Oracle as Airlock IAM database

This page describes how to use an Oracle database with the Airlock IAM database schema.

The chosen data layer has to be well managed and monitored. IAM is not responsible for the operation and backup/recovery. For production usage, the data layer should be clustered.

Database settings

Airlock IAM requires the following Oracle database settings:

  • UTF-8 Character Encoding 'AL32UTF8' for the database ('UTF8' should not be used anymore for new databases as it only supports an older unicode standard)
  • NLS_LENGTH_SEMANTICS=CHAR (is contained in the schema from 7.1 on; can otherwise be set on the session before importing the schema (should not be changed server-wide))

Schema creation and upgrade

SQLs scripts for Oracle databases are available here:

SQL File


Creates tables used for Airlock IAM.

Upgrades IAM 7.3 database schema for release IAM 7.4.

Upgrades IAM 7.4 database schema for release IAM 7.5.

Upgrades IAM 7.5 database schema for release IAM 7.6.

Upgrades IAM 7.6 database schema for release IAM 7.7.

Inserts an administrator "admin" with password "password" (works with demo configuration).

Comment out SET sqlblanklines on if you are using an SQL client other than Oracle SQL*Plus.

For performance tuning hints, see: Performance tuning and scaling best practices

JDBC connector (JDBC driver)

  1. The JDBC connector (ojdbc*.jar) can be downloaded from the Oracle website. Make sure that you download a version of JDBC Connector suitable for your Oracle database.
  2. Copy the driver (JAR file) to the libs folder of the common instance (or an instance's folder). Example: cp ojdbc-*.jar instances/common/libs/
  3. Configure the database pool plugin ("JDBC Connection Pool") accordingly:
    1. Driver Class: "oracle.jdbc.OracleDriver" (if using a jdbc-driver older than 9i: "oracle.jdbc.driver.OracleDriver")
    2. Url: The JDBC connection string (examples are given by the help function of the ConfigEditor)
    3. Connection Test Statement: "SELECT 1 FROM DUAL"
  4. Restart the IAM instance(s): see e.g. Starting and stopping Airlock IAM (system service integration).