I had an email from Paul Vallee to let me know of a good post on the pythian blog written by Grégory Guillou titled Oracle Grid Control: The Importance of Deleting the emkey
. The title doesnt shout out Oracle security but its clearly about this subject, my favourite subject. I was aware of this issue and have included the decrypt code in previous presentations but this is a really good article that covers the subject very well. Oracle also provides some documentation on enterprise manager security
which is not bad and covers the commands used in more detail.