Oracle Siebel CRM IP17 guide


A guide to set up and configure Siebel CRM.

Prerequirements - 

  1. Oracle DB 12c 
  2. Java 
  3. Build Siebel_Install_Image


We would do a fresh install on Windows 2016 server 

First of all it's reccomended to turn off UAC for install.

Using CMD you can do this like that 

%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f

%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f

and to turn it back on

%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f

%windir%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 2 /f

For Siebel to work correct we need to make it a part of a domain or to add DNS to our Tcp properties.


Afterwards - we need to set up DB and Client ( we need both )

We will use Oracle 12c  and same client.  Client must be 32 bit !

In both client and server for DB - there are important files called - tsnames.ora 

The are located in DB/Client folder  network/admin 

Afterwards we use or Siebel_Install_Image ( it can be downloaded from Oracle Cloud)

But we have to do some more set up.

Siebel and most Oracle products use SSL to encrypt connections and use Java certificates.

We need to generate some certificates to use for our installation.

We will use OpenSSL - download and install it 

We need to use Java (JDK) to generate keystore and truststore.

To ease the setup we will make a .bat file (just use a notepad or such and save as bat)

here is it's content  let's call it KEY.bat


@echo off


set FQDN={yourFQDN}

set JAVA=C:\Java\jdk1.8.0_181\bin

set SSL=C:\OpenSSL-Win64\bin

set SIEBEL=C:\Siebel

set PASSWORD={yourpass}



set OPENSSL_CONF=%SSL%\openssl.cfg

rmdir %SIEBEL%\keys /s /Q

rmdir %SIEBEL%\ca /s /Q

mkdir %SIEBEL%\keys

mkdir %SIEBEL%\ca


%JAVA%\keytool -genkey -alias siebel -keystore %SIEBEL%\keys\siebelkeystore.jks -keyalg RSA -sigalg SHA1withRSA -dname "cn=%FQDN%" -storepass %PASSWORD% -keypass %PASSWORD%


%JAVA%\keytool -list -v -keystore %SIEBEL%\keys\siebelkeystore.jks -storepass %PASSWORD%


%JAVA%\keytool -certreq -alias siebel -keystore %SIEBEL%\keys\siebelkeystore.jks -file %SIEBEL%\keys\siebelkeystore.csr -storepass %PASSWORD%


%SSL%\openssl req -new -keyout %SIEBEL%\ca\cakey.pem -out %SIEBEL%\ca\careq.pem -subj "/CN=%FQDN%" -passout pass:%PASSWORD%


%SSL%\openssl x509 -signkey %SIEBEL%\ca\cakey.pem -req -days 3650 -in %SIEBEL%\ca\careq.pem -out %SIEBEL%\ca\caroot.cer -extensions v3_ca -passin pass:%PASSWORD%


%JAVA%\keytool -printcert -v -file %SIEBEL%\ca\caroot.cer


echo 1234 > %SIEBEL%\ca\serial.txt

%SSL%\openssl x509 -CA %SIEBEL%\ca\caroot.cer -CAkey %SIEBEL%\ca\cakey.pem -CAserial %SIEBEL%\ca\serial.txt -req -in %SIEBEL%\keys\siebelkeystore.csr -out %SIEBEL%\keys\siebelkeystoreCASigned.cer -days 365 -passin pass:%PASSWORD%


%JAVA%\keytool -import -alias ca -file %SIEBEL%\ca\caroot.cer -keystore %SIEBEL%\keys\siebelkeystore.jks -storepass %PASSWORD% -noprompt


%JAVA%\keytool -import -alias siebel -file %SIEBEL%\keys\siebelkeystoreCASigned.cer -keystore %SIEBEL%\keys\siebelkeystore.jks -storepass %PASSWORD%


%JAVA%\keytool -list -v -keystore %SIEBEL%\keys\siebelkeystore.jks -storepass %PASSWORD%


move %SIEBEL%\keys\siebelkeystore.jks %SIEBEL%\siebelkeystore.jks


echo Use the following path for both keystore and truststore in all Siebel installations: %SIEBEL%\siebelkeystore.jks

echo Use the following password for both keystore and truststore: %PASSWORD%

Afterwards we launch it and get our certs.


Installing Siebel Application Interface and Siebel Enterprice Server ( SAI and SES)

Launch setup.exe with elevated rights