OAM upgrade 10g to 11gr2 steps...............................................................................

2
Current OAM 10g Architecture ............................................................................... 2
Proposed OAM11gR2 Architecture...........................................................................3
Install OAM11gR2.................................................................................................... 4
Hardware requirements:............................................................................................. 4
On DB server:.......................................................................................................... 5
Create user........................................................................................................... 5
Install Java............................................................................................................ 5
Install Database................................................................................................... 5
Database installation screens.............................................................................. 6
On IAM server:....................................................................................................... 16
Install Java.......................................................................................................... 16
Install Weblogic.................................................................................................. 16
Weblogic installation screens.............................................................................17
Install Oracle Access Manager............................................................................... 25
Oracle Access Manager installation screens.......................................................27
Install RCU for OAM............................................................................................ 34
Repository Creation Utility Installation screens..................................................36
Creating new Weblogic Domain for OAM............................................................43
Configuring Database Security Store for Oracle Identity and Access
Management Domain......................................................................................... 59
Creating boot.properties.................................................................................... 60
Start and stop of servers.................................................................................... 60
Weblogic admin console details.........................................................................60
Oracle Access Manager admin console details...................................................60
Migration of OAM 10g to OAM 11gR2....................................................................61
Prepare migration.properties file with below entries..........................................61
Generate assessment report..............................................................................62
Preparing for migration...................................................................................... 64
Starting migration.............................................................................................. 64
Verify migration.................................................................................................. 65
Post migration activities..................................................................................... 68

OAM upgrade 10g to 11gr2 steps

Current OAM 10g Architecture

Proposed OAM11gR2 Architecture

Install OAM11gR2
Hardware Requirements
Install Database
Run repository creation utility
Install weblogic
Install OAM
Create weblogic domain for OAM

Hardware requirements:
Server
Database1
(OIDDBHOST1,
OIMDBHOST1,OAMD
BHOST1,OIFDBHOST
1)
Database2
(OIDDBHOST2,
OIMDBHOST2,OAMD
BHOST2,OIFDBHOST
2)
OAM1, OIF1
OAM2, OIF2
OIM1
OIM2
OIDHOST1,
OVDHOST1
OIDHOST2,
sOVDHOST2
Webgates

Processor
4 or more X
Pentium 1.5 GHz
or greater
4 or more X
Pentium 1.5 GHz
or greater

Disk

nXm
n=No of disks, at least 4 (striped as 1 disk).
m=Size of the disk (minimum of 30 GB)
nXm
n=No of disks, at least 4 (striped as 1 disk).
m=Size of the disk (minimum of 30 GB)

Memor
y
6-16
GB

6-16
GB

4 X Pentium 1.5
10 GB
6GB
GHz or greater
4 X Pentium 1.5
10 GB
6GB
GHz or greater
2 or more X
10 GB
6GB
Pentium 1.5 GHz
or greater
2 or more X
10 GB
6GB
Pentium 1.5 GHz
or greater
2 or more X
10 GB
4GB
Pentium 1.5 GHz
or greater
2 or more X
10 GB
4GB
Pentium 1.5 GHz
or greater
Existing webgates would be migrated or installed on the existing
webservers if needed.

On DB server:
Create user
Create user for installations, below are the details.
Install Java
JDK : jdk-6u37-windows-x64
JDK Installation location: D:\Java\jdk1.6.0_37\
JRE Installation location: D:\Java\jre6\
Set java environment variables (java_home & path)

Install Database
Extract the installers: both the installers needs to be extracted together to the same
folder.

Database installation screens

Delete all the extracted files.

On IAM server:
Install Java
JDK : jdk-6u37-windows-x64
JDK Installation location D:\Java\jdk1.6.0_37\
JRE Installation location: D:\Java\jre6\
Set java environment variables (java_home & path)
Install Weblogic
Installer: wls1036_generic

Weblogic installation screens

Uncheck "Run Quickstart" and click done

Install Oracle Access Manager

Installation files: V33644-01_1of2 & V33644-01_2of2 needs to be extracted to
Disk1, Disk2 & Disk3

Open a command prompt, go to disk1 and execute below command

setup.exe -jreLoc D:\java\jdk1.6.0_37

Oracle Access Manager installation screens

Install RCU for OAM

Installation file: V33643-01
This installation can be done from any server or system.
Extract V33643-01 (the path should not have spaces)

Go to rcuhome\bin and execute rcu.bat

Repository Creation Utility Installation screens

Creating new Weblogic Domain for OAM

Go to D:\Oracle\Middleware\oracle_common\common\bin

User name will vary for the schemas, DEV_OPSS, DEV_OAM needs to be used for
opss schema and OAM infrastructure.

Uncheck "start admin server" and click done.

Dont start the admin server before completing bellow step.

Configuring Database Security Store for Oracle Identity and Access

Management Domain

Go to Oracle IDM home configuration and execute below connad

D:\Oracle\Middleware\oracle_common\common\bin>wlst.cmd
D:\Oracle\Middleware\Orac
le_IDM1\common\tools\configureSecurityStore.py -d D:\Oracle\Middleware\user_proj
ects\domains\oam_domain -c IAM -p ****** -m create
This should run without throwing any errors. Should get Info: Create operation has
completed successfully.

Creating boot.properties
Create boot.properties file under
D:\Oracle\Middleware\user_projects\domains\oam_domain\servers\oam_server1\sec
urity
Content of the boot.properties file
username=*****
password=*****
Note: The user name password would be encrypted once we start the
server.
Start and stop of servers
Start Weblogic
Go to domain bin (D:\Oracle\Middleware\user_projects\domains\oam_domain\bin)
startWeblogic.cmd
Stop Weblogic
Go to domain bin (D:\Oracle\Middleware\user_projects\domains\oam_domain\bin)
stopweblogic.cmd
Start Oracle Access Manager
Go to domain bin (D:\Oracle\Middleware\user_projects\domains\oam_domain\bin)
startmanagedweblogic.cmd oam_server1
Stop Oracle Access Manager
Go to domain bin (D:\Oracle\Middleware\user_projects\domains\oam_domain\bin)
stopManagedWeblogic.cmd oam_server1
Weblogic admin console details
Console URL: http://hostname:7001/console
UserName: *****
Password: *****
Oracle Access Manager admin console details
Console URL: http://hostname:7001/oamconsole
UserName: *****

Password: *****

Migration of OAM 10g to OAM 11gR2

Prepare migration.properties file with below entries
##################################################
####
## configuration store details
config_store_ldap_url=ldap://hostname:port/
config_store_ldap_base=ou=apps,dc=company,dc=com
config_store_principal=cn=username
config_store_password=encrypted password
config_store_initial_context_factory=com.sun.jndi.ldap.LdapCtxFactory
## Policy store details
policy_store_ldap_url=ldap://hostname:port/
policy_store_ldap_base=ou=apps,dc=epri,dc=com
policy_store_principal=cn=username
policy_store_password= encrypted password
policy_store_initial_context_factory=com.sun.jndi.ldap.LdapCtxFactory
migration_mode=INCREMENTAL
include_file=<include input filename>
exclude_file=<exclude input filename>
preview_enabled=true
preview_level=ALL
evaluate_filename=D:/MigrationPreviewFile.txt
evaluate_only=true
artifact_queue_limit=3000
agent_mode_to_override=RETAIN_EXISTING

##################################################
#############

Generate assessment report

Before migrating assessment report needs to be generated by setting the evaluate
only to true
evaluate_only=true
now go to wlst

Connect to admin console

Connect domain run time: domainRuntime()
Set log level
setLogLevel(logger="oracle.oam",level="TRACE:32",persist="0",target="AdminServ
er");

Now run the oam migrate command

oamMigrate(oamMigrateType="OAM10g",pathMigrationPropertiesFile="D:\Oracle\Mi
ddleware\migration.properties");

This utility would generate two files in the domain home

The assessment report shows below results:

Number of records identified as:

COMPATIBLE - 883
INCOMPATIBLE - 0
COMPATIBLE_WITH_LESS_FEATURES - 10
IGNORE 4
Preparing for migration
Now open includefile.txt and select the domains/agents needs to be migrated, if we
select to migrate policy domains, the agents would be migrated automatically. For
the components which needs to be migrated, change the ##N to ##Y
Starting migration
Below properties needs to be changed in "migration.properties"
Set evaluate_only=false
include_file=D:\includefile.txt (This file was generated when run the assessment
report and modified in Preparation for migration step)
now go to wlst

Connect to admin console

Connect domain run time: domainRuntime()

Now run the oam migrate command

oamMigrate(oamMigrateType="OAM10g",pathMigrationPropertiesFile="D:\Oracle\Mi
ddleware\migration.properties");

Verify migration
Once the migration is completed, verify the migrated artifacts on OAM11gR2.

Post migration activities

Associating webgate with Access manager 11gR2
Create a new server profile on OAM 10g

Associate Access server with the webgate

Verify post migration activities

Verify obaccessclient.xml file to check the added access server
Restart OAM 11gR2 and webservers.