17 Upgrading an Oracle Virtual Directory High Availability Environment

This chapter describes how to upgrade Oracle Virtual Directory in a high availability environment.

The upgrade steps vary slightly depending on whether you are registering with a domain and the location of the domain. Refer to the following for more information:

17.1 Understanding the Oracle Virtual Directory High Availability Upgrade

Before you begin using the procedures in this chapter, note the following.

Assumptions About the Active-Active Oracle Virtual Directory Upgrade

This chapter describes how to upgrade Oracle Virtual Directory in an active-active high-availability environment.

In this type of high availability environment, you upgrade Oracle Virtual Directory on two independent hosts. In this example, the two hosts are identified as IDMHOST1 and IDMHOST2.

The procedures included here assume that Oracle Virtual Directory is the only component being upgraded in the Oracle Application Server 10g topology and that the Oracle Virtual Directory 10g instance and the Oracle Virtual Directory 11g instance are on the same host.

Upgrading Oracle Virtual Directory With and Without an Oracle WebLogic Server Domain

In Oracle Fusion Middleware 11g, you can optionally register Oracle Virtual Directory with an Oracle WebLogic Server domain. However, if you want to manage Oracle Virtual Directory with Oracle Enterprise Manager Fusion Middleware Control, then you must register the Oracle Virtual Directory instance with a domain.

Further, you can register Oracle Virtual Directory with a local or remote Oracle WebLogic Server domain. The registration can be completed during the upgrade or as a post-upgrade step.

17.2 Upgrading Oracle Virtual Directory When Using a Local Oracle WebLogic Server Domain

The following procedure describes how to upgrade Oracle Virtual Directory in a high availability environment when you are planning to create a new, local Oracle WebLogic Server domain as part of the Oracle Virtual Directory installation and upgrade process.

In this scenario, you create an Oracle WebLogic Server domain on IDMHOST1 along with the first Oracle Virtual Directory instance. Then, you install and configure the second Oracle Virtual Directory instance on IDMHOST2 and register the second Oracle Virtual Directory instance with the domain on IDMHOST1.

To upgrade Oracle Virtual Directory in this scenarios, refer to the following tasks:

17.2.1 Task 1: On IDMHOST1, Optionally Install Oracle WebLogic Server and Create the Middleware Home

If you want to associate the upgraded Oracle Virtual Directory instances with Oracle WebLogic Server, you must first install Oracle WebLogic Server and create the Middleware home.

For information on installing the Oracle WebLogic Server, see "Preparing for Installation" and "Running the Installation Program in Graphical Mode" in the Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.

When you install Oracle WebLogic Server, make a note of the complete path to the Middleware home. You will need this information later in the upgrade procedure.

17.2.2 Task 2: On IDMHOST1, Install and Configure the Oracle Virtual Directory 11g Release 1 (11.1.1.6.0)

To install and configure Oracle Virtual Directory 11g on IDMHOST1, refer to the chapter "Installing and Configuring Oracle Identity Management (11.1.1.6.0)" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

For complete instructions on configuring Oracle Virtual Directory, see the "Configuring Oracle Virtual Directory (OVD)" chapter in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide.

17.2.3 Task 3: On IDMHOST1, Upgrade the Oracle Virtual Directory Instance to 11g

Use the following procedure to upgrade the Oracle Virtual Directory instance to 11g:

  1. Change directory the ORACLE_HOME/bin directory of the Oracle Fusion Middleware installation.

  2. Enter the following command to start the Upgrade Assistant.

    On UNIX system:

    ./ua

    On Windows systems:

    ua.bat

    The Upgrade Assistant displays the Welcome screen.

  3. Refer to Table 17-1 for instructions on how to respond to each Upgrade Assistant screen.

    Table 17-1 Summary of Upgrade Screens When Upgrading Oracle Virtual Directory for High Availability

    Screen Instructions

    Welcome

    Click Next.

    Specify Operation

    Select Upgrade Identity Management Instance.

    Click Next.

    Specify Source Home

    Select the 10g Release 2 (10.1.2) or 10g (10.1.4) source Oracle home.

    If the Oracle home you want to upgrade does not appear in the drop-down lists, see "Source Oracle Home Not Listed by OracleAS Upgrade Assistant" in the Oracle Fusion Middleware Upgrade Planning Guide.

    Specify Destination Instance

    Enter the complete path to the 11g Oracle instance, or click Browse to locate the instance directory.

    Specify WebLogic Server

    This screen appears only if you chose to associate the Oracle Virtual Directory 11g instance with Oracle WebLogic Server during the Oracle Virtual Directory installation.

    If you selected to install Oracle Virtual Directory without an Oracle WebLogic Server domain, then this screen does not appear.

    Enter the host and Administration Server port for the Oracle WebLogic Server you configured in Section 17.2.1, "Task 1: On IDMHOST1, Optionally Install Oracle WebLogic Server and Create the Middleware Home".

    Specify Upgrade Options

    Select Use source Oracle Home ports in destination.

    Select Start destination components after upgrade.

    Click Next.

    Examining Components

    Click Next.

    Summary

    Click Upgrade to proceed with the upgrade process.

    Upgrade Progress

    Monitor the upgrade progress until the Upgrade Complete screen appears.

    Upgrade Complete

    Click Close.

  4. Verify the upgraded Oracle Virtual Directory instance using the following OPMN command:

    ORACLE_INSTANCE/bin/opmnctl status

    You should see output similar to the following:

    Processes in Instance: asinst_1
--------------------------+--------------------+---------+---------
ias-component             | process-type       |     pid | status
--------------------------+--------------------+---------+---------
ovd1                      | OVD                |   22091 | Alive
EMAGENT                   | EMAGENT            |       0 | NONE

  5. Update the NonJ2EEManagement application installed on the WebLogic Server:

    UNIX:

    INSTANCE_HOME/bin/opmnctl redeploy

    Windows:

    INSTANCE_HOME\bin\opmnctl redeploy

  6. Re-register the instance so that component property information (such as component version) are updated:

    UNIX:

    INSTANCE_HOME/bin/opmnctl unregisterinstance
INSTANCE_HOME/bin/opmnctl registerinstance

    Windows:

    INSTANCE_HOME\bin\opmnctl unregisterinstance
INSTANCE_HOME\bin\opmnctl registerinstance

17.2.4 Task 4: On IDMHOST2, Install and Configure the Oracle Virtual Directory 11g Release 1 (11.1.1.6.0)

To install and configure Oracle Virtual Directory 11g on IDMHOST2, refer to the chapter "Installing and Configuring Oracle Identity Management (11.1.1.6.0)" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Use the Oracle Fusion Middleware Configuration Wizard to configure Oracle Virtual Directory. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide.

17.2.5 Task 5: On IDMHOST2, Upgrade the Second Oracle Virtual Directory Instance

Use the following procedure to upgrade the Oracle Virtual Directory instance to 11g:

  1. Change directory the ORACLE_HOME/bin directory of the Oracle Fusion Middleware installation.

  2. Enter the following command to start the Upgrade Assistant.

    On UNIX system:

    ./ua

    On Windows systems:

    ua.bat

    The Upgrade Assistant displays the Welcome screen.

  3. Refer to Table 17-1 for instructions on how to respond to each Upgrade Assistant screen.

  4. Verify the upgraded Oracle Virtual Directory instance using the following OPMN command:

    ORACLE_INSTANCE/bin/opmnctl status

    You should see output similar to the following:

    Processes in Instance: asinst_1
--------------------------+--------------------+---------+---------
ias-component             | process-type       |     pid | status
--------------------------+--------------------+---------+---------
ovd1                      | OVD                |   22091 | Alive
EMAGENT                   | EMAGENT            |       0 | NONE

17.2.6 Task 6: On IDMHOST2, Register the Second Oracle Virtual Directory Instance with the Domain on IDMHOST1

Register the upgraded Oracle Virtual Directory instance with the Oracle WebLogic Server domain you created and configured on IDMHOST1:

Use the following OPMN command:

ORACLE_INSTANCE/opmnctl registerinstance 
        -adminHost adminHostName
        -adminPort adminServerPort
        -adminUsername DOMAIN_ADMINISTRATOR_USERNAME
        -oracleInstance ORACLE_INSTANCE

17.2.7 Task 7: On IDMHOST1 and IDMHOST2, Import the Oracle Virtual Directory Listener keystore Certificates

Run the following commands On IDMHOST1 and IDMHOST2 to import the Oracle Virtual Directory listener keystore certificates into the Fusion Middleware Control agent wallet:

  1. Export Oracle Virtual Directory server certificate:

    keytool -exportcert 
        -keystore OVD_KEYSTORE_FILE
        -storepass passwd
        -alias OVD_SERVER_CERT_ALIAS
        -rfc
        -file OVD_SERVER_CERT_FILE

  2. Add the Oracle Virtual Directory server certificate to Oracle Management Agent wallet:

    ORACLE_HOME/bin/orapki wallet add
           -wallet ORACLE_INSTANCE/EMAGENT/EMAGENT/sysman/config/monwallet 
           -trusted_cert 
           -cert OVD_SERVER_CERT_FILE
           -pwd WALLET_PASSWD

    For example, if you're using default values configured at installation time, you would use the following values for the variables in the above example:

    Replace OVD_KEY_STORE_FILE with ORACLE_INSTANCE/config/OVD/ovd1/keystores/keys.jks.

    Replace OVD_SERVER_CERT_ALIAS with serverselfsigned.

    Replace passwd with the password for the Oracle Virtual Directory administrator account.

17.3 Upgrading Oracle Virtual Directory When Using a Remote Oracle WebLogic Server Domain or No Domain

The following procedure describes how to upgrade Oracle Virtual Directory in a high availability environment in either of the following scenarios:

  • When you are planning to register the Oracle Virtual Directory environment with an existing remote Oracle WebLogic Server domain (on the host other than the hosts where Oracle Virtual Directory is installed).

  • When you are planning to install and configure the Oracle Virtual Directory environment in standalone mode (with no Oracle WebLogic Server domain).

This procedure assumes you either have a remote Oracle WebLogic Server domain already installed and configured on a remote host, or you have no plans to register Oracle Virtual Directory with Oracle WebLogic Server.

To upgrade Oracle Virtual Directory in these scenarios, refer to the following tasks:

17.3.1 Task 1: On IDMHOST1, Install and Configure the Oracle Virtual Directory 11g Release 1 (11.1.1.6.0)

To install and configure Oracle Virtual Directory 11g on IDMHOST1, refer to the chapter "Installing and Configuring Oracle Identity Management (11.1.1.6.0)" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Use the Oracle Fusion Middleware Configuration Wizard to configure Oracle Virtual Directory. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide.

17.3.2 Task 2: On IDMHOST1, Upgrade the Oracle Virtual Directory Instance to 11g

Use the following procedure to upgrade the Oracle Virtual Directory instance to 11g:

  1. Change directory the ORACLE_HOME/bin directory of the Oracle Fusion Middleware installation.

  2. Enter the following command to start the Upgrade Assistant.

    On UNIX system:

    ./ua

    On Windows systems:

    ua.bat

    The Upgrade Assistant displays the Welcome screen.

  3. Refer to Table 17-1 for instructions on how to respond to each Upgrade Assistant screen.

  4. Verify the upgraded Oracle Virtual Directory instance using the following OPMN command:

    ORACLE_INSTANCE/bin/opmnctl status

    You should see output similar to the following:

    Processes in Instance: asinst_1
--------------------------+--------------------+---------+---------
ias-component             | process-type       |     pid | status
--------------------------+--------------------+---------+---------
ovd1                      | OVD                |   22091 | Alive
EMAGENT                   | EMAGENT            |       0 | NONE

17.3.3 Task 3: On IDMHOST2, Install and Configure the Oracle Virtual Directory 11g Release 1 (11.1.1.6.0)

To install and configure Oracle Virtual Directory 11g on IDMHOST2, refer to the chapter "Installing and Configuring Oracle Identity Management (11.1.1.6.0)" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Use the Oracle Fusion Middleware Configuration Wizard to configure Oracle Virtual Directory. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide. For more information, see the "Creating a WebLogic Domain in Graphical Mode" topic in the Oracle Fusion Middleware Creating Domains Using the Configuration Wizard guide.

17.3.4 Task 4: On IDMHOST2, Upgrade the Second Oracle Virtual Directory Instance

Use the following procedure to upgrade the Oracle Virtual Directory instance to 11g:

  1. Change directory the ORACLE_HOME/bin directory of the Oracle Fusion Middleware installation.

  2. Enter the following command to start the Upgrade Assistant.

    On UNIX system:

    ./ua

    On Windows systems:

    ua.bat

    The Upgrade Assistant displays the Welcome screen.

  3. Refer to Table 17-1 for instructions on how to respond to each Upgrade Assistant screen.

  4. Verify the upgraded Oracle Virtual Directory instance using the following OPMN command:

    ORACLE_INSTANCE/bin/opmnctl status

    You should see output similar to the following:

    Processes in Instance: asinst_1
--------------------------+--------------------+---------+---------
ias-component             | process-type       |     pid | status
--------------------------+--------------------+---------+---------
ovd1                      | OVD                |   22091 | Alive
EMAGENT                   | EMAGENT            |       0 | NONE

17.3.5 Task 5: On IDMHOST2, Optionally Register the Second Oracle Virtual Directory Instance with the Domain on WLSHOST1

Register the upgraded Oracle Virtual Directory instance with an existing Oracle WebLogic Server domain you created and configured on WLSHOST1:

Use the following OPMN command:

ORACLE_INSTANCE/opmnctl registerinstance 
        -adminHost adminHostName
        -adminPort adminServerPort
        -adminUsername DOMAIN_ADMINISTRATOR_USERNAME
        -oracleInstance ORACLE_INSTANCE

17.3.6 Task 6: On IDMHOST1 and IDMHOST2, Import the Oracle Virtual Directory Listener keystore Certificates

Run the following commands On IDMHOST1 and IDMHOST2 to import the Oracle Virtual Directory listener keystore certificates into the Fusion Middleware Control agent wallet:

  1. Export Oracle Virtual Directory server certificate:

    keytool -exportcert 
        -keystore OVD_KEYSTORE_FILE
        -storepass passwd
        -alias OVD_SERVER_CERT_ALIAS
        -rfc
        -file OVD_SERVER_CERT_FILE

  2. Add the Oracle Virtual Directory server certificate to Oracle Management Agent wallet:

    ORACLE_HOME/bin/orapki wallet add
           -wallet ORACLE_INSTANCE/EMAGENT/EMAGENT/sysman/config/monwallet 
           -trusted_cert 
           -cert OVD_SERVER_CERT_FILE
           -pwd WALLET_PASSWD

    For example, if you're using default values configured at installation time, you would use the following values for the variables in the above example:

    Replace OVD_KEY_STORE_FILE with ORACLE_INSTANCE/config/OVD/ovd1/keystores/keys.jks.

    Replace OVD_SERVER_CERT_ALIAS with serverselfsigned.

    Replace passwd with the password for the Oracle Virtual Directory administrator account.