DocumentationExperience Cloud KCS

Upgrading the Oracle JDBC driver for encrypted database connections in Adobe Experience Manager

Last update: October 8, 2026

This article explains how to upgrade the Oracle JDBC (OJDBC) driver in Adobe Experience Manager (AEM) to support encrypted communication with Oracle databases, and outlines the correct procedure to avoid service disruption.

Description description

Environment

  • Adobe Experience Manager Forms 6.5 on JEE
  • Java application server, such as IBM WebSphere
  • Oracle Database

Issue/Symptoms

  • Your security requirements call for SSL/TLS-encrypted communication between AEM Forms and Oracle Database.
  • The Oracle JDBC driver configured for the application-server datasource doesn’t support the required encryption features.

Cause

AEM Forms on JEE connects to the database through the application server’s datasource. Replacing a JDBC driver in the AEM package directory doesn’t update that datasource configuration, and the source procedure identifies direct package-directory replacement as unsupported. Encrypted database communication requires a compatible driver and correctly configured application-server and Oracle TLS settings.

Resolution resolution

Follow the steps below to address the issue:

  1. Don’t replace the JDBC driver directly in the AEM package or driver directory. AEM Forms on JEE uses the application server’s datasource for database connectivity.
  2. Check the Adobe AEM Forms on JEE supported-platform matrix for the Oracle JDBC driver supported with your AEM Forms service pack, Oracle Database version, and application server. Obtain a driver version that meets your TLS requirement and is listed for your supported configuration.
  3. Update the application server’s JDBC provider or datasource to use the selected Oracle JDBC driver. Follow the application-server vendor’s configuration procedure.
  4. Configure the Oracle database listener and wallet for SSL/TLS according to your security requirements and Oracle’s instructions.
  5. Configure the required truststore and certificate trust on the application-server and Oracle sides according to their respective vendor instructions.
  6. Restart the application server to apply the datasource and TLS changes.
  7. Verify that the database type, schema, JNDI names, and AEM Forms deployment configuration remain unchanged. A full AEM rebuild is not required when changes are limited to the database host, port, TLS configuration, truststore, or JDBC driver.
  8. Before deploying to production, validate the exact Oracle JDBC driver with your AEM Forms service pack in a production-equivalent environment. Test AEM Forms functions and Oracle RAC failover when your deployment uses RAC.
recommendation-more-help
experience-cloud-kcs-help-kbarticles