Oracle® Enterprise Manager Ops Center

Concepts Guide

11g Release 1 Update 3 (11.1.3.0.0)

E17968-04

November 2011

Oracle Enterprise Manager Ops Center Concepts Guide, 11g Release 1 Update 3 (11.1.3.0.0)

E17968-04

Copyright © 2007, 2011, Oracle and/or its affiliates. All rights reserved.

Primary Author:  Laura Hartman

Contributing Author:

Contributor:

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, duplication, disclosure, modification, and adaptation shall be subject to the restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software License (December 2007). Oracle America, Inc., 500 Oracle Parkway, Redwood City, CA 94065.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Contents

Preface

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

1 Introduction

- Enterprise Manager

- The Enterprise Manager Ops Center Solution

2 New Features

3 Architecture

- Knowledge Base

- Enterprise Controller

- Proxy Controller

- Agent Controllers

4 User Interface

- Navigation Pane

- Center Pane

- Actions Pane

- Jobs Pane

5 Key Capabilities and Features

- Simplified Asset Discovery

- Automated Provisioning

- Firmware Provisioning

- OS Provisioning

- Intelligent OS Update Management

- System Catalogs

- Methods to Detect and Deploy Updates

- Extensive Monitoring

- Dynamic Problem Management

- Comprehensive Reports

- Problem Reports

- Firmware Compliance Report

- Update Reports

- Server Provisioning Reports

- Hardware Configuration Reports

- Virtualize an OS or Hardware

- OS Virtualization

- SPARC Hardware Virtualization

- Virtual Pools

6 Next Steps

Preface

The Oracle® Enterprise Manager Ops Center Concepts Guide provides an overview of the Ops Center software. The goal of this book is to help you understand the concepts of the Ops Center design.

Audience

This document is intended for anyone interested in an overview of Oracle Enterprise Manager Ops Center features and functionality.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Related Documents

For more information, see the following documents in the Oracle Enterprise Manager Ops Center 11g Release 1 documentation set:

- Oracle Enterprise Manager Ops Center Release Notes

- Oracle Enterprise Manager Ops Center Site Preparation Guide

- Oracle Enterprise Manager Ops Center Installation Guide for Oracle Solaris Operating System

- Oracle Enterprise Manager Ops Center Installation Guide for Linux Operating Systems

- Oracle Enterprise Manager Ops Center User's Guide

- Oracle Enterprise Manager Ops Center Provision and Update Guide

- Oracle Enterprise Manager Ops Center Advanced User's Guide

- Oracle Enterprise Manager Ops Center Administration Guide

- Oracle Enterprise Manager System Monitoring Plug-in for Oracle Enterprise Manager Ops Center Guide

- Oracle Enterprise Manager Ops Center Reference Guide

Conventions

The following text conventions are used in this document:

Convention

Meaning

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, code in examples, text that appears on the screen, or text that you enter.

1 Introduction

This document provides an overview of the Oracle Enterprise Manager Ops Center software. The goal of this book is to help you understand the concepts of the Enterprise Manager Ops Center design.

Organizations encounter a variety of IT and system management challenges. Many are moving toward more complex data centers that incorporate virtualization technology and disparate operating system, hardware, and storage device assets. System administrators are looking for effective methods for managing data center complexities, finding new solutions for the major challenges that they face, reducing costs, and saving time.

Today system management challenges include streamlining operations to control operation and maintenance costs, deploying new assets quickly, and reducing downtime. Oracle Enterprise Manager Grid Control and Enterprise Manager Ops Center can help address these challenges.

The following topics are covered:

- New Features

- Architecture

- User Interface

- Key Capabilities and Features

- Next Steps

Enterprise Manager

Enterprise Manager Grid Control and Enterprise Manager Ops Center are complementary technologies that are designed to provide an enterprise-level data center management solution for all levels, from applications to storage disks. Enterprise Manager Grid Control software enables businesses to improve application, middleware, and database performance. Enterprise Manager Ops Center software enables businesses to manage the operating systems, virtual machines, servers, and storage devices. Together, they deliver unparalleled data center infrastructure and asset maintenance and reliability.

Figure 1-1 Managed Asset Stack

Each application monitors managed assets, or targets, in different sections of the data center asset stack. Enterprise Manager Grid Control manages applications, middleware, databases, and operating systems and Enterprise Manager Ops Center manages operating systems, virtual machines, servers, and storage devices.

You can install and configure the applications to work together, or you can use each application individually. This document focuses solely on the features and functionality of the Enterprise Manager Ops Center software.

The Enterprise Manager Ops Center Solution

Enterprise Manager Ops Center is Oracle's comprehensive system management solution for managing the physical and virtual operating systems, servers, and storage devices (or assets) in your data center. With Enterprise Manager Ops Center you can use the discovery and management features to add your data center assets to the list of managed assets in Enterprise Manager Ops Center. You can provision, update (patch), monitor and manage the physical and virtual managed assets in one or more of your data centers from a single console, regardless of where the asset is located.

Figure 1-2 Oracle Enterprise Manager Ops Center Solution

2 New Features

This Enterprise Manager Ops Center release contains a several enhancements and new features, including the following:

- Dashboards – View dashboards for a summary of a group of assets, or an individual asset, including a graphical representations of the asset status and membership.

- Problem management – Monitoring parameters, rules, and editable thresholds are available to monitor your managed assets. If a problem is identified, the problem management system is activated. Known issues and the assigned administrators appear in the Message Center. A system of annotations provides a wide range of options, from updating the status to automatically run scripts to resolve a specific problem.

- Links between Enterprise Manager Ops Center and Enterprise Manager Grid Control – When an asset is managed in Enterprise Manager Ops Center and Enterprise Manager Grid Control, you can view configuration, health, and performance information and problems in the user interface of each software product.

- Enhanced profile functionality – New profile types enable you to create software profiles and operational profiles that contain your custom executable scripts. To be deployed, profiles must be associated with a plan.

- Operational plans – Used to deploy a single operational profile script. An operational plan can run as an individual plan, or as a step within a deployment plan. You can run the scripts independent of local software, and can use them to perform specific tasks in your environment, such as configuration options, or to assist in problem management.

- Deployment plans – Combine one or more profiles and scripts to create a multi-step plan that facilitates faster and more consistent provisioning and updating. Use deployment plans to combine several different tasks into a consistent deployment.

- Plan management – Contains the templates, profiles, and plans needed to create and deploy plans. Plan management also includes a Problems Knowledge Base, where you can create a database of known issues. You can use operational profiles and annotations to associate recommended or automated actions as a response to known issues.

- Hardware management – Update system component firmware and track hardware configuration changes over time. Increase energy efficiency by tracking energy utilization for ILOM x64, ILOM CMT, and M-Series servers and chassis and manage the power budget of ILOM 3.0 systems.

- Hardware support – Hardware support now includes Oracle's Sun ZFS Storage Appliance product line, Magnum Infiniband switches and Opus 10GBE switches. Enhancements for creating and displaying the M-series control domain and chassis.

- Improvements for storage and library management – Each virtual host can now store logical domain and zone metadata in any mounted file system it can access. All of the filesystems that are accessible to a virtual host are listed on its Libraries tab.

- Oracle Solaris Cluster management – Discover, monitor and view Oracle Solaris Clusters

- Virtualization management – Additional features for managing Oracle Solaris Zones, Oracle VM Servers for SPARC, and virtual pools.

- New and improved reports – New reports are available and some existing reports have been revised.

3 Architecture

The architecture and remote management capabilities are designed to help increase availability and utilization and minimize downtime across a single or distributed data center. Enterprise Manager Ops Center is designed to scale based on the size of your organization and the functionality most often used. The Enterprise Controller, Proxy Controller, Agent Controller, and user interface are the major architectural components that control and manage the functionality. You can customize scaling for your organization by the type of hardware on which you deploy the components and the number of components that you deploy.

The illustration shows a basic deployment. Information from the Knowledge Base, or KB, is downloaded to the Enterprise Controller. The Enterprise Controller stores the information along with basic management tools, such as the profiles and plans. The Proxy Controller distributes the load. An Agent provides the update and management capabilities for an operating system. Each component is discussed in more detail below.

Figure 3-1 Basic Deployment

Knowledge Base

The KB is the repository for metadata about Oracle Solaris and Linux OS components. The metadata includes patch dependencies, standard patch compatibilities, withdrawn patches, download and deployment rules. The KB keeps track of OS download URLs and retrieves the components from the appropriate vendor download site.

By default, Enterprise Manager Ops Center is configured to connect to the Knowledge Base at Oracle for OS update metadata. You can run the software without a direct connection to Oracle.

Enterprise Controller

The Enterprise Controller is the central server for Enterprise Manager Ops Center. It stores management information, such as firmware and OS images, plans, profiles, and policies. It also stores the asset data and site customizations. All operations, or jobs, are initiated from the Enterprise Controller.

The Enterprise Controller connects to the Internet to download OS updates, Oracle Solaris images, and updates for the Enterprise Manager Ops Center software itself. When an update is requested, the Enterprise Controller retrieves the software from the KB or vendor. This mode of operation is called Connected mode and is the default setting. If your site policy does not allow for an Internet connection, you can operate Enterprise Manager Ops Center in Disconnected mode.

In disconnected mode, you can use Enterprise Manager Ops Center in a secured environment that does not allow Internet access. In this mode, you must manually load the Knowledge Base data and updates to the Enterprise Controller. For the Oracle Solaris OS, Enterprise Manager Ops Center provides a script that you can run on a system that is connected to the Internet and then you upload the baselines and updates on the Enterprise Controller. In effect, you create a static KB on the Enterprise Controller that you maintain. The script only works with Oracle Solaris OS. For all other supported operating systems, you can obtain the updates in a media format, such as a CD or DVD, and upload the information to Local Content in Enterprise Manager Ops Center.

You can run the software in disconnected mode for normal operations, and then temporarily switch to connected mode to download the latest updates and metadata from the KB or third-party vendors for update jobs. An Enterprise Manager Ops Center administrator with the proper permissions, can change the connection mode at any time. The connection mode option enables you to use a combination of Connected and Disconnected modes to maintain your data center.

Proxy Controller

The Proxy Controller distributes the network load and provides for fan-out capabilities to minimize network load. A Proxy Controller links the managed assets to the Enterprise Controller and acts as a proxy for operations that must be located close to the managed assets, such as OS provisioning. It performs management operations on assets and report the results to the Enterprise Controller. The actions required to manage, provision, update, and monitor assets are handled as a queue of jobs.

You must have at least one Proxy Controller. You can have a co-located Proxy Controller. That is, the Proxy Controller and Enterprise Controller software are installed on the same system. The preferred method is to install the software on separate machines to enhance performance and scalability.

In a small data center, you can co-locate one Proxy Controller with the Enterprise Controller on the same system. The simplest architecture puts a co-located Enterprise Controller and Proxy Controller on the same subnet.

Figure 3-2 Co-located Proxy Controller

While this architecture deploys a working Enterprise Manager Ops Center solution, most sites benefit from using multiple Proxy Controllers because of the following conditions:

- The data center has a large number of assets to manage

- Some assets are in remote locations and you want to maintain performance

- You anticipate creating a large number of jobs, which you want to run concurrently

- Some assets are behind a firewall and need their own Proxy Controller

- Some assets are on their own subnets and need a Proxy Controller on that subnet for OS provisioning

In this example one Proxy Controller is designated for the Management Network and another Proxy Controller is for the Data Network. The following illustration shows how you can associate one Proxy Controller with the managed Service Processors and associate another Proxy Controller with the operating systems.

Figure 3-3 Complex Deployment

Agent Controllers

An Agent Controller, or Agent, is lightweight Java software that responds to Enterprise Manager Ops Center management, OS update, and monitoring operations. An Agent identifies the OS asset and can respond to inquiries from the Proxy Controller. Hardware management does not require the Agent. For hardware assets, a Proxy Controller runs commands on the system and provides the results to the Enterprise Controller. OS assets and virtual OS instances use Agent software to perform management operations. During asset discovery, you configure it to communicate with a specific Proxy Controller. If needed, the Agent is automatically installed when you manage the asset.

When managing an OS asset with Enterprise Manager Ops Center, the Agent receives the command from its Proxy Controller, performs the required action, and notifies the Proxy Controller of the results.

4 User Interface

The user interface (UI) displays a consolidated view of the physical and virtual managed resources in your data centers. You can view dashboards, graphs, and charts for a high-level view of the managed assets in your data center, or drill down to details as granular as power usage and CPU status. Multiple users can log in to the console at the same time to manage one or more remote data centers. While the software does provide CLI and API commands, the UI provides the most robust functionality. The following graphic is the home page, which includes a dashboard summary of all of your managed assets. Information and tasks are organized in the left Navigation pane. Expand a section to see the available options and view details in the center pane. The Jobs pane on the bottom of the page provides details about operations that are scheduled, in progress, and completed. For example, to create a report, expand the Reports section and select the report. When you run the report, a job is launched and the job status appears at the bottom of the UI.

Figure 4-1 High-level View of the User Interface

Navigation Pane

The Navigation pane, which is the left pane, provides first level navigation. It gives you access to the following information:

- Message Center – Displays problems, service requests, and notifications.

- Assets – Lists all assets that are known to Enterprise Manager Ops Center. You can view all managed assets from this pane, or drill down to a specific group of assets, such as operating systems.

- Plan Management – Access pre-defined deployment plan templates, your customized plans, profiles, and policies. The Problems Knowledge Base is also accessed from Plan Management.

- Libraries – Store your firmware and OS images, OS update components and metadata, local content, and virtualization content. Local content is information, such as updates, software, or other files that you upload into Enterprise Manager Ops Center are available in the Software Libraries section. Oracle VM Server for SPARC virtualization content, including logical domains, ISO images, and backup images, are available in the Storage Libraries.

- Reports – Create reports or report templates, including OS update, firmware, hardware, and asset reports.

- Managed Networks – View details about the virtual networks defined for Enterprise Manager Ops Center.

- Administration – Perform administrative functions, such as defining users and user roles, and managing the Enterprise Manager Ops Center components.

Expand a section in the Navigation pane to see details. In the following graphic, the Assets section is expanded to display the asset groups. Expand a group to see the hardware, storage devices, operating systems, and guests that are managed in Enterprise Manager Ops Center.

Figure 4-2 Navigation Pane

Center Pane

The center pane displays the details of the item that you selected in the Navigation pane. This pane contains tabs to further define the information presented. In many cases, the first tab is a Dashboard that contains a summary of the information available for the selection. The graphic below shows a Dashboard displayed in the center pane. The dashboard shows the physical and virtual relationships between the managed assets. For example, if an Oracle VM Server for SPARC is selected, a summary appears at the top of the dashboard, including a summary of any known problems. Below the summary is a membership graph that shows all physical and virtual associations, including operating system, logical domains, networks, and hardware.

Figure 4-3 Center Pane

Actions Pane

The Actions pane, which is the right pane, contains a list of actions appropriate for the selected resource, such as defining an new OS update job. Many actions launch a pop-up wizard page that guides you through the task. In some cases you can schedule the job to start performing the task during non-peak hours or you can create a recurring schedule. When you finish defining the task, the job is started and the job name is appears at the bottom of the Actions pane.

Figure 4-4 Actions Pane

Jobs Pane

The Jobs status pane, which is at the bottom of the UI, contains job status icons for all submitted jobs. You can expand this pane to see a list of all scheduled jobs. The graphic below shows the expanded jobs pane with the status and owner for each job.

Figure 4-5 Jobs Pane

Use the jobs pane to check on job status and progress. Double-click on a job to drill down for more job details and logs.

5 Key Capabilities and Features

Enterprise Manager Ops Center offers comprehensive system management for physical and virtual Oracle hardware and heterogeneous operating systems. The following are some software's key capabilities:

- Simplified Asset Discovery

- Automated Provisioning

- Intelligent OS Update Management

- Extensive Monitoring

- Dynamic Problem Management

- Comprehensive Reports

- Virtualize an OS or Hardware

Simplified Asset Discovery

Discover the servers, storage devices, operating systems, and virtual systems in your data center using one of several standard protocols, including SSH, IPMI, Telnet, SNMP, and service tags. A service tag enables Enterprise Manager Ops Center to automatically locate the asset. Each product that contains a service tag is uniquely identified and basic information, such as product and platform data, is collected.

Once discovered, you decide which assets you want to begin managing with Enterprise Manager Ops Center. Managing assets enables you to use Enterprise Manager Ops Center to provision, monitor, and update the hardware or operating system. Updating operating systems and some monitoring capabilities require the Agent software. If required, the Agent software is installed when you first manage the asset.

Managed assets are automatically displayed in a hierarchy in the managed assets tree and are added to one or more groups based on the asset type. Groups are administrative structures that organize assets so that you can locate an asset quickly and perform operations on all assets of the same type. An asset can belong to multiple groups.

Groups enable you to quickly locate and view assets of a specific type. You can also act on groups, such as running compliance checks on all assets in the group, changing monitoring thresholds and updating discovery credentials. The Services group and subgroups contain all assets organized by the actions for which they can be targets. For example, the OS Update group contains all operating systems that can be updated.

Enterprise Manager Ops Center contains two types of groups:

- Smart groups – Contain assets of the same type. These default groups are used to automatically group assets by major asset type, such as Operating Systems, Servers, Chassis, Storage, and Network Switches. Within these Smart Groups, a subgroup is created for each type of asset that is managed, such as Oracle Solaris 10 and Oracle Linux.

- User-defined groups – Can contain any type of asset and can be organized by any criteria. You can configure rules for user-defined groups that automatically add assets with specific characteristics to the group.

Managed assets are automatically added to groups based on the asset type. The following is an example of the view of the Operating Systems Smart Group in the Navigation pane, you can expand the tree to view the assets that are members of the group.

Figure 5-1

Automated Provisioning

Provisioning a complex data center is a daunting task that can be repetitious, inconsistent, and error-prone. Enterprise Manager Ops Center facilitates automated firmware provisioning and OS provisioning by using a combination of image libraries, profiles, and deployment plans. You can maintain a library of golden images on the Enterprise Controller and use the profiles and plans to control how, when, and where the images are applied. A user with Enterprise Manager Ops Center administrator privileges can manage a library of firmware and OS images and use profiles to establish controls for how and when the images are applied.

A profile is a template or script that defines deployment and configuration requirements. Use profiles to enforce consistency in tasks, such as configuring hardware assets, deploying firmware, provisioning operating systems, and updating Oracle Solaris and Linux operating systems. With profiles, you can consistently define what is allowed, and not allowed, to be installed on a system and enable images to be applied consistently across one or more data centers.

To provide greater automation, you can use deployment plans to define the sequence of operations or steps that must be performed to deploy an asset, the profiles to be used, and the target systems or hosts. When you use profiles as a step in a deployment plan with multiple targets, you can configure many assets simultaneously.

Enterprise Manager Ops center provides a comprehensive set of templates for all assets, including the virtualization platforms and logical domains. Deployment templates contain the basic building blocks that you can use to create your customized plans.

Firmware Provisioning

Use firmware provisioning to add or update firmware on servers or chassis. You create and maintain the library of firmware images in the Enterprise Controller Software Library.

A firmware image is a copy of a particular system firmware with associated metadata. The firmware metadata helps determine compatibility between a firmware image and a target system. The required metadata includes the firmware type, what system or systems the firmware is for, the version of the firmware, and any dependent firmware (other firmware on which the firmware depends).

To control how the provisioning job is performed, the administrator creates customized firmware profiles. A firmware profile is a collection of one or more firmware images and policies that defines how to update one or more firmware images on a system. You can also use a firmware profile to generate compliance reports for a set of servers.

After the images and profiles are established, you can schedule firmware update and provisioning jobs to run immediately, or on a specific date and time.

OS Provisioning

OS provisioning enables you to install supported operating systems onto systems that are attached to your network. You can provision, or install, the OS from the Enterprise Manager Ops Center UI instead of from the individual systems.

Just like with firmware provisioning, administrators maintain a library of OS images in the Software Library. To control how the provisioning job is performed, the administrator creates provisioning profiles. Once the images and profiles are established, you can schedule provisioning jobs to run immediately, or on a specific date and time. You can choose provision a single system or a group of systems.

An OS profile specifies how to configure an OS as it installs onto a set of target systems. An OS profile specifies configuration options, including what OS to install, what software groups to install, and what disk partitions and network settings to use. Each OS profile is associated with a specific OS image. Each OS profile describes how to install and configure one OS image, or one FLAR associated with one OS image.

You can use System Catalogs to create Linux and Oracle Solaris software profiles. You can also copy an existing profile, and then modify it for the release. If your site uses Oracle Solaris JumpStart Enterprise Toolkit (JET) templates, you can use them in the profiles. The SUNWjet and JetFLASH packages are automatically installed with the Proxy Controller. These packages contain the base_config, custom, and flash JET modules that provide the core JET functions required by Enterprise Manager Ops Center.

Intelligent OS Update Management

Updating operating systems can be a complex, time-consuming, and unpredictable process. You can encounter a seemingly never-ending list of dependencies which you must review for warnings, conflicts, and conditions.

Enterprise Manager Ops Center is designed to reduce the complexity of updating a large number of diverse operating systems, standardize the patch installation process, minimize downtime, track changes, and automate patching without user interaction. You control the update process, the level of automation, the scheduling, and the number of concurrent updates. You can apply customized controls for one system or a group of systems and schedule the updates to deploy during periods of low usage.

Enterprise Manager Ops Center supports update management for Oracle Solaris, Oracle Linux, Red Hat Enterprise Linux, Novell SuSe Enterprise Linux, and Microsoft Windows operating systems.

For enterprise-level users, using Enterprise Manager Ops Center to update your operating systems offers several key advantages:

- Role-based update permissions – Restrict update capabilities to designated users.

- Customizable update policies and profiles – Define which patches to install, patch dependencies, and the level of user interaction. Enterprise Manager Ops Center provides predefined update profiles apart from which you can create your own customized profiles and policies.

- Update simulations – Identify the required updates and choose whether to download updates in preparation for the actual deployment.

- Job scheduling – Schedule when to run an update simulation or update job. You can run it immediately, define a start day and time, or create a recurring schedule.

- Compliance and update reports – Generate a variety of compliance and other update reports to know the state of your OS patch levels. You can use the report output to run a new OS update job.

- Version control and rollback – A snapshot, known as a system catalog, is automatically taken and saved before an OS update is performed. You can use the system catalog to revert back to a previous version.

- Variety of methods to detect and deploy updates – The Enterprise Controller obtains information about latest updates from the Knowledge Base and OS vendor sites. You can deploy updates through the update profiles and policies, reports, and system catalogs.

The simulation feature enables you to test update dependencies by simulating an update job before you perform an actual update. You can manage different patching conditions that exist for installing a patch and keep track of the patching conditions. You can run an update simulation on Linux and Oracle Solaris hosts to identify the updates that apply and download updates in preparation for the actual deployment. By running a simulation, you can determine the outcome of the update job and adjust the update policies and procedures for the update before scheduling a OS update job. You can deploy the update to individual systems or a group of systems simultaneously. This approach adds predictability and consistency in the status of your operating systems.

System Catalogs

To maintain version control, a system catalog is created when the OS is managed and after any action is performed on the operating system. A system catalog is a snapshot of the operating system that contains a list of operating system software components that are installed on the system and a date and time stamp. You can also create a system catalog at any time.

For added safety, you can create a system catalog of the host before the update is deployed. If needed after an update, you can quickly and easily rollback to a saved system state.

The system catalogs are a powerful tool that provide more than just version control. Catalogs provide the capability to directly manipulate the installed software components on a single operating system or a group of operating systems and provide rollback capability. You can save a catalog as a profile, and then use the profile to run an OS update job. You can compare the catalogs between operating systems and create profiles from the saved catalogs which can be later used for creating systems. You can also make the target system the same as the source system. Modifying a catalog is an alternate option for running an OS update job to install, uninstall, or upgrade a component. Modifying a catalog does not require an OS update profile to run the update job. It is a quick way of changing the component configuration in a system.

Methods to Detect and Deploy Updates

The tools and reports vary, depending on the OS. The procedures for installing updates on Oracle Solaris and Linux operating systems are very similar. The procedures for updating Windows uses the Microsoft System Center Configuration Manager (SCCM) to implement the software updates.

The Linux and Oracle Solaris OS update functionality enables you to perform updates from the following methods:

- Creating and running an update job for one or more systems

- Updating from an OS profile

- Modifying a system catalog

- Using Oracle Solaris Live Upgrade to create, update, and deploy an alternate boot environment

- Creating one of several update reports to check for recommended updates, and then deploying the updates

Oracle Solaris Live Upgrade enables you to quickly create an alternate boot environment for your Oracle Solaris OS, update the boot environment, and deploy the host to production quickly. You can synchronize boot environments and roll back to previous version, if needed.

Extensive Monitoring

The software is designed to make it easy to monitor and manage a large numbers of assets from a single console. It provides end to end server awareness and robust monitoring capabilities for the hardware, storage devices, and operating systems in your data center. You can track system-defined parameters for hardware power consumption, hardware status (temperature, fan speed, and voltage), and key OS statistics (load, CPU, memory.)

For more robust monitoring, the software uses editable rules and event thresholds to monitor your systems. Each asset contains attributes or resources that are available for monitoring. A rule defines a specific monitored resource and the rule parameter defines when an alert is triggered. Specific rules are available for assets such as ILOMs, Oracle Solaris Cluster, storage devices, and DHCP and system-defined rules that monitor resource values, thresholds, value comparators, and JMX expressions for specific attributes.

The rules are bundled by asset type (such as global zones, non-global zones, and operating systems) into set of monitoring profiles that are installed with the product. These profiles enable quick and easy monitoring implementation. When a new asset is discovered and managed, the corresponding default monitoring profile is automatically implemented.

Monitoring profiles are available for the following asset types:

- Operating system

- Global zone

- Non-global zone

- Server

- Chassis

- M-Series chassis

- Oracle VM server for SPARC

- Logical domain

- Storage

- Switch

An administrator can adjust the thresholds that trigger alerts for different severity levels (Critical, Warning, or Informational) based on your organization's policies, or disable rules and alert conditions. The following graphic is an example of an OS monitoring profile.

Figure 5-2 OS Monitoring Profile

Depending on the type of asset being monitored, you can edit individual rules within a monitoring profile. You can copy a profile and create a customized profile for a specific asset type, such as Oracle Solaris 10, or you can create a profile that applies to all members of a group. For example, you can create a group specifically for your critical path systems and create a monitoring profile that uses more stringent monitoring rules for members of that group.

Dynamic Problem Management

Enterprise Manager Ops Center uses a help desk approach to managing problems. When a problem is detected, it appears as a Critical, Warning or Informational alert in the Unassigned Problem queue in the Message Center. You can configure the software to send you notification of a problem to your e-mail address or pager. You can receive notification of all problems, or filter to receive e-mail or pager notification based on the problem severity.

Use the Message Center to view unassigned problems, problems assigned to you, and problems assigned to others. From this page, an administrator can assign the problem to an authorized user and then monitor the status and resolution. The following graphic shows the Unassigned Problems display in the Message Center, including the composition of the severity levels, a table of problems, by category and severity, and a detail section.

Figure 5-3 Unassigned Problems in the Message Center

You can highlight a problem in the detail section to view the problem, any associated annotations, comments, or suggested actions. A variety of annotation options enable you to provide status updates, notes, or a suggested action. Depending on your permission level, you can add, edit, or remove annotations for a problem instance.

More sophisticated annotation options enable authorized users to add annotations to a Problems Knowledge Base for a specific Problem and asset type and associate annotations with an operational plan. This functionality enables you to provide a resolution or an automated response when a problem of this type occurs on an asset

If a problem on a supported system requires Oracle support, you can file a service request from this page. In addition, you can view the status of service requests submitted through this UI.

Comprehensive Reports

Reports provide you with insight into all phases of the asset lifecycle. You can gather more detailed information about job history, firmware, OS updates, and then export that information to CSV or PDF output. Problem reports export to HTML.

You can create the following reports in Enterprise Manager Ops Center:

- Problem

- Firmware Compliance

- Update

- Server Provisioning

- Hardware Configuration

Problem Reports

Problem reports summarize problem details for a specific managed asset or detailed information about specific problems. You can export these reports into an HTML output.

The Summary Reports provide you with an historical account of the detected problems. You can create a report for a specific time period, for a specific severity level, status, type of problem, or the asset groups affected by the problem. These reports are invaluable in trend analysis and identifying patterns that you can then take steps to mitigate.

The Detail Reports contains detailed information about one or more selected problems and provides you with an audit trail of the problems.

Firmware Compliance Report

Firmware Compliance Reports enable you to maintain consistent firmware versions across your data center. You can associate one of your firmware profiles with the report, then run the Firmware Compliance Report to determine if the firmware on the asset complies with your firmware profile's specifications. If assets do not contain the firmware version identified in the profile, you can update the firmware from the report.

Update Reports

Like firmware compliance reports, update reports give insight into the OS compliance state and recommends patches and packages. Generate a report to view the state of your OS patch levels, and then use the report output to update specific operating systems.

Update reports enable you to check for new patches and security advisories. You can get a general report, or test a system or installed package for available fixes. For auditing purposes, you can create a job history report. Several OS update reports are available for Linux, Oracle Solaris and Windows operating systems. You can export report results to CSV or PDF format.

The following compliance reports are available for all three types of operating systems: Host Compliance - Provides information on whether your system is compliant with security and bug fixes incidents. Incidence Compliance - Provides information about the number of systems to which the selected OS updates apply.

In addition to the reports listed above, the following reports are available for Linux and Oracle Solaris operating systems:

- Job History – Provides a history of OS update install and uninstall jobs completed by Enterprise Manager Ops Center on managed systems.

- CVE Compliance – Provides information on incidents that are related to specific Common Vulnerability and Exposure Identifiers (CVE IDs) and the systems that should have these incidents installed. CVE IDs are unique, common identifiers for publicly known security vulnerabilities.

- Distribution Update – Provides basic information of all known distribution and local incidents.

- Package Compliance – Provides the details of the selected packages on your managed system that are compliant or not compliant with the latest recommended version available.

- Recommended Software Configuration (RSC) – Provides information about the system compliance for installing a specific application. For example, you can check an Oracle Solaris OS for patch requirements before installing Oracle 11g Database.

- Service Pack Compliance (Linux only) – Provides information on incidents created by the publication and release of a service pack by a vendor. This helps to determine whether your system has the latest service packs released by the vendor.

- Oracle Solaris Update Compliance (Oracle Solaris OS only) – Provides information on whether an Oracle Solaris system is compliant with a specific update.

- Baseline Analysis (Oracle Solaris OS only) – Helps to check the compliance of systems against newly released Oracle Solaris baselines.

Server Provisioning Reports

Obtain a report of historical server provisioning actions. Run this simple ad-hoc report to obtain details about the Deployment Plan provisioning activities that occurred over a specified time period. Get specific information about the activity, including who ran the provisioning job, which profiles were selected, and the final outcome.

Hardware Configuration Reports

Use the Hardware Configuration Reports to obtain hardware change history and inventory. Inventory reports enable you to filter by hardware assets and or components. You select the asset and component properties for the report output content and its sorting.

The Hardware Configuration reports enable you to view the following types of information:

- hardware configuration changes on a server or across a group of servers

- hardware inventory of various components as reported by the hardware view across all or selected assets

- hardware inventory based on specified hardware component attributes such as model or part number

- hardware inventory based on asset type model

Virtualize an OS or Hardware

Virtualization is a powerful method of leveraging under-utilized systems. You can virtualize operating systems with the Oracle Solaris Zones technology, or you can virtualize SPARC hardware with the Oracle VM Server for SPARC technology. Enterprise Manager Ops Center enables you to discover, provision, update, monitor, and manage the virtual systems.

OS Virtualization

Oracle Solaris Zones to create multiple identical virtualized OS environments created within a single instance of the Oracle Solaris OS. Zones use software-defined boundaries to isolate software applications. You can run applications in different zones with complete isolation, while the underlying OS resources are centrally managed and administered by the global zone. The global zone is the default operating system and has control over all the processes.

SPARC Hardware Virtualization

SPARC hardware virtualization uses Oracle Solaris VM Server for SPARC technology to create multiple virtual systems on a single piece of physical hardware. Each virtual system, known as a logical domain, can run a full instance of a unique operating system. You can run full instances of Oracle Solaris and Linux operating systems inside a single Oracle VM Server.

When you provision a SPARC server with the Oracle Solaris VM Server for SPARC software, a control domain is established. The control domain manages the logical domains. You can use Enterprise Manager Ops Center to create and provision logical domains, including allocating the system's memory, CPU threads, and devices to create multiple discrete logical domains. Each logical domain has its own operating system, resources, and identity within a single system. You can monitor the logical domain performance and notify you when it begins performing outside normal parameters.

By careful architecture, a virtualized environment can help you achieve greater resource usage, better scaling, and increased security and isolation.

Oracle VM Server for SPARC functionality is especially useful in scenarios such as the following:

- Reduce the number of servers by creating logical domains to host applications that are currently running on several small Oracle Solaris and Linux servers

- Create logical domains to host different OS kernels in the same system

- Maximize isolation and security by providing completely separate OS and hardware resources

Virtual Pools

You can use virtual pools to manage the control domain and the logical domains, including migrate logical domains and balance the load on your Oracle VM Server for SPARC systems.

Virtual pool technology enables you to automatically balance the load of several Oracle VM Servers for SPARC to maximize capacity without overloading a server. Load balancing enables you to move a virtual system from one physical system to another. You can set parameters that enable the software to automatically balance the load, or you can elect to receive email notification and then decide whether to balance the load.

6 Next Steps

Several resources are available to help you to prepare for, install, and use Enterprise Manager Ops Center in your data center. Follow these steps to start using Enterprise Manager Ops Center:

1. Plan how Enterprise Manager Ops Center will operate at your site and prepare for its installation – See the Oracle Enterprise Manager Ops Center Site Preparation Guide.

2. Install and configure the software in your data center – See the Oracle Enterprise Manager Ops Center Installation Guide for Linux Operating Systems or the Oracle Enterprise Manager Ops Center Installation Guide for Oracle Solaris Operating System, depending on the platform on which you install the software and run the Enterprise Controller.

3. Create the profiles, policies, and alarm thresholds and import the images to use for provisioning and updating firmware and operating systems - See the Oracle Enterprise Manager Ops Center Advanced User's Guide.

4. Create groups and assign user roles – See the Oracle Enterprise Manager Ops Center Administration Guide.

5. Discover, monitor, and manage your data center assets – See the Oracle Enterprise Manager Ops Center User's Guide

6. Provision and update your data center assets – See the Oracle Enterprise Manager Ops Center Provision and Update Guide

These resources ensure that you receive the maximum benefit from the technology:

- Oracle Enterprise Manager Ops Center User's Guide includes information needed to discover, monitor, and manage your data center assets.

- Oracle Enterprise Manager Ops Center Provision and Update Guide includes information needed to provision and update firmware and operating systems.

- Oracle Enterprise Manager Ops Center Advanced User's Guide includes advanced topics needed to establish groups, user permissions, profiles and policies.

- Oracle Enterprise Manager Ops Center Administration Guide includes information needed to administer users, groups, and update Enterprise Manager Ops Center components, including the Enterprise Controller, Proxy Controller, Agents.

See the Oracle Enterprise Manager Ops Center Documentation site at http://download.oracle.com/docs/cd/E11857_01/nav/management.htm.

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2014, Oracle and/or its affiliates. All rights reserved.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Alpha and Beta Draft Documentation Notice

If this document is in preproduction status:

This documentation is in preproduction status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.