This figure shows the recommended OracleAS Certificate Authority installation configuration for production. On one computer there is an instance of Oracle Single Sign-on (SSO), and an Oracle database containing an instance of Oracle Internet Directory (OID). On another computer resides the OracleAS Certificate Authority instance, separate from the SSO/OID database.

A single-headed arrow points from OracleAS Certificate Authority to the database, indicating their connection at OracleAS Certificate Authority's initiative. Double-headed arrows connecting SSO with OID and the database show the two-way communication between those elements.

The diagram shows web clients connected by a double-headed arrow to either the SSO instance or to OracleAS Certificate Authority.