10 Verifying the Upgrade and Decommissioning the Source Oracle Homes

Use this chapter to verify that the upgrade to Oracle Identity Management 10g (10.1.4.0.1) was successful and to decommission the 10g (9.0.4) or 10g Release 2 (10.1.2) Oracle Identity Management Oracle home.

This chapter contains the following sections:

• Task 1: Verify the Oracle Identity Management Upgrade

• Task 2: Decommission the OracleAS Identity Management Source Oracle Home

10.1 Task 1: Verify the Oracle Identity Management Upgrade

Use the following procedure to verify that the upgrade was successful.

Step 1   Verify the Application Server Control Console Port

Verify that you can access the Application Server Control Console by entering the Application Server Control URL in your Web browser. Use the port number assigned during the 10g (10.1.4.0.1) installation.

Note: You can locate the URL for the 10g (10.1.4.0.1) Application Server Control Console by checking the contents of the following file in the 10g (10.1.4.0.1) Oracle home: DESTINATION_ORACLE_HOME/install/readme.txt DESTINATION_ORACLE_HOME\install\readme.txt

Step 2   Verify the Administration Passwords

After you upgrade your Oracle Application Server instance, use the following passwords in the destination Oracle home:

• To log in to the Application Server Control Console, use the ias_admin password you defined during the installation of the destination Oracle home.

• To log in to the OracleAS Web Cache Manager, use the OracleAS Web Cache Administrator password you used in the OracleAS Web Cache source Oracle home.

Step 3   Test OracleAS Single Sign-On Connectivity

After the Identity Management upgrade is complete, log in to Oracle Application Server Single Sign-On as user ORCLADMIN. A successful login indicates that Oracle Application Server Single Sign-On and Oracle Internet Directory are functioning after the Identity Management upgrade.

1. In a browser, access the Oracle Enterprise Manager 10g Application Server Control Console in the destination Infrastructure Oracle home by entering its URL. Ensure that you provide the correct host name and port number. For example:

   http://infrahost.mycompany.com:1812

   Oracle Enterprise Manager 10g displays the Farm page, with the Oracle Application Server 10g (10.1.4.0.1) Identity Management instance in the Standalone Instances section.

2. Click the link for the Identity Management instance.

   The System Components page appears.

3. Verify that the status of the Oracle HTTP Server, Oracle Internet Directory, and Oracle Application Server Single Sign-On components is Up.

4. In the browser, access the ORASSO page by entering its URL. Ensure that you enter the correct host name and port number for the upgraded Oracle HTTP Server. For example:

   http://infrahost.mycompany.com:7777/pls/orasso/ORASSO.home

   The ORASSO page appears.

5. Click the Login link (in the upper right corner of the page).

   A page appears with User Name and Password fields.

6. Enter ORCLADMIN in the User Name field, and the password you have selected for ORCLADMIN in the Password field.

7. Click Login.

   The Oracle Application Server Single Sign-On Server Administration page appears, thus validating the basic operation of the upgraded Identity Management components (Oracle Application Server Single Sign-On and Oracle Internet Directory).

Step 4   Test Oracle Application Server Certificate Authority

If you have upgraded Oracle Application Server Certificate Authority (OCA), you can verify that the upgrade completed successfully by accessing the OCA User page.

Open your Web browser and enter the following URL:

https://infrahost.mycompany.com:6600/oca/user

Check to be sure that you can log in as a regular user and view the user's existing certificates. This ensures that OCA is working with Oracle Internet Directory and OracleAS Single Sign-On.

Note: After the upgrade, you will notice two OCA partner applications in the OracleAS Single Sign-On Partner Application administration page. One is the partner application for the 10g (9.0.4) OCA installation and the other is the partner application for the upgraded 10g (10.1.4.0.1) OCA installation. The original partner application can be removed. The upgraded OCA will be running on port 6600 after upgrade, instead of port 4400.

10.2 Task 2: Decommission the OracleAS Identity Management Source Oracle Home

After you upgrade your OracleAS Identity Management Oracle home, the source Oracle home can eventually be deinstalled. However, before you deinstall the source Oracle home, be sure to perform the following steps.

Step 1   If Necessary, Relocate the Database Datafiles, Control Files, and Log Files

If you upgraded OracleAS Identity Management as part of a colocated Infrastructure, then you also upgraded the OracleAS Metadata Repository database to a supported database version.

After you upgrade the OracleAS Metadata Repository database using the OracleAS Upgrade Assistant, the datafiles, control files, and log files for the database remain in the source Oracle home. Before you deinstall or remove the Oracle home, you must first relocate the database files.

See Also: Section 6.4, "Task 4: Relocate the Database Datafiles, Control Files, and Log Files"

Step 2   Preserve Any Important Application Files and Log Files

If there are application files or log files in the source Oracle home that are being referenced or used by the destination Oracle home, you should move them to another location before you decommission the source Oracle home, and, in the destination Oracle home, change any references to the files to the new location.

Step 3   Remove the Source OracleAS Identity Management Instance from the partner application list

After you upgrade to Oracle Identity Management 10g (10.1.4.0.1), the source OracleAS Identity Management instance that you upgraded remains in the list of OracleAS Single Sign-On partner applications.

From the command line, set the ORACLE_HOME environment variable and then run the following command:

DESTINATION_ORACLE_HOME\bin\ssoreg.bat 
  -oracle_home_path path_to_oracle_home 
  -site_name name_of_sso_site 
  -config_mod_osso TRUE 
  -mod_osso_url partner_app_URL 
  -update_mode DELETE 
  -config_file path_to_osso_config_file

Note that the -config_file argument is necessary only when SSL is enabled.

See Also: "Configuring and Administering Partner Applications" in the Oracle Application Server Single Sign-On Administrator's Guide for specific information on the syntax and available arguments to the ssoreg.sh utility

Step 4   Remove the Source OracleAS Identity Management Instance from the OracleAS Farm

After you upgrade to Oracle Identity Management 10g (10.1.4.0.1), the source OracleAS Identity Management instance that you upgraded remains in the list of instances on the Application Server Control Console Farm page.

To remove the source instance from the farm and from the Farm page, use the following command in the source Oracle home:

SOURCE_ORACLE_HOME\dcm\bin\dcmctl leavefarm

See Also: Distributed Configuration Management Administrator's Guide for more information about the dcmctl leavefarm command "Introduction to Administration Tools" in the Oracle Application Server Administrator's Guide for more information about the Farm page in the Application Server Control Console

Step 5   Deinstall the OracleAS Identity Management Source Oracle Home

When you are certain that the upgrade was successful, you have all of the necessary backups, and have no plans to revert to the source Oracle home, you may elect to remove the files from the source Oracle home.

Use the Oracle Universal Installer to deinstall the instance.