Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Enterprise Deployment Overview

• 1.1 What Is an Enterprise Deployment?
• 1.2 About Oracle Enterprise Content Management Suite
• 1.3 Benefits of Oracle Recommendations
  • 1.3.1 Built-In Security
  • 1.3.2 High Availability
• 1.4 Terminology
• 1.5 Abbreviations
• 1.6 Hardware Requirements
• 1.7 Enterprise Deployment Reference Topology
  • 1.7.1 Oracle Identity Management
  • 1.7.2 Web Tier
  • 1.7.3 Application Tier
  • 1.7.4 Data Tier
  • 1.7.5 Unicast Requirement
• 1.8 What to Install
• 1.9 Installation Procedure

2 Database and Environment Preconfiguration

• 2.1 Database
  • 2.1.1 Setting Up the Database
    • 2.1.1.1 Database Host Requirements
    • 2.1.1.2 Supported Database Versions
    • 2.1.1.3 Initialization Parameters
    • 2.1.1.4 Database Services
  • 2.1.2 Loading the Oracle Fusion Middleware Metadata Repository in the Oracle RAC Database
  • 2.1.3 Backing Up the Database
• 2.2 Network
  • 2.2.1 Virtual Server Names
    • 2.2.1.1 ecm.mycompany.com
    • 2.2.1.2 admin.mycompany.com
    • 2.2.1.3 soainternal.mycompany.com
    • 2.2.1.4 ecminternal.mycompany.com
  • 2.2.2 Load Balancers
  • 2.2.3 IPs and Virtual IPs
  • 2.2.4 Firewalls and Ports
• 2.3 Shared Storage and Recommended Directory Structure
  • 2.3.1 Terminology for Directories and Directory Environment Variables
  • 2.3.2 Recommended Locations for the Different Directories
  • 2.3.3 Shared Storage Configuration
• 2.4 LDAP as Credential and Policy Store

3 Installing the Software

• 3.1 Software Installation Summary
• 3.2 Installing Oracle HTTP Server
  • 3.2.1 Installing Oracle HTTP Server on WEBHOST1 and WEBHOST2
  • 3.2.2 Backing Up the Installation
• 3.3 Installing Oracle Fusion Middleware
  • 3.3.1 Installing Oracle WebLogic Server and Creating the Fusion Middleware Home
  • 3.3.2 Installing Oracle Fusion Middleware Components
    • 3.3.2.1 Installing Oracle Fusion Middleware SOA Suite
    • 3.3.2.2 Installing Oracle Fusion Middleware ECM Suite
  • 3.3.3 Backing Up the Installation
• 3.4 Applying Patchsets to Oracle Fusion Middleware Components

4 Configuring the Web Tier

• 4.1 Configuring the Oracle Web Tier
• 4.2 Validating the Installation
• 4.3 Associating the Oracle Web Tier with the Oracle WebLogic Domain
• 4.4 Configuring Oracle HTTP Server with the Load Balancer
• 4.5 Configuring Virtual Hosts

5 Creating a Domain with Administration Server

• 5.1 Enabling ADMINVHN on SOAHOST1
• 5.2 Running the Configuration Wizard on SOAHOST1 to Create a Domain
• 5.3 Creating boot.properties for the Administration Server on SOAHOST1
• 5.4 Starting Node Manager on SOAHOST1
• 5.5 Starting the Administration Server on SOAHOST1
• 5.6 Validating the Administration Server
• 5.7 Disabling Host Name Verification for the Administration Server
• 5.8 Configuring Oracle HTTP Server for the Administration Server
• 5.9 Registering Oracle HTTP Server with WebLogic Server
• 5.10 Setting the Frontend URL for the Administration Console
• 5.11 Validating Access Through Oracle HTTP Server
• 5.12 Manually Failing Over the Administration Server to SOAHOST2
  • 5.12.1 Assumptions and Procedure
  • 5.12.2 Validating Access to SOAHOST2 Through Oracle HTTP Server
  • 5.12.3 Failing the Administration Server Back to SOAHOST1
• 5.13 Backing Up the Installation

6 Extending the Domain with SOA Components

• 6.1 Backing Up the Installation
• 6.2 Enabling SOAHOST1VHN1 on SOAHOST1 and SOAHOST2VHN1 on SOAHOST2
• 6.3 Running the Configuration Wizard on SOAHOST1 to Extend the Current Domain
• 6.4 Creating a Separate Domain Directory for Managed Servers in the Same Node as the Administration Server
• 6.5 Configuring Oracle Coherence for Deploying Composites
• 6.6 Disabling Host Name Verification for the WLS_SOA Managed Servers
• 6.7 Starting and Validating the WLS_SOA1 Managed Server on SOAHOST1
• 6.8 Propagating the Domain Configuration to SOAHOST2 Using the unpack Utility
• 6.9 Starting Node Manager on SOAHOST2
• 6.10 Starting and Validating the WLS_SOA2 Managed Server
• 6.11 Configuring the Java Object Cache for Oracle Web Services Manager
• 6.12 Configuring Oracle HTTP Server for the WLS_SOA Managed Servers
• 6.13 Setting the Frontend HTTP Host and Port
• 6.14 Validating Access Through Oracle HTTP Server
• 6.15 Configuring a Shared JMS Persistence Store
• 6.16 Configuring a Default Persistence Store for Transaction Recovery
• 6.17 Enabling High Availability for Oracle File and FTP Adapters
• 6.18 Scaling the Oracle Database Adapter
• 6.19 Configuring Node Manager for the WLS_SOA Managed Servers
• 6.20 Configuring Server Migration for the WLS_SOA Managed Servers
• 6.21 Backing Up the Installation

7 Extending the Domain with Oracle UCM

• 7.1 About Adding Oracle UCM to a Domain
• 7.2 Extending the Domain to Include Oracle UCM
• 7.3 Propagating the Domain Configuration to ECMHOST1 and ECMHOST2 Using the unpack Utility
• 7.4 Starting Node Manager on ECMHOST1 and ECMHOST2
• 7.5 Restarting the Administration Server
• 7.6 Starting and Configuring the WLS_UCM1 Managed Server
• 7.7 Updating the cwallet File in the Administration Server
• 7.8 Starting and Configuring the WLS_UCM2 Managed Server
• 7.9 Configuring Service Retries for Oracle UCM
• 7.10 Configuring Oracle HTTP Server for the WLS_UCM Managed Servers
• 7.11 Validating Access Through Oracle HTTP Server
• 7.12 Configuring Node Manager for the WLS_UCM and WLS_IPM Managed Servers
• 7.13 Backing Up the Installation

8 Extending the Domain with Oracle I/PM

• 8.1 About Adding Oracle I/PM to a Domain
• 8.2 Enabling VIP4 and VIP5 in ECMHOST1and ECMHOST2
• 8.3 Extending the Domain to Include Oracle I/PM
• 8.4 Propagating the Domain Configuration to ECMHOST1 and ECMHOST2 Using the unpack Utility
• 8.5 Starting Node Manager on ECMHOST1 and ECMHOST2
• 8.6 Restarting the Administration Server
• 8.7 Configuring a JMS Persistence Store for Oracle I/PM JMS
• 8.8 Configuring a Default Persistence Store for Transaction Recovery
• 8.9 Disabling Host Name Verification for the WLS_IPM Managed Servers
• 8.10 Starting the Oracle I/PM System
• 8.11 Configuring System MBeans for Oracle I/PM
• 8.12 Enabling Oracle I/PM in Oracle UCM
• 8.13 Adding the Oracle I/PM Server Listen Addresses to the List of Allowed Hosts in Oracle UCM
• 8.14 Creating a Connection to UCM System
• 8.15 Configuring BPEL CSF Credentials
• 8.16 Configuring a Workflow Connection
• 8.17 Configuring Oracle HTTP Server for the WLS_IPM Managed Servers
• 8.18 Setting the Frontend HTTP Host and Port
• 8.19 Validating Access Through Oracle HTTP Server
• 8.20 Configuring Node Manager for the WLS_IPM Managed Servers
• 8.21 Configuring Server Migration for the WLS_IPM Managed Servers
• 8.22 Backing Up the Installation

9 Setting Up Node Manager

• 9.1 About Setting Up Node Manager
• 9.2 Changing the Location of the Node Manager Log
• 9.3 Enabling Host Name Verification Certificates for Node Manager
  • 9.3.1 Generating Self-Signed Certificates Using the utils.CertGen Utility
  • 9.3.2 Creating an Identity Keystore Using the utils.ImportPrivateKey Utility
  • 9.3.3 Creating a Trust Keystore Using the Keytool Utility
  • 9.3.4 Configuring Node Manager to Use the Custom Keystores
  • 9.3.5 Configuring Managed WLS Servers to Use the Custom Keystores
  • 9.3.6 Changing the Host Name Verification Setting for the Managed Servers
• 9.4 Starting Node Manager

10 Configuring Server Migration

• 10.1 About Configuring Server Migration
• 10.2 Setting Up a User and Tablespace for the Server Migration Leasing Table
• 10.3 Creating a Multi-Data Source Using the Oracle WebLogic Server Administration Console
• 10.4 Editing Node Manager's Properties File
• 10.5 Setting Environment and Superuser Privileges for the wlsifconfig.sh Script
• 10.6 Configuring Server Migration Targets
• 10.7 Testing the Server Migration

11 Integration with Oracle Identity Management

• 11.1 Credential and Policy Store Configuration
  • 11.1.1 Overview of Credential and Policy Store Configuration
  • 11.1.2 Credential Store Configuration
    • 11.1.2.1 Creating the LDAP Authenticator
    • 11.1.2.2 Moving the WebLogic Administrator to LDAP
    • 11.1.2.3 Reassociating the Domain Credential Store
  • 11.1.3 Policy Store Configuration
    • 11.1.3.1 Prerequisites to Using an LDAP-Based Policy Store
    • 11.1.3.2 Reassociating the Domain Policy Store
  • 11.1.4 Reassociation of Credentials and Policies
    • 11.1.4.1 Cataloging Oracle Internet Directory Attributes
• 11.2 Oracle Access Manager 10g Integration
  • 11.2.1 Overview of Oracle Access Manager Integration
  • 11.2.2 Prerequisites for Oracle Access Manager
  • 11.2.3 Configuring Oracle Access Manager
    • 11.2.3.1 Collecting the Information for the OAM Configuration Tool
    • 11.2.3.2 Running the OAM Configuration Tool
    • 11.2.3.3 Oracle Access Manager Logout Guidelines
    • 11.2.3.4 Verifying Successful Creation of the Policy Domain and AccessGate
    • 11.2.3.5 Verifying That the Cookieless Basic Authorization Scheme Has Been Properly Assigned
    • 11.2.3.6 Updating the Host Identifier
    • 11.2.3.7 Updating the WebGate Profile
    • 11.2.3.8 Adding Additional Access Servers
    • 11.2.3.9 Configuring Delegated Form Authentication
  • 11.2.4 Installing and Configuring WebGate
  • 11.2.5 Configuring IP Validation for the EDG Webgate
  • 11.2.6 Setting Up WebLogic Authenticators
    • 11.2.6.1 Back Up Configuration Files
    • 11.2.6.2 Setting Up the OAM ID Asserter
    • 11.2.6.3 Setting the Order of Providers
• 11.3 Oracle Access Manager 11g Integration
  • 11.3.1 Overview of Oracle Access Manager Integration
  • 11.3.2 Prerequisites for Oracle Access Manager
  • 11.3.3 Setting Up WebGate
    • 11.3.3.1 Installing GCC Libraries
    • 11.3.3.2 Installing WebGate
    • 11.3.3.3 Post-Installation Steps
  • 11.3.4 Registering the WebGate Agent
    • 11.3.4.1 Extracting and Using the RREG Tool
    • 11.3.4.2 Updating the OAM11gRequest File
    • 11.3.4.3 Running the oamreg Tool
    • 11.3.4.4 Changing the inspection.wsil Resource to Use the Basic Authentication Scheme
    • 11.3.4.5 Updating the OAM 11g Server configuration to Support the Basic Cookieless Scheme
    • 11.3.4.6 Copying Access files to WEBHOSTs
  • 11.3.5 Setting Up the WebLogic Authenticators
    • 11.3.5.1 Backing Up Configuration Files
    • 11.3.5.2 Setting Up the OAM ID Asserter
    • 11.3.5.3 Setting the Order of Providers
• 11.4 Validating Access Through Oracle HTTP Server and SSO
• 11.5 Backing Up the Installation

12 Managing the Topology

• 12.1 Monitoring the Topology
• 12.2 Defining an Optimal Input File Strategy for Oracle I/PM
• 12.3 Deploying Composites and Artifacts in SOA Enterprise Deployment Topology
• 12.4 Managing Space in the SOA Infrastructure Database
• 12.5 Configuring UMS Drivers
• 12.6 Scaling the Topology
  • 12.6.1 Scaling Up the Topology (Adding Managed Servers to Existing Nodes)
    • 12.6.1.1 Scale-up Procedure for Oracle I/PM
    • 12.6.1.2 Scale-up Procedure for Oracle UCM
    • 12.6.1.3 Scale-up Procedure for SOA
  • 12.6.2 Scaling Out the Topology (Adding Managed Servers to New Nodes)
    • 12.6.2.1 Scale-out Procedure for Oracle I/PM
    • 12.6.2.2 Scale-out Procedure for Oracle UCM
    • 12.6.2.3 Scale-out Procedure for SOA
• 12.7 Performing Backups and Recoveries
• 12.8 Troubleshooting
  • 12.8.1 Page Not Found When Accessing soa-infra Application Through Load Balancer
  • 12.8.2 Soa-infra Application Fails to Start Due to Deployment Framework Issues (Coherence)
  • 12.8.3 Incomplete Policy Migration After Failed Restart of SOA Server
  • 12.8.4 SOA, I/PM, or UCM Servers Fail to Start Due to Maximum Number of Processes Available in Database
  • 12.8.5 Administration Server Fails to Start After a Manual Failover
  • 12.8.6 Error While Activating Changes in Administration Console
  • 12.8.7 SOA or I/PM Server Not Failed Over After Server Migration
  • 12.8.8 SOA or I/PM Server Not Reachable From Browser After Server Migration
  • 12.8.9 OAM Configuration Tool Does Not Remove URLs
  • 12.8.10 Redirecting of Users to Login Screen After Activating Changes in Administration Console
  • 12.8.11 Redirecting of Users to Administration Console's Home Page After Activating Changes to OAM
  • 12.8.12 Configured JOC Port Already in Use
  • 12.8.13 Using CredentialAccessPermissions to Allow Oracle I/PM to Read Credentials From the Credential Store
  • 12.8.14 Improving Performance with Very Intensive Document Uploads from Oracle
    I/PM to Oracle UCM
  • 12.8.15 Out-of-Memory Issues on Managed Servers
  • 12.8.16 Regenerating the Master Password for Oracle UCM Servers
  • 12.8.17 Logging Out From the WebLogic Server Administration Console Does Not End the User Session
• 12.9 Best Practices
  • 12.9.1 Preventing Timeouts for SQLNet Connections
  • 12.9.2 Auditing
  • 12.9.3 Configuring Oracle Web Service Manager Security Policies for Oracle IP/M and Oracle UCM Web Services

Index