This chapter describes how to upgrade Oracle Entitlements Server 11g Release 2 (11.1.2.1.0) and 11g Release 2 (11.1.2) environments to Oracle Entitlements Server 11g Release 2 (11.1.2.2.0) on Oracle WebLogic Server.
Note:
For information about upgrading Oracle Entitlements Server on IBM WebSphere, see "Upgrading Oracle Entitlements Server 11g Release 2 (11.1.2.1) to 11g Release 2 (11.1.2.2.0)" in the Oracle Fusion Middleware Third-Party Application Server Guide.Note:
This chapter refers to Oracle Entitlements Server 11g Release 2 (11.1.2) and 11g Release 2 (11.1.2.1.0) environments as 11.1.2.x.x.This chapter includes the following sections:
This section describes how to upgrade Oracle Entitlements Server Administration Server to 11.1.2.2.0.
This section includes the following topics:
Section 6.1.1, "Upgrade Roadmap for Oracle Entitlements Server Administration Server"
Section 6.1.2, "Reviewing System Requirements and Certification"
Section 6.1.3, "Shutting Down Administration Server and Oracle Entitlements Server Managed Servers"
Section 6.1.4, "Upgrading Oracle WebLogic Server (If Necessary)"
Section 6.1.5, "Updating Oracle Entitlements Server Binaries to 11.1.2.2.0"
Section 6.1.6, "Upgrading Oracle Platform Security Services Schema"
Section 6.1.7, "Upgrading Oracle Platform Security Services"
Section 6.1.8, "Deleting Certain Directories From the Domain"
Section 6.1.9, "Starting the Administration Server and the Managed Servers"
Section 6.1.10, "Verifying the Oracle Entitlements Server Administration Server Upgrade"
Table 6-1 lists the steps to upgrade Oracle Entitlements Server Administration Server upgrade.
Note:
If you do not follow the exact sequence provided in this task table, your Oracle Entitlements Server Administration Server upgrade may not be successful.Table 6-1 Roadmap for Upgrading Oracle Entitlements Server Administration Server 11.1.2.x.x to 11.1.2.2.0
| Sl No | Task | For More Information |
|---|---|---|
|
1 |
Review system requirements and certifications. |
|
|
2 |
Stop the Administration Server and all the Oracle Entitlements Server Managed Servers. |
See, Shutting Down Administration Server and Oracle Entitlements Server Managed Servers |
|
3 |
Upgrade your existing Oracle WebLogic Server to 10.3.6 (if necessary). |
|
|
4 |
Upgrade the Oracle Entitlements Server binaries to 11.1.2.2.0. |
See, Updating Oracle Entitlements Server Binaries to 11.1.2.2.0 |
|
5 |
Upgrade the Oracle Platform Security Services schemas. |
|
|
6 |
Upgrade Oracle Platform Security Services to 11.1.2.2.0. This task is optional but is recommended. |
|
|
7 |
Delete the |
|
|
8 |
Start all the servers. |
See, Starting the Administration Server and the Managed Servers |
|
9 |
Verify the Oracle Entitlements Server Administration Server upgrade. |
See, Verifying the Oracle Entitlements Server Administration Server Upgrade |
Before you start the upgrade process, you must read the system requirements and certification document to ensure that your system meets the minimum requirements for the products you are installing or upgrading to. For more information see Section 2.1, "Reviewing System Requirements and Certification".
The upgrade process involves changes to the binaries and to the schema. Therefore, before you begin the upgrade process, you must shut down the Oracle Entitlements Server Managed Server(s) and the WebLogic Administration Server.For information about stopping the WebLogic Administration Server and the Managed Servers, see Section 2.8, "Stopping the Servers".
Note:
Upgrading Oracle WebLogic Server is not mandatory. However, Oracle recommends that you upgrade Oracle WebLogic Server to 10.3.6.If you are not using Oracle WebLogic Server 10.3.6, you can upgrade your existing WebLogic Server to 10.3.6 by using the WebLogic 10.3.6 Upgrade Installer. Complete the following steps:
For information about upgrading to Oracle WebLogic Server 10.3.6, see Section 2.3, "Upgrading to Oracle WebLogic Server 10.3.6".
To upgrade Oracle Entitlements Server binaries to 11.1.2.2.0, you must use the Oracle Identity and Access Management 11.1.2.2.0 Installer. During the procedure, point the Middleware Home to your existing 11.1.2.x.x Middleware Home.
For information about updating the Oracle Entitlements Server binaries to 11.1.2.2.0, see Section 2.4, "Updating Oracle Identity and Access Management Binaries to 11g Release 2 (11.1.2.2.0)".
After updating the Oracle Entitlements Server binaries, you must upgrade the Oracle Platform Security Services schemas using Patch Set Assistant. To do this, complete the following steps:
Start the Patch Set Assistant from the location MW_HOME/oracle_common/bin using the following command:
./psa
Select opss.
Specify the Database connection details, and select the schema to be upgraded.
After you upgrade Oracle Platform Security Services schema, verify the upgrade by checking the log file at the location MW_HOME/oracle_common/upgrade/logs/psa<timestamp>.log.
The timestamp refers to the actual date and time when Patch Set Assistant was run. If the upgrade fails, check the log files to rectify the errors and run the Patch Set Assistant again.
For more information about upgrading schemas using Patch Set Assistant, see Section 2.6, "Upgrading Schemas Using Patch Set Assistant".
After you upgrade Oracle Platform Security Services schemas, you must upgrade Oracle Platform Security Services (OPSS). This task is optional; however, it is recommended that you perform this task.
Note:
If you are upgrading Oracle Entitlements Server 11.1.2.1.0 to 11.1.2.2.0, you must upgrade Oracle Platform Security Services if Audit schema is installed. This step is required to upgrade the policy store to include the new 11.1.2.2.0 audit policies.Upgrading Oracle Platform Security Services is required to upgrade the configuration and policy stores of Oracle Entitlements Server to 11.1.2.2.0. It upgrades the jps-config.xml file and policy stores.
For information about upgrading Oracle Platform Security Services, see Section 2.7, "Upgrading Oracle Platform Security Services".
Delete the following directories from the location DOMAIN_HOME/servers/ServerName:
tmp
cache
stage
After the upgrade is complete, start the WebLogic Administration Server, and the Oracle Entitlements Server Managed Server(s).
For information about starting the WebLogic Administration Server and the Managed Server(s), see Section 2.9, "Starting the Servers".
To verify the Oracle Entitlements Server upgrade, do the following:
Verify the schema version in the policy store by running the following SQL query:
select attrval from jps_attrs where attrname='orclProductVersion' and rownum = 1;
Ensure that the schema version is 11.1.1.7.2.
The application MAPI works with both old and new functionalities.
Create a new policy to see if CRUD operations on the policy store artifacts, using their entity managers, are working.
For more information, see "Creating Fine Grained Elements for a Simple Policy" in the Oracle Fusion Middleware Developer's Guide for Oracle Entitlements Server.
The Application Runtime Authorization continues working.
To verify, create an authorization, as mentioned in "Using the PEP API" in the Oracle Fusion Middleware Developer's Guide for Oracle Entitlements Server, and see if it works correctly.
This section descries how to upgrade Oracle Entitlements Server client server to 11.1.2.2.0.
This section includes the following topics:
Section 6.2.1, "Upgrade Roadmap for Oracle Entitlements Server Client"
Section 6.2.3, "Upgrade Oracle Entitlements Server Client to 11.1.2.2.0"
Section 6.2.5, "Verifying Oracle Entitlements Server Client Upgrade"
Table 6-2 lists the steps to upgrade Oracle Entitlements Server Client Server upgrade.
Note:
If you do not follow the exact sequence provided in this task table, your Oracle Entitlements Server Client Server upgrade may not be successful.Table 6-2 Roadmap for Upgrading Oracle Entitlements Server Client 11.1.2.x.x to 11.1.2.2.0
| Sl No | Task | For More Information |
|---|---|---|
|
1 |
Stop all the security module instances, and the servers. |
|
|
2 |
Upgrade the Oracle Entitlements Server Client to 11.1.2.2.0. |
See, Upgrade Oracle Entitlements Server Client to 11.1.2.2.0 |
|
3 |
Start the security modules. |
|
|
4 |
Verify the Oracle Entitlements Server Client Server upgrade. |
Bring down all security module instances, Administration Server, and Managed Servers.
The security module instances shuts down when the Administration Server and Managed Servers are shut down.
To stop the servers, see Section 6.1.3, "Shutting Down Administration Server and Oracle Entitlements Server Managed Servers".
To upgrade Oracle Entitlements Server Client, you must use the 11.1.2.2.0 installer. During the procedure, point the Middleware Home to your existing 11.1.2.x.x Oracle Entitlements Server Client Middleware Home. This upgrades your Middleware Home and Oracle Home from 11.1.2.x.x to 11.1.2.2.0.
This section contains the following topics:
You must install and configure Oracle Entitlements Server Administration Server, as described in Section 6.1.5, "Updating Oracle Entitlements Server Binaries to 11.1.2.2.0".
For more information on obtaining Oracle Fusion Middleware 11g software, see Oracle Fusion Middleware Download, Installation, and Configuration ReadMe.
For more information on installing Oracle Entitlements Server Client 11.1.2.2.0, see "Installing Oracle Entitlements Server Client" in the Oracle Fusion Middleware Installation Guide for Oracle Identity and Access Management.
To verify that your Oracle Entitlements Server Client install was successful, go to your Oracle Home directory which you specified during installation and verify that the Oracle Entitlements Server Client installation files are created.
You must start the security modules by starting the Administration Server and Managed Servers.
To start the servers, see Section 6.1.9, "Starting the Administration Server and the Managed Servers".
To verify, create an authorization, as mentioned in "Using the PEP API" in the Oracle Fusion Middleware Developer's Guide for Oracle Entitlements Server, and see if it works correctly.
The Application Runtime Authorization continues working.