Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Enterprise Deployment Overview

• 1.1 What is an Enterprise Deployment?
• 1.2 Terminology
• 1.3 Benefits of Oracle Recommendations
  • 1.3.1 Built-in Security
  • 1.3.2 High Availability
• 1.4 Hardware Requirements
• 1.5 Enterprise Deployment Reference Topology
  • 1.5.1 Oracle Identity Management
  • 1.5.2 Web Tier
    • 1.5.2.1 Load Balancer Requirements
  • 1.5.3 Application Tier
  • 1.5.4 Data Tier
  • 1.5.5 What to Install
  • 1.5.6 Unicast Requirement
• 1.6 How to Use This Guide
  • 1.6.1 Installation and Configuration Procedure
  • 1.6.2 Overview of Installation Strategies

2 Database and Environment Preconfiguration

• 2.1 Database
  • 2.1.1 Setting Up the Database
    • 2.1.1.1 Database Host Requirements
    • 2.1.1.2 Supported Database Versions
    • 2.1.1.3 Initialization Parameters
    • 2.1.1.4 Database Services
  • 2.1.2 Loading the Oracle Fusion Metadata Repository in the Oracle RAC Database
  • 2.1.3 Configuring SOA Schemas for Transactional Recovery Privileges
  • 2.1.4 Backing Up the Database
• 2.2 Network
  • 2.2.1 Virtual Server Names
    • 2.2.1.1 wc.mycompany.com
    • 2.2.1.2 admin.mycompany.com
    • 2.2.1.3 wcinternal.mycompany.com
  • 2.2.2 Load Balancers
    • 2.2.2.1 Configuring the Load Balancer
  • 2.2.3 IPs and Virtual IPs
  • 2.2.4 Firewalls and Ports
• 2.3 Shared Storage and Recommended Directory Structure
  • 2.3.1 Terminology for Directories and Directory Environment Variables
  • 2.3.2 Recommended Locations for the Different Directories
  • 2.3.3 Shared Storage Configuration
• 2.4 LDAP as Credential and Policy Store

3 Installing Oracle HTTP Server

• 3.1 Installing Oracle HTTP Server on WEBHOST1 and WEBHOST2
• 3.2 Validating Oracle HTTP Server Through the Load Balancer
• 3.3 Backing Up Oracle HTTP Server

4 Creating a Domain

• 4.1 Installing Oracle Fusion Middleware Home
  • 4.1.1 Installing Oracle WebLogic Server
  • 4.1.2 Installing Oracle Fusion Middleware for WebCenter
• 4.2 Backing Up the Installation
• 4.3 Enabling VIP1 in SOAHOST1
• 4.4 Running the Configuration Wizard on SOAHOST1 to Create a Domain
• 4.5 Creating boot.properties for the Administration Server on SOAHOST1
• 4.6 Starting Node Manager on SOAHOST1
• 4.7 Starting the Administration Server on SOAHOST1
• 4.8 Validating the Administration Server
• 4.9 Creating a Separate Domain Directory for Managed Servers in the Same Node as the Administration Server
• 4.10 Applying the Java Required Files (JRF) Template to the WSM-PM_Cluster
• 4.11 Disabling Host Name Verification for the Oracle WebLogic Administration Server and the WLS_WSM1 Managed Server
• 4.12 Starting and Validating the WLS_WSM1 Managed Server
• 4.13 Propagating the Domain Configuration to SOAHOST2 Using the unpack Utility
• 4.14 Disabling Host Name Verification for the WLS_WSM2 Managed Server
• 4.15 Starting Node Manager on SOAHOST2
• 4.16 Starting and Validating the WLS_WSM2 Managed Server
• 4.17 Configuring the Java Object Cache for Oracle WSM
• 4.18 Configuring Oracle HTTP Server for the Administration Server and the WLS_WSM-PMn Managed Servers
• 4.19 Registering Oracle HTTP Server With WebLogic Server
• 4.20 Setting the Frontend URL for the Administration Console and Setting Redirection Preferences
• 4.21 Validating Access Through Oracle HTTP Server
• 4.22 Manually Failing Over the Administration Server to SOAHOST2
• 4.23 Validating Access to SOAHOST2 Through Oracle HTTP Server
• 4.24 Failing the Administration Server Back to SOAHOST1
• 4.25 Backing Up the Installation

5 Extending the Domain for SOA Components

• 5.1 Installing Oracle Fusion Middleware for SOA Home
• 5.2 Enabling VIP2 on SOAHOST1 and VIP3 on SOAHOST2
• 5.3 Extending the Domain for SOA Components
• 5.4 Restarting the Administration Server
• 5.5 Configuring Oracle Coherence for Deploying Composites
• 5.6 Setting Connection Destination Identifiers for B2B Queues
• 5.7 Disabling Host Name Verification for the WLS_SOAn Managed Server
• 5.8 Restarting the Node Manager on SOAHOST1
• 5.9 Propagating the Domain Changes to the Managed Server Domain Directory
• 5.10 Starting the WLS_SOA1 Managed Server on SOAHOST1
• 5.11 Validating the WLS_SOA1 Managed Server
• 5.12 Propagating the Domain Configuration to SOAHOST2 Using the unpack Utility
• 5.13 Restarting Node Manager on SOAHOST2
• 5.14 Starting and Validating the WLS_SOA2 Managed Server
• 5.15 Configuring Oracle HTTP Server for the WLS_SOAn Managed Servers
• 5.16 Validating Access Through Oracle HTTP Server
• 5.17 Setting the Frontend HTTP Host and Port
• 5.18 Setting the WLS Cluster address for Direct Binding/RMI invocations to composites
• 5.19 Configuring a Shared JMS Persistence Store
• 5.20 Configuring a Default Persistence Store for Transaction Recovery
• 5.21 Enabling High Availability for Oracle File and FTP Adapters
  • 5.21.1 Using the Database Mutex Locking Operation
• 5.22 Scaling the Oracle Database Adapter
• 5.23 Backing Up the Installation

6 Extending the Domain for WebCenter Components

• 6.1 Installing Oracle Fusion Middleware Home
• 6.2 Extending the Domain for WebCenter Components
• 6.3 Restarting the Administration Server
• 6.4 Disabling Host Name Verification for the WebCenter Managed Servers
• 6.5 Starting Node Manager on SOAHOST1
• 6.6 Propagating the Domain Changes to the Managed Server Domain Directory
• 6.7 Propagating the Domain Configuration to SOAHOST2, WCHOST1, and WCHOST2 Using the unpack Utility
• 6.8 Starting the Node Manager on WCHOST1 and WCHOST2
• 6.9 Starting the WC_Spaces1, WC_Portlet1, and WC_Collaboration1 Managed Servers on WCHOST1
• 6.10 Validating the WC_Spaces1, WC_Portlet1, and WC_Collaboration1 Managed Servers
• 6.11 Starting the WC_Spaces2, WC_Portlet2, and WC_Collaboration2 Managed Servers on WCHOST2
• 6.12 Validating the WC_Spaces2, WC_Portlet2, and WC_Collaboration2 Managed Servers
• 6.13 Setting Up the Java Object Cache
• 6.14 Converting Discussions Forum from Multicast to Unicast
• 6.15 Configuring Clustering for Discussions Server
• 6.16 Configuring the Analytics Collectors
  • 6.16.1 Configure the Collectors
  • 6.16.2 Configure the WebCenter Spaces Servers
• 6.17 Configuring Activity Graph
• 6.18 Configuring WebCenter REST APIs
• 6.19 Configuring Oracle HTTP Server for the WC_Spacesn, WC_Portletn, and WC_Collaborationn Managed Servers on WCHOST2
  • 6.19.1 Virtual Host for the Pagelet Producer
  • 6.19.2 Configuring Microsoft Office Clients
• 6.20 Validating Access Through Oracle HTTP Server
• 6.21 Validating Access Through the Load Balancer
• 6.22 Backing Up the Installation

7 Setting Up Node Manager

• 7.1 About the Node Manager
• 7.2 Changing the Location of Node Manager Log
• 7.3 Enabling Host Name Verification Certificates for Node Manager in SOAHOST1
  • 7.3.1 Generating Self-Signed Certificates Using the utils.CertGen Utility
  • 7.3.2 Creating an Identity Keystore Using the utils.ImportPrivateKey Utility
  • 7.3.3 Creating a Trust Keystore Using the Keytool Utility
  • 7.3.4 Configuring Node Manager to Use the Custom Keystores
• 7.4 Starting the Node Manager on SOAHOST1
• 7.5 Enabling Host Name Verification Certificates for the Node Manager in SOAHOST2
  • 7.5.1 Generating Self-Signed Certificates Using the utils.CertGen Utility
  • 7.5.2 Creating an Identity Keystore Using the "utils.ImportPrivateKey" Utility
  • 7.5.3 Configuring Node Manager to Use the Custom Keystores
• 7.6 Starting the Node Manager on SOAHOST2
• 7.7 Enabling Host Name Verification Certificates for Node Manager in WCHOST1 and WCHOST2
• 7.8 Configuring WebLogic Servers to Use the Custom Keystores

8 Configuring External Services

• 8.1 Configuring the Discussion Forum Connection
  • 8.1.1 Configuring Discussions using WebCenter Spaces
  • 8.1.2 Configuring Discussions using WLST
  • 8.1.3 Creating a Discussions Server Connection for WebCenter From EM
• 8.2 Configuring the Instant Messaging and Presence (IMP) Server Connection
• 8.3 Configuring the Worklist and Workflow Server Connection
  • 8.3.1 Configuring Worklist and Workflow using WebCenter Spaces
  • 8.3.2 Configuring Worklist and Workflow using WLST
• 8.4 Registering the Portlet Producers
  • 8.4.1 Configuring the Portlet Producers using WebCenter Spaces
  • 8.4.2 Configuring the Portlet Producers Using WLST
• 8.5 Configuring Search Services

9 Installing and Configuring Oracle Universal Content Management

• 9.1 About Adding Oracle UCM to a Domain
• 9.2 Extending the Domain to Include Oracle UCM
• 9.3 Propagating the Domain Configuration to WCHOST1 and WCHOST2 Using the unpack Utility
• 9.4 Starting Node Manager on WCHOST1 and WCHOST2
• 9.5 Restarting the Administration Server
• 9.6 Starting and Configuring the WC_UCM1 Managed Server
  • 9.6.1 Configuring the WC_UCM1 Managed Server
• 9.7 Updating the cwallet File in the Administration Server
• 9.8 Starting and Configuring the WC_UCM2 Managed Server
  • 9.8.1 Configuring the WC_UCM2 Managed Server
• 9.9 Configuring Service Retries for Oracle UCM
• 9.10 Configuring Oracle HTTP Server for the WC_UCM Managed Servers
• 9.11 Validating Access Through Oracle HTTP Server
• 9.12 Backing Up the Installation
• 9.13 Configure Oracle Content Server for Oracle WebCenter
  • 9.13.1 Configure Folder_g and WebCenterConfigure Components
  • 9.13.2 Enable Folders_g component
  • 9.13.3 Enable and configure Dynamic Converter component
  • 9.13.4 Enable the 'WebCenterConfigure' component
• 9.14 Registering Oracle Content Server with Oracle WebCenter
• 9.15 Installing and Configuring the Inbound Refinery
  • 9.15.1 Install Inbound Refinery
    • 9.15.1.1 Overview
    • 9.15.1.2 Installation Steps
  • 9.15.2 Configuring Inbound Refinery
    • 9.15.2.1 Configure Inbound Refinery settings
    • 9.15.2.2 Configure Document Conversion
    • 9.15.2.3 Configuring Oracle UCM with the Inbound Refinery

10 Integration With Oracle Identity Management

• 10.1 Credential and Policy Store Configuration
  • 10.1.1 Overview of Credential and Policy Store Configuration
  • 10.1.2 Credential Store Configuration
    • 10.1.2.1 Creating the LDAP Authenticator
    • 10.1.2.2 Moving the WebLogic Administrator to LDAP
    • 10.1.2.3 Reassociating the Domain Credential Store
  • 10.1.3 Policy Store Configuration
    • 10.1.3.1 Prerequisites to Using an LDAP-Based Policy Store
    • 10.1.3.2 Reassociating the Domain Policy Store
  • 10.1.4 Reassociation of Credentials and Policies
    • 10.1.4.1 Cataloging Oracle Internet Directory Attributes
• 10.2 Oracle Access Manager 10g Integration
  • 10.2.1 Overview of Oracle Access Manager Integration
  • 10.2.2 Prerequisites for Oracle Access Manager
  • 10.2.3 Using the OAM Configuration Tool
    • 10.2.3.1 Collecting the Information for the OAM Configuration Tool
    • 10.2.3.2 Running the OAM Configuration Tool
    • 10.2.3.3 Updating the REST Policies
    • 10.2.3.4 Verifying Successful Creation of the Policy Domain and AccessGate
    • 10.2.3.5 Updating the Host Identifier
    • 10.2.3.6 Updating the WebGate Profile
    • 10.2.3.7 Adding Additional Access Servers
    • 10.2.3.8 Configure Delegated Form Authentication
  • 10.2.4 Installing and Configuring WebGate
  • 10.2.5 Configuring IP Validation for the Webgate
  • 10.2.6 Setting Up the WebLogic Authenticators
    • 10.2.6.1 Back Up Configuration Files
    • 10.2.6.2 Setting Up the OAM ID Asserter
    • 10.2.6.3 Setting the Order of Providers
  • 10.2.7 Understanding Virtual Host configuration
  • 10.2.8 Configuring Virtual Hosts for OAM 10g
• 10.3 Oracle Access Manager 11g Integration
  • 10.3.1 Overview of Oracle Access Manager Integration
  • 10.3.2 Prerequisites for Oracle Access Manager
  • 10.3.3 Install WebGate
    • 10.3.3.1 Installing GCC Libraries
    • 10.3.3.2 Installing WebGate
    • 10.3.3.3 Post-Installation Steps
  • 10.3.4 Register the WebGate Agent
    • 10.3.4.1 The RREG Tool
    • 10.3.4.2 Updating the OAM11gRequest file
    • 10.3.4.3 Running the oamreg Tool
    • 10.3.4.4 Copy Access files to WEBHOSTs
    • 10.3.4.5 Set REST policies
  • 10.3.5 Setting Up the WebLogic Authenticators
    • 10.3.5.1 Back Up Configuration Files
    • 10.3.5.2 Setting Up the OAM ID Asserter
    • 10.3.5.3 Setting the Order of Providers
  • 10.3.6 Understanding Virtual Host configuration
  • 10.3.7 Configuring Virtual Hosts for OAM11g
• 10.4 Configuring WebCenter Applications
  • 10.4.1 Configuring System Properties
  • 10.4.2 Configuring the WebCenter Administrator Role
    • 10.4.2.1 Granting the WebCenter Spaces Administrator Role Using WLST
    • 10.4.2.2 Granting the WebCenter Spaces Administrator Role Using Enterprise Manager
  • 10.4.3 Setting Up Discussions Server to Use OAM as SSO Provider
  • 10.4.4 Configuring the Worklist Service for SSO
• 10.5 Configuring WebCenter and BPEL Authentication
  • 10.5.1 Set Authenticator
  • 10.5.2 Set Role Members for BPMWorkflowAdmin Application Role in soa-infra
  • 10.5.3 Configure SOA Callback URLs
• 10.6 Backing Up the Installation

11 Managing the Topology

• 11.1 Monitoring the Topology
• 11.2 Configuring UMS Drivers
• 11.3 Managing Space in the SOA Infrastructure Database
• 11.4 Scaling the Topology
  • 11.4.1 Scaling Up the Topology (Adding Managed Servers to Existing Nodes)
    • 11.4.1.1 Scaling up SOA and WSM
    • 11.4.1.2 Scaling Up WebCenter
  • 11.4.2 Scaling Out the Topology (Adding Managed Servers to New Nodes)
    • 11.4.2.1 Scaling out SOA and WSM
    • 11.4.2.2 Scaling Out WebCenter
• 11.5 Performing Backups and Recoveries
• 11.6 Troubleshooting
  • 11.6.1 Administration Server Fails to Start After a Manual Failover
  • 11.6.2 Error While Activating Changes in Administration Console
  • 11.6.3 OAM Configuration Tool Does Not Remove URLs
  • 11.6.4 Portlet Unavailable After Database Failover
  • 11.6.5 Redirecting of Users to Login Screen After Activating Changes in Administration Console
  • 11.6.6 Redirecting of Users to Administration Console's Home Page After Activating Changes to OAM
  • 11.6.7 Configured JOC Port Already in Use
  • 11.6.8 Restoring a JMS Configuration
  • 11.6.9 Spaces Server Does Not Start after Propagation of Domain
• 11.7 Best Practices
  • 11.7.1 Preventing Timeouts for SQLNet Connections
  • 11.7.2 Auditing

Index