---
schema_version: "1"
id: d1f9e8da90cb20cac5971768f584b2170a052197bda28b8dd6c9f45bd0750c55
title: Configure an Oracle TLS Database Connection
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/db-connector/1.15/database-connector-connection-secure-oracle.md
canonical_url: https://docs.mulesoft.com/db-connector/1.15/database-connector-connection-secure-oracle
source_site: docs.mulesoft.com
content_type: documentation
content_hash: de42a72be9fcf171bac4e4ba925d0c1e3156a5dc0d7c6f14ba54f81299fecc16
description: MuleSoft Documentation Site
release: "1.15"
latest: false
---
---
product: Database Connector
version: 1.15
---

# Configure an Oracle TLS Database Connection

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Anypoint Connector for Database (Database Connector) enables you to connect to an Oracle database in
a secure way through its dedicated Oracle connection.

You can configure the following levels of security for an Oracle connection:

- TCPS - connection through secure TCP tunnel (not recommended)

- TLS - with Truststore validation only

- mTLS - with Truststore and Keystore validations

- mTLS - without user and password (role is given by certificates)

## Configure a Secure Oracle Connection

The following example shows how to configure a secure Oracle connection in Anypoint Studio:

1.  In Studio, navigate to the **Global Elements** view.

2.  Click **Create** to open the **Choose Global Type** view.

3.  In the **Filter** field, type `database`, select **Database Config** and click **OK**.

4.  In the **Database Config** window, for the **Connection** field, select **Oracle Connection**.

5.  Click **Configure** to add the required Oracle JDBC driver and select either:

    - **Use local file**  
      Install the library using a local file.

    - **Add Maven dependency**  
      Install a Maven dependency to add to the project.

6.  Set **Host** to `localhost`, **Port** to `1522`, **User** to `system`, **Password** to `oracle`,
    and **Instance**/**Service Name** to `xe`.

7.  Click **TLS**.

8.  In the **Trust Store Configuration** section, set the following fields:

    - **Path**: `<somePath>/client-truststore.jks`

    - **Password**: `somepassword`

    - **Type**: `JKS`

9.  In the **Key Store Configuration** section, set the following fields:

    - **Path**: `<somePath>/client-keystore.jks`

    - **Password**: `somepassword`

    - **Key Password**: `somepassword`

      > [!NOTE] Due to Java Secure Socket Extension (JSSE), you must set the **Password** and **Key
      > Password** fields with the same password value for the Key Store Configuration.

    - **Type**: `JKS`

10. Click **Test Connection** to confirm that Mule can connect to the database.

11. Click **OK**.

The following screenshots show the secure Oracle connection General and TLS configuration windows in
Studio:

![Secure Oracle Connection General configuration window](/mulesoft/current/en-us/db-connector/1.15/_images/database-oracle-connection-secure-general.png)

In the **Configuration XML** editor, the `tls:context` configuration looks like this:

```xml
	<db:config name="oracle-mtls-with-user-pass">
		<db:oracle-connection host="localhost" port="1522" user="system" password="oracle" serviceName="XE">
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
				<tls:key-store path="<somePath>/client-keystore.jks" password="<somePassword>" keyPassword="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>
```

## Secure Oracle Connection Levels Examples

The following examples show the XML configuration for each secure Oracle connection level:

### TCPS Connection Through Secure TCP Tunnel

In the **Configuration XML** editor, the configuration looks like this:

```xml
	<db:config name="oracle-tcps">
		<db:oracle-connection host="localhost" port="1522" user="system" password="oracle" serviceName="XE" >
			<tls:context>
				<tls:trust-store insecure="true"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>
```

### TLS with Truststore Validation Only

In the **Configuration XML** editor, the configuration looks like this:

```xml
	<db:config name="oracle-tls-with-truststore-only">
		<db:oracle-connection host="localhost" port="1522" user="system" password="oracle" serviceName="XE" >
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>
```

### mTLS with Truststore and Keystore Validations

In the **Configuration XML** editor, the configuration looks like this:

```xml
	<db:config name="oracle-mtls-with-user-pass">
		<db:oracle-connection host="localhost" user="system" password="oracle" port="1522" serviceName="XE">
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
				<tls:key-store path="<somePath>/client-keystore.jks" password="<somePassword>" keyPassword="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>
```

### mTLS without User and Password

Note that for this configuration the role is given by certificates. In the **Configuration XML**
editor, the configuration looks like this:

```xml
	<db:config name="oracle-mtls-with-user-pass">
		<db:oracle-connection host="localhost" port="1522" serviceName="XE">
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
				<tls:key-store path="<somePath>/client-keystore.jks" password="<somePassword>" keyPassword="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>
```

## See Also

- [Database Connector Reference](https://docs.mulesoft.com/db-connector/1.15/database-documentation)

- [Configure TLS with Keystores and Truststores](https://docs.mulesoft.com/mule-runtime/latest/tls-configuration)

- [Salesforce Help](https://help.salesforce.com)