credentials

Expected output:

---

Step 8: Test Passwordless Connection

Connect using only the TNS alias:

If the connection succeeds, the wallet is working correctly.