|Oracle® Enterprise Manager Cloud Control Introduction
12c Release 1 (188.8.131.52)
Part Number E25353-01
|PDF · Mobi · ePub|
This chapter provides an overview of the new features available in Oracle Enterprise Manager Cloud Control 12c (184.108.40.206).
Feature areas covered include:
Management Features for Oracle Products Now Provided Via Plug-ins
The core Enterprise Manager Cloud Control features for managing and monitoring Oracle technologies, such as Oracle Database, Oracle Fusion Middleware and Oracle Fusion Applications, are now provided via plug-ins that can be downloaded and deployed using the new Self Update feature. This new “pluggable” framework enables Cloud Control to be updated with management support for the latest Oracle product releases, without having to wait for the next Cloud Control release to provide such functionality. For example, when a new version of Oracle Database is released, you can simply download and deploy the latest Oracle Database plug-in, which will include management support for the latest release.
You can customize the layout and data displayed in target home pages, such as the WebLogic Server home page, to suit your specific needs. The changes you make are persisted for either the target instance and/or for the user currently logged in, enabling you to create customized consoles for monitoring various target types. Specifically, you can:
Customize the layout of regions on a page
Add a region to or remove a region from a page
Specify the data displayed within each region
Select the view that best meets your needs from a set of pre-defined home page layouts
User Interface Updates
Several user interface updates have been made to improve usability and personalization. These include new login and console “Welcome” pages, global search improvements, page and region personalization, a new “favorites” menu, and a new target selector dialog.
Management Agent Enhancements
Improved diagnosis capabilities allow you to monitor Management Agents and receive warnings regarding Agent problems. This reduces the need to install diagnostic patches or to reproduce an Agent issue. It also facilitates the monitoring and management of the health of the Enterprise Manager instance itself, including:
Support Workbench support
Distributed diagnostic patching
Diagnostics Kit integration
Administration of Management Agents as a group
Monitoring of Cloud Control component services such as jobs and notifications
New Credential Model Integration with Job System and Deployment Procedures
The new credential model provides a much easier way of managing credentials across multiple targets and users. This will improve the experience of setting up credentials for jobs and Deployment Procedures and also provide improved security.
Compliance Management and Reporting
This feature provides the ability to evaluate the compliance of targets and systems as they relate to business best practices for configuration, security and storage. To support this functionality, a framework is provided for defining compliance frameworks, compliance standards and compliance standard rules. The feature also recommends configuration changes that will bring your targets and systems into compliance.
Integration is provided with Oracle Business Intelligence (BI) Publisher, an enterprise reporting solution that lets you author, manage, and deliver your highly formatted documents, such as operational reports, eletronic funds transfer documents, government PDF forms, shipping labels, checks, sales and marketing letters, and much more. Built on open standards, Oracle BI Publisher also permits the creation of custom reporting applications that can leverage an existing infrastructure. Reports can be designed using familiar desktop products and viewed online or scheduled for delivery to a wide range of destinations.
Enforced Security for Web Services
Bulk Provisioning/De-provisioning of External Accounts
Managing accounts used to access Enterprise Manager is made easier by enabling users in external identity stores such as LDAP servers to be provisioned in bulk to the Management Repository. You can also de-provision accounts no longer needed.
LDAP authentication is now supported in Cloud Control. Support for the Kerberos strong authentication mechanism is also supported, enabling customers to meet corporate security standards that require strict security compliance.
Kerberos and Secure Socket Layer Authentication Support
Improved authentication allows users to securely manage connections to multiple database targets. Support for Kerberos Authentication Tickets, PKI Certification, and Secure Socket Layer (SSL) ensures that communication between Cloud Control and managed targets is secure. This feature also reduces the time and effort required to manage credentials for target access.
Enterprise Manager Cloud Control includes more than 200 new granular privileges to control access to targets, objects and other resources, enabling Cloud Control administrators to segregate their duties. There are also new out-of-box roles that distinguish among different types of Enterprise Manager users. For example, consider the provisioning designer and provisioning operator roles. The former has greater responsibilities (creates components in the Software Library) than the latter (submits deployments) and must therefore provide more in-depth information in registering with the deployments wizard.
The concept of groups is essential to managing many targets as a single entity. The new Administration Groups feature enables automatic deployment of monitoring settings and compliance standard settings across all targets in a group, simplifying the deployment process across large enterprises.
Template collections, which consist of monitoring templates and compliance standards, streamline the process of deploying the appropriate monitoring settings and compliance standard settings to targets and their groups.
Blackouts primarily support planned maintenance periods for managed targets. Among the enhancements in this release is a consolidated blackout information summary in the General Region of the target home page.
Improved Enterprise Manager Diagnosis Support
This release provides the ability to diagnose issues related to Oracle Management Service and Management Agents by exposing problems related to these components in the Incident Manager. Also, you can now use Support Workbench to easily manage, package and diagnose Enterprise Manager product issues, including those involving OMS and Agents.
Database Creation Via Enterprise Manager Cloud Control
A wizard allows you to create an Oracle Database from within Enterprise Manager Cloud Control. You can create different configurations, including Single Instance and Real Application Clusters (RAC) databases, as well as file system and Automatic Storage Management (ASM) storage options.
Database Upgrade Via Enterprise Manager Cloud Control
You can now upgrade Single Instance and Real Application Clusters (RAC) Oracle databases through Cloud Control. This feature makes it possible to manage upgrades from a single console. You no longer have to access each individual database machine to perform upgrades.
Database Cloning Enhancements
Cloning procedures have been enhanced to capture configuration properties as well as the software payload. This is particularly useful when migrating databases from development to test to production or the reverse. A new EMCLI verb (clone_database) allows for database cloning using the same job type as the existing Clone Database feature of Cloud Control.
Oracle Exadata Server Management Enhancements
Oracle Exadata management capabilities now provide support for full target lifecycle management:
Automatically discover Exadata targets
Automatically create an Enterprise Manager System for end-to-end monitoring
Provide extensive administration capabilities for databases, Exadata cells and Infiniband switches
You can now manage clustered ASM resources as a single target, instead of each individual ASM instance having to be managed separately. Incident management and metric monitoring can be managed for the entire cluster.
Database Configuration Compliance Standards Support
Oracle database configuration data can now be managed within the new configuration and compliance standards frameworks.
This feature allows a DBA to diagnose and troubleshoot a hung or extremely slow database using the memory access mode. This mode is designed to bypass the SQL information retrieval layer and read performance statistics directly from the SGA of the target.
Database Backup and Restore Enhancements
You can now use Enterprise Manager Cloud Control to centrally maintain the settings for Oracle database and file system backups. This enhancement enables you to apply uniform settings to multiple databases and file systems when backing up multiple objects—all in one operation. Users can perform a backup on multiple databases concurrently or sequentially in one deployment procedure. An Oracle Home OSB tape backup can be restored either to the original or to a different location, and the restored Oracle Home can be reconfigured to function in the newly restored location.
Database System Discovery Enhancements
As the database system is now built upon the new target and association model, you can use it to monitor and manage a database's storage, connectivity, and high availability. This also enables you to easily monitor and manage the applications that are dependent on the database. The database discovery functionality is enhanced to work with the new discovery framework and to provide a reliable workflow to create a database system.
Change Plans Added to Change Management Pack
As part of the Oracle Change Management Pack, the new Change Plans function allows application developers and database administrators to encapsulate schema changes needed to be made to a database into a “change plan,” which can be used to document, capture, and apply schema changes. Change Plans are also integrated with developer and DBA tasks into SQL*Developer and Oracle Enterprise Manager task automation. This integration reduces the manual processes between the various stakeholders involved in the process of promoting planned changes across enterprise databases while ensuring the integrity of the process.
Compare Period Advisor
This feature compares the performance of a database over two different time ranges. It analyzes changes in performance, workload, configuration, and hardware to highlight changes between the two time periods. The Compare Period Advisor gives the DBA the ability to compare two arbitrary periods of time.
The Compare functionality has been enhanced with new capabilities such as template support, system level comparison, and change notification. Users can now selectively include or ignore types of differences. Output of a comparison can easily be saved and exported, both in printable (for example, plain text) and data-centric (for example, CSV) formats. Users can select comparison start and end dates and view a history of changes for composite targets.
A new Active Reports function allows users to save performance data into an HTML file. Once saved, the report can be used for offline analysis or sent to other users, including Oracle Support. Active Reports enhances the visual representation of performance data and facilitates the convenient exchange of complex data.
Real Application Testing and Data Masking Integration
Real Application Testing and Data Masking integration provides users with the ability to perform secure testing in situations where data in production needs to be shared by nonproduction users due to organization or business requirements. Typically testing is done in a nonproduction environment or by a different group or organization. This integration addresses a common requirement that the data used for testing be shared in a manner that adheres to data privacy and compliance regulations.
Application Templates for Data Masking and Data Subsetting
This feature provides predefined data masking and data subsetting templates for applications. It allows users to automatically create test systems based on best practices recommendations.
Data subsetting provides the ability to create a smaller sized copy of the original production data that can be given to developers for testing. While it is a data subset, the referential relationships are preserved so that the data set is complete. This allows enterprises to lower storage costs while making production data available to developers for testing, without having to incur the storage footprint of the entire production database.
Application Data Model Support for Data Masking
The application data model (ADM) now stores the sensitive data elements used to generate mask definitions dynamically. Instead of having to manually discover sensitive data, the application data model identifies and stores the sensitive data elements.
Reversible Data Masking
Using encryption and decryption algorithms, reversible masking allows encryption of a user's data deterministically into a format chosen by the user as a regular expression. Unmasking reverses the process to revert back to the original data. This feature is useful in environments where sensitive data needs to be masked and sent to a third party for processing. Coupling integrated masking with the application data model (ADM), an application's data model is now available for certain packaged applications and can serve as a knowledge base containing sensitive column and data relationships.
Performance Diagnostics Enhancements
With the interactive user interface in the Active Session History (ASH) Viewer, users now can visualize the many performance dimensions that were not available to them in earlier releases. The Enhanced Enterprise Manager Performance and Top Activity pages allow users to visualize the multidimensional data in ASH. The ASH viewer enhances the performance troubleshooting capabilities of a DBA by providing the facility to detect skews in workload. Emergency ADDM adds performance diagnostics for databases suffering from severe performance problems.
Streams and XStreams Support
Streams and XStreams configurations can now be managed and monitored using Cloud Control. In addition to improvements in configuration and performance monitoring screens, logical change record (LCR) tracking is available for high-level diagnosis of replication issues. Cloud Control also simplifies the management and monitoring of replicated environments.
Topology Views of Fusion Middleware Environment
This feature allows you to visualize and monitor Oracle Fusion Middleware environments in a graphical display. Oracle Enterprise Manager Cloud Control now provides predefined graphical topologies of the middle-tier environment. These topologies can be against a single SOA composite, an Oracle WebLogic domain, or across multiple Oracle WebLogic domains.
Oracle Exalogic Management Plug-in
This release supports full management capabilities with dedicated dashboards for Oracle Exalogic Elastic Cloud targets, allowing administrators to easily monitor and manage Exalogic hosts, WebLogic Server domains, application deployments, and Coherence clusters running on Exalogic machines.
Oracle Fusion Middleware Provisioning Enhancements
A centralized Middleware Provisioning page now provides access to view, create, edit, and track activity for Fusion Middleware provisioning profiles and deployment procedures. It also provides support for locking deployment procedures by designer to limit the numbers of inputs required from the operator. Support for creating software library entities for Fusion Middleware software is now available. You can create a provisioning profile entity with binaries and domain configuration or a middleware home entity with just binaries. You can clone a WebLogic domain or Middleware home from software library entities. There is a new out-of-box deployment procedure for deploying, re-deploying and un-deploying Java EE applications from the Cloud Control console. You can now access provisioning operations from the WebLogic domain menu. You can clone and scale out/up WebLogic domains without requiring that SOA Suite be installed to the domain.
Oracle Directory Server Enterprise Edition Monitoring
This release includes performance monitoring for Oracle Directory Server Enterprise Edition (formerly Sun Java Directory Server Enterprise Edition). The system collects a wide range of out-of-box performance metrics for monitored Oracle Directory Server Enterprise Edition targets.
PaaS and IaaS Environment Enhancements
This enhancement allows a PaaS (Platform-as-a-Service) user to request an environment with a WebLogic Server cluster and to allow the user to make additional requests to scale out the requested environment. This update also allows an IaaS (Infrastructure-as-a-Service) user to request an environment with two Linux servers and storage and to allow additional requests for more storage to be submitted.
SOA and Support Workbench
Performance Summary Baseline Support
Composite Application Dashboard
The new Composite Application dashboard allows a comprehensive view to be built representing a multi-tier composite application composed of multiple application deployments and Services Oriented Architecture (SOA) composites. You can easily include all additional components (such as databases, service buses, Coherence clusters, and other middleware and non-middleware targets). The Composite Application dashboard provides full visibility across the composite application with access to key monitoring and diagnostics regions, which can be easily customized and personalized. The overall result of this enhancement is a single dashboard view providing not only health information about the application, but also deeper visibility into component health and incidents at a glance.
Java Virtual Machine (JVM) Monitoring and Diagnostics Enhancements
The latest JVM monitoring and diagnostic enhancements include a broad range of capabilities related to ease of use, greater flexibility, and deeper visibility. Most significant, all JVMs are now considered Enterprise Manager targets. This means users have more granular control over their settings, access, and flexibility with respect to the new personalization features for including JVM metrics in other dashboards such as the new Composite Application dashboard. The new JVM home page allows users to quickly enable deep JVM monitoring and drill into heap analysis, live threads, and overall JVM health metrics related to CPU utilization, garbage collection, thread state, and heap consumption. Filters can be deployed with a simple click allowing the JVM to be analyzed by method, request, thread state, database, database state, SQL calls, and even ECID monitoring to isolate transactions. Users now can navigate bi-directionally between live JVM threads and database sessions with the correlation between JVM thread analysis and database diagnostics, enabling DBAs and developers to collaborate in diagnosing cross-tier issues.
Service Level Agreement (SLA) Management Enhancements
Enhancements to the Service Level Agreement (SLA) management framework in Enterprise Manager ensure that it is flexible enough to represent any SLA in your environment. This feature provides a hierarchical SLA framework where Service Level Indicators (SLIs) represent key metrics and Service Level Objectives (SLOs) tie those SLIs together to define service level thresholds and requirements. SLAs use SLOs to define how the business requirements and associated notifications tie in to the overall monitoring service level framework. Using this arrangement, administrators and operations can now represent any SLA required within their environment in a manner that represents both their business and technical requirements.
Enterprise-Wide Web Service Policy Dashboard
If you use Oracle Web Services Manager for security, you can now monitor all of your policies across the enterprise in a single central dashboard. From there, you can drill down into the specifics of any violation on each server.
Middleware Diagnostic Advisor
This release includes a new tool to help administrators quickly resolve performance issues. The Middleware Diagnostic Advisor de-emphasizes administrator expertise in WebLogic internals and cross-tier functioning by taking advantage of WebLogic Server internal metrics. The Middleware Diagnostic Advisor significantly reduces problem resolution time by presenting "root cause" findings shown in context of the most relevant configuration parameters and by offering out-of-box suggestions for each finding. Trending and correlation metrics help administrators understand performance patterns and assist with diagnosing and resolving performance issues.
WebLogic and Fusion Middleware Log Viewer
This release enables you to centrally search logs generated by WebLogic and Oracle Fusion Middleware across all Oracle Fusion Middleware components. You can perform structured log searches based on log properties such as time, severity, or Execution Context ID (ECID). You can also download log files or export messages to a file. This feature provides ready access to log files no matter where they are stored on the file system.
Configuration Comparison Enhancements
Enhancements to the compare functionality include new capabilities such as template support, system level comparison, and change notification. Administrators can now selectively include or ignore types of differences. Output of a compare can easily be saved and exported, both in printable (for example, plain text) and data-centric (for example, CSV) formats. Administrators can select comparison start and end dates and view a history of changes for composite targets.
Configuration Search Enhancements
With the configuration search functionality, administrators are now able to search configuration attributes within an Oracle Fusion Middleware target (such as the Oracle WebLogic Server) as well as follow relationships to other targets. In addition, administrators can also now create and save user-defined searches.
Configuration Compliance Enhancements
The former BEA Guardian product's health checks have been integrated into the Cloud Control console. Consequently, administrators are better able to verify that their WebLogic environment is in compliance with these standards.
Oracle Fusion Applications Management Support
You can now manage and monitor all Oracle Fusion Applications targets across the enterprise, including Fusion instances, product families and application instances, from a single console. Unlike other management tools, Cloud Control enables management of multiple Fusion Applications components within a WebLogic Server domain. This release also supports scale out of clustered Fusion Products and Fusion Applications.
Support Workbench Support for Oracle Fusion Applications
To enhance troubleshooting of Fusion Applications issues, the Enterprise Manager Support Workbench framework now includes incident filtering based on application type and incident consolidation from multiple tiers.
Oracle Fusion Applications Installation Backup and Recovery
You can now perform a full or partial backup and recovery of a Fusion Applications installation. You can back up all components of the Fusion Applications environment, including database and all component file systems, in one procedure. Likewise, you can implement recovery of a full environment or of individual components. This feature replaces the manual Fusion Applications backup and recovery procedure with fully-automated backup and recovery workflows in Cloud Control, based on the System Backup and Recovery framework.
Enterprise Scheduler Service
You can now monitor the performance of Oracle Enterprise Scheduler (ESS) components and jobs.You can also view the status of job requests, including completed job requests by user, application, and work assignment.
Java Virtual Machine (JVM) Diagnostic Integration With Automatic Database Diagnostic Monitor (ADDM)
This feature provides seamless navigation between the JVM Diagnostics and Automatic Database Diagnostic Monitor (ADDM) to allow users to maintain context when dealing with JVM issues that correlate with database calls. By providing database administrators true cross-tier navigation, they can now quickly resolve SQL issues that arise from Java applications by tracing issues directly from the JVM.
Application Replay allows you to capture real application level workload from a production system for a specific time segment and re-run it in a test environment. This feature enables changes in application infrastructure including mid-tier, database, operating system, and hardware to be tested and analyzed using real production application workloads.
Simplified Middleware Diagnostics Deployment and Configuration
This release simplifies the process of enabling Middleware diagnostic features such as JVM Diagnostics and Application Dependency and Performance. In the past, these components were deployed via manual, time-consuming, error prone installation processes. Now, managers and agents for both JVM Diagnostics and Application Dependency and Performance can be deployed and configured from the Cloud Control console interface.
Application Data Model
The Application Data Model feature provides a comprehensive repository of application data attributes, including referential relationships and sensitive data. The model allows application owners to track, store, and report critical metadata about their applications, which simplifies and automates application data management tasks such as data subsetting and data masking.
In most application life cycle processes, enterprises maintain separate test, staging and production systems. Over time, system changes may introduce differences in application data. To detect differences and to troubleshoot problems, administrators, application developers, and application managers can use data comparisons to easily detect and rectify application problems caused by missing or extraneous data, or by variances in data.
Workload and Test Management Console
The new Workload and Test Management Console enables users to capture data such as real application workload, to author performance test scenarios, and to conduct test trials. This data can be used to keep track of trial history, view and compare test results, and perform in-depth application performance diagnostics.
Dashboard and Reporting Enhancements
A new Service Level Agreement (SLA) modeling and reporting solution is now available. With Services and Support gaining focus, this solution is one of the key parts to a successful integration model. A key aspect of the model is the ability to define and monitor SLAs. A new dashboard feature allows users to create a composite application consisting of related middleware and database targets that are loosely coupled together to provide concrete business functionality.
Diagnostic Snapshot Support
The new diagnostic snapshot feature captures both Oracle WebLogic Server and Java Virtual Machine (JVM) data and packages it for later analysis. The feature displays a page of diagnostic snapshots that can be imported into and exported out of Enterprise Manager, allowing much more flexibility with respect to when and where you analyze the data. Should a similar situation arise, the diagnostic snapshot can be preserved to allow for later analysis and comparison. Also, diagnostic snapshots can be shared with Oracle Support to ensure that Oracle can better assist in critical issues where additional support is needed. If you combine this feature with the WebLogic Support Workbench that was introduced in the previous release, Enterprise Manager truly is integrated deeply into the My Oracle Support Portal and Oracle Support in general to streamline support and the exchange of information necessary to resolve issues quickly.
SOA Dehydration Store Diagnostics
This release enhances the Oracle Services Oriented Architecture Suite by providing a dedicated view to analyze the behavior of the SOA dehydration database. In particular, you can monitor SQL performance metrics and table growth specifically in the context of the SOA Suite's use of the database. The view displays both throughput and wait bottleneck data, allowing you to monitor the general health of the target database instance. Using Active Session History, you can track usage data and display it as a table space chart, a growth rate chart, or an execution chart. Accurate CPU performance data is vital to properly administer your SOA applications.
Cloud Management Support
New cloud management features include dynamic provisioning of applications and required resources based on service level requirements, and tracking of resource usage trends and costs. Other capabilities include:
Managing zones and virtual server pools
Viewing and monitoring details of the virtual server pool such as guest virtual machines in the pool, metrics, network, and storage details
Creating networks, storage servers and storage repositories
Deploying assemblies and templates
Schedule Server Availability for Power Management
You can schedule Oracle VM servers to be powered off at certain times; for example, during low demand times such as from midnight to 6:00 in the morning. You can also migrate Guest VMs on other servers or shut them down as part of the physical server shutdown.
View Cloud Infrastructure Topology
You can now view the topology of your cloud infrastructure, and drill down from applications to disk within the cloud. For example, you can drill down from the E-Business Suite middle tier to the Oracle Database to the Guest VM to the Oracle VM server to storage details, viewing each tier in detail.
The new Consolidation Planner helps you determine optimal server consolidation scenarios by leveraging data collected by Cloud Control against business and technical constraints. Using this capability, enterprises can reduce their capital expenditures as well their labor costs by consolidating separate databases and application servers into a smaller consolidated set of systems.
Metering and Chargeback
This feature allows you to track the usage of business-critical resources or metrics by consuming entities (for example, cost centers) and allows businesses to report back the usage charges to the consuming entities. IT departments can accurately share or report costs with business users or business units commensurate with the usage of the resources.
The Incident Manager provides administrators with a central point of control for managing events, incidents and problems within the infrastructure detected by Enterprise Manager. Key features include:
Out-of-box and user-defined views to show incidents of interest (for example, show all incidents assigned to me)
In-context access to diagnostic and resolution capabilities
In-context access to My Oracle Support for access to knowledge base articles and creation/viewing of service requests
Visibility and integration with external ticketing systems to display the status of help desk tickets opened for Enterprise Manager-generated incidents
This feature enables the automation of business and operational processes as they relate to the management of events, incidents and problems. The feature includes a complete set of out-of-box rules for auto-creating incidents for important events. It also provides support for common operational and notification practices used in managing events and incidents.
Incident Framework Integration
The new Incident Framework feature integrates the job and provisioning framework. Numerous enhancements in this release include job-level debugging, EMCLI verbs to enable debug mode, improved error messages, and user and support-level logging. In the event of a failure, relevant logs are archived as part of the incident and attached with support tickets. This feature improves troubleshooting of issues with Oracle Support. Improvement will continue over time as critical logs are archived and attached to tickets automatically.
Automatic Target Discovery
Cloud Control can now automatically discover potential targets on hosts that it manages. Targets that are discovered in this fashion can then be promoted to managed target status. The feature also supports mass deployment of Management Agents to selected targets to facilitate target promotion.
Out-of-Box and User-Defined Systems Support
The out-of-box systems feature supports discovery of Oracle-provided systems as a single entity, including discovery of targets that make up the system as well as the relationships between them. The user-defined systems feature enables you to model and monitor your application system infrastructure in Enterprise Manager by creating systems targets. System target creation involves choosing the targets of the system and defining how system availability should be computed. Both features provide richer support for monitoring the infrastructure systems of managed custom applications.
User interface enhancements to the Metrics Settings include improved usability, support for changing settings for all metrics, and a new threshold suggestions feature. Changing and viewing metric settings are common tasks for many types of users. The enhancements included in this release are designed to improve the user experience and fill in feature gaps based on customer usage.
User Notification Enhancements
This release provides users with more choices in how to be notified of events and incidents. This includes support for the commonly-used SNMP v3 protocol, which provides more security enhancements for notifications. There is more optimized support for the “page me for critical issues, e-mail me for warnings” notification requirement. Notifications can even be prioritized so that more critical event notifications will be delivered before other events.
Availability Events Enhancements
The ability to generate events that may lead to incidents is critical to monitoring target availability. This release adds several features to availability events, including event generation for various availability status values (such as Target Down, Agent Unreachable) and Incident Manager integration to provide details on target availability.
View Service Requests
You can view details for current service requests filed with Oracle Support via Enterprise Manager Cloud Control. The My Oracle Support menu opens the Service Request page where you can monitor, update and create service requests and relate them to the configurations found in Enterprise Manager.
View Patch Recommendations
Patch recommendations identify missing recommended patches issued by Oracle. Oracle compares the patches installed in your configuration with what Oracle recommends, and identifies any missing patches. You can view current patch recommendations for your environment via the Patch Recommendations region available from the Enterprise menu in Cloud Control.
Nonpassword Credentials (Kerberos and PKI Certificate) Support
This release supports management of nonpassword credentials for target access. Because SSH key-based authentication is supported for host access, Kerberos ticket and PKI certificate are supported for database access. The ability to manage nonpassword-based credentials helps you take advantage of strong authentication to secure target access.
Named Credential Audit Support
Accountability and traceability of the use of named credentials now meets a user's security compliance requirement. The system audits all operations on named credentials, including creating, updating, deleting, associating, and accessing a named credential.
Credential Sharing and Recycling Support
As an Enterprise Manager administrator, you can now share and recycle credentials without disclosing the sensitive content of the credentials. These credentials can be shared with other administrators by the control of fine-grained privileges. The sharing and recycling of named credentials significantly reduces the number of credentials that Enterprise Manager must maintain to access managed targets, reducing the time and effort needed to manage the stored credentials.
Centralized and Secure Credential Storage
All credentials used to access managed targets are named, encrypted, and maintained in a centralized logical credential store. This storage saves time and effort for Enterprise Manager administrators who must manage the credentials with tasks such as keeping credentials synchronized.
Fine-Grained Privileges for Access Control of Named Credentials
This release introduces fine-grained privileges to control access to stored and shared credentials. These fine-grained privileges now keep sensitive credentials protected to meet the security requirement, while simplifying and facilitating the sharing of the credential.
Independent Life Cycle of Named Credentials
A named credential's life cycle is no longer tied to specific credential consumers, such as jobs, deployment procedures, or targets. A credential can exist without any entity association. The independent life cycle of named credentials simplifies the management of credentials, from creation to deletion, by separating credentials from the life cycles of other entities in Enterprise Manager.
Named Credentials Testing and Verification
This release introduces the ability to test and verify a named credential and provide enough diagnosis information in the log file for analysis. This feature allows a user to verify the credentials before using them; this prevents use of the wrong credential in jobs or deployment procedures.
Provisioning Bundle Updates Via the Self-Update Feature
You can now access provisioning bundles directly through the Self Update feature, greatly simplifying the process of updating deployment procedures, software library entities, and other provisioning artifacts.
Software Library Entity Enhancements
You can now assign privileges to Software Library entities, allowing the enterprise to implement segregation of duties and thus help in complying with corporate security policies. There is a single console for all Software Library entities. This reduces the time spent searching for entities while providing more meaningful ways to display information. This release also includes support for different storage types, such as agent file system, NFS, and HTTP.
Database Provisioning Enhancements
This release provides a centralized console for managing provisioning profiles and database provisioning deployment procedures. It also provides support for locking deployment procedures by designer to limit the numbers of inputs required from the operator. There also is a new Provisioning Profile, which is a read-only snapshot of an existing database environment.
Cleanup mode enables you to undo all changes made by a deployment procedure. You can trigger this event manually either on failure of the deployment procedure or to undo the provisioning action. This mode is integrated with the Incident Framework, where incidents are automatically created for critical failures. An incident triggers dump scripts to collect debug information, which can then be packaged in an archive and sent to Oracle Support for analysis.
Web Service APIs for Deployment Procedures and Job Submission
With this release, a new set of Web Service APIs provides support for deployment procedures and job submissions. Improvements include a simplification update for EMCLI verbs, which enables system administrators to streamline maintenance processes.
Deployment Procedure Enhancements
Deployment Procedure interviews, the user-friendly wizards that guide you through the provisioning activity, now support saving of default variable values for use by other users. Additional enhancements include role-based access for Deployment Procedures and jobs. There also is support for User-Defined Deployment Procedures (UDDP), which allow automation of custom, and often complex, processes (for example, third-party application provisioning, JRE upgrade, and so forth).
Extensibility Developers Kit
Plug-in and Connector Lifecycle Management
The Self Update feature provides a user-friendly mechanism for downloading and deploying management plug-ins and connectors. There also is a console for managing the lifecycle of plug-ins, enabling standardized management of different plug-in types and simplified deployment of plug-ins to Oracle Management Server and Management Agents.
Connector Integration with Incident Management
Automatic or manual creation of help desk tickets based on Enterprise Manager incidents
Display of ticket ID and status in the Incident Manager
Synchronization of changes in the ticket based on changes in the incident attributes/fields
Creation of tickets only for root-cause incidents
New Metric Extensions Model Replaces User-Defined Metrics
Metric Extensions are the next generation of User-Defined Metrics, enabling you to extend Enterprise Manager to monitor conditions specific to the enterprise's environment by creating new metrics for any target type. A new feature enables migration of existing User-Defined Metrics to Metric Extensions.
Additional enhancements include:
Improved support for data collection mechanisms beyond operating system and SQL queries
Create/update life cycle support for metrics, including versioning and deployment
Implicit support for all features that support metrics, such as the System Dashboard and reporting capabilities
Monitoring and Diagnostics
Select multiple metrics at a time for correlation
Overlay metrics for comparison and better analysis
Compare performance impact on periodic basis
Maintain historical views for trend analysis
A new system topology view provides a better overview of associations and dependencies, complete with drill-down capabilities for detailed analysis. Enhanced log file alerts improve your ability to discover log file patterns and to generate an alert on any matching pattern. Improved monitoring support includes monitoring for push replication, reap sessions, and transactional caches.
A new interface for Cache Data Management provides query-based data operations and a central user interface for key cache operations. This new feature saves time in cache operations and simplifies administrator tasks. Queries can now be saved for future reference. Cache data can be exported and imported to a file. This feature gives administrators the ability to plan the downtime without loosing the cached data and to better prepare caches in a new data center (such as in a high availability scenario).
This release provides support for node updating. You can automate the update process tasks (for example updating configuration files, application JARs, and so forth) on the nodes, which reduces risk and time. A central repository is now available for asset management. Provisioning enhancements include support for WKA-based topologies, additional development and production options (such as Mode of Deployment), and improved flexibility in provisioning.
Improved configuration management allows you to set configuration parameters to make historical comparisons available. You can save your configuration into a repository as a reference image or gold image and then compare it against a current configuration. This feature allows you to quickly identify performance and availability issues related to configuration changes.