A useful enhancement in 12cR2 is that password files are automatically synchronized in a Data Guard environment:
[oracle@uhesse1 ~]$ dgmgrl sys/oracle_4U@cdb1 DGMGRL for Linux: Release 220.127.116.11.0 - Production on Tue Jan 10 07:38:15 2017 Copyright (c) 1982, 2016, Oracle and/or its affiliates. All rights reserved. Welcome to DGMGRL, type "help" for information. Connected to "cdb1" Connected as SYSDBA. DGMGRL> show configuration; Configuration - myconf Protection Mode: MaxPerformance Members: cdb1 - Primary database cdb1sb - Physical standby database Fast-Start Failover: DISABLED Configuration Status: SUCCESS (status updated 31 seconds ago) DGMGRL> exit [oracle@uhesse1 ~]$ sqlplus sys/oracle_4U@cdb1 as sysdba SQL*Plus: Release 18.104.22.168.0 Production on Tue Jan 10 07:38:49 2017 Copyright (c) 1982, 2016, Oracle. All rights reserved. Connected to: Oracle Database 12c Enterprise Edition Release 22.214.171.124.0 - 64bit Production SQL> alter user sys identified by oracle; User altered. SQL> connect sys/oracle@cdb1 as sysdba Connected. SQL> connect sys/oracle@cdb1sb as sysdba Connected.
I have just changed the password of sys on the Primary and it got automatically also changed on the Standby. In earlier versions that had to be done manually, typically by replacing the password file on the standby with a new copy from the primary. One little thing less to keep in mind now 🙂