9 Upgrading Oracle Identity Analytics in a Production Environment

This chapter contains the following sections:

9.1 Developing a Production Rollout Plan

To develop a successful production rollout plan, incorporate the information gathered while upgrading the test environment based on the following guidelines:

  1. Create and document the production deployment image. Import any upgraded objects and files (not the entire environment) from the test environment.

    Create a deployment image that is compatible with the development process.

  2. Create workflows and e-mail templates.

  3. Document any amendments to the plan, including special procedures that apply to the production environment.

    For example:

    • Scheduling an outage for the application

    • Scheduling database administrator support

    • Notifying users before taking the system offline

    • Shutting down specific resources, processes, or applications that are used in production

9.2 Before Beginning the Upgrade Process

Before starting to upgrade Oracle Identity Analytics in a production environment, create a backup of the production data.

9.2.1 To Back Up Production Data

  1. Stop all processes and all client access, and shut down Oracle Identity Analytics.

  2. Take a baseline snapshot of the file system objects, the operating system, the JDK software, the repository, and the Web applications.

  3. Clean up any unnecessary files and hotfixes.

9.3 Deploying the Upgrade in a Production Environment

This section provides instructions for deploying the Oracle Identity Analytics upgrade in a production environment.

9.3.1 To Deploy the Upgrade

  1. Deploy from the packaged development environment.

  2. Import any modifications based on differences between the test and production environments.

  3. Migrate a copy of jdbc.properties that is suitable for a production environment.

  4. Upon successfully deploying Oracle Identity Analytics to the application server, go to the following address in a browser:

    https://Hostname:Port-Number/rbacx/welcome.action

    When the Welcome screen appears, enter your rbacxadmin user name and password and verify that the installation is successful.

  5. Open the rbacx.log file and check for errors.

    The installation is successful if a message similar to the following appears in the rbacx.log file:

    Oracle Identity Analytics (build: 11.1.1.5.0.201107_nn_nnnn) Started

9.4 Completing the Post-Upgrade Steps in a Production Environment

The following items should be completed after the upgrade process completes, but before you make the application available to users.

9.4.1 Migrate the Role Provisioning and Identity Audit Rules in the Production Environment

To migrate Role Provisioning and Identity Audit rules, open scheduling-context.xml using a text editor and find bean ID quartzSchedulerFactoryBean.

  1. Stop the Oracle Identity Analytics application if it is running.

  2. Locate the jobDetails list and uncomment rmeRuleMigrationJob and identityAuditDataMigrationJob.

  3. Locate the triggers list and uncomment rmeRuleMigrationJobTrigger and identityAuditDataMigrationTrigger.

  4. Start the Oracle Identity Analytics application.

    The Role Provisioning and Identity Audit rules migration job runs.

  5. After a successful run, disable the migration job.

    1. Stop the Oracle Identity Analytics application.

    2. Navigate to the rbacx.war directory exploded by the application server and locate scheduling-context.xml under rbacx/WEB-INF for UNIX and under rbacx\WEB-INF for Windows.

    3. Open scheduling-context.xml using a text editor and find bean ID quartzSchedulerFactoryBean.

    4. Locate the jobDetails list and comment out rmeRuleMigrationJob and identityAuditDataMigrationJob.

    5. Locate the triggers list and comment out rmeRuleMigrationJobTrigger and identityAuditDataMigrationTrigger.

    6. Start the Oracle Identity Analytics application.

9.4.2 Migrate Incomplete Identity Certification Jobs in the Production Environment

If your production environment includes incomplete certifications, enable the idcMigrationJob now. This job updates active certification data to be compatible with Oracle Identity Analytics version 11.1.1.5. This job only needs to run successfully one time in your production environment, after which it can be disabled.

9.4.2.1 To Enable the Identity Certification Migration Job

  1. Stop the Oracle Identity Analytics application if it is running.

  2. Navigate to $RBACX_HOME/WEB-INF/ and open scheduling-context.xml in a text editor.

  3. Uncomment the following two entries and save your changes:

    • <!--ref bean="idcMigrationJob"/-->

    • <!--ref bean="idcMigrationTrigger"/-->

  4. To monitor the upgrade job's output, open $RBACX_HOME/WEB-INF/log4j.properties, add the following line, and save your changes:

    log4j.logger.com.vaau.rbacx.scheduling.executor.idc.IDCMigrationExecutor=DEBUG

  5. Start the Oracle Identity Analytics application.

    The Identity Certification Migration job runs.

  6. Open the OIA System Log and verify that the job completed successfully.

    The OIA System Log is located here: $RBACX_HOME/logs/rbacx.log

  7. After a successful run, disable the Identity Certification Migration job:

    1. Stop the Oracle Identity Analytics application.

    2. Comment out the idcMigrationJob and idcMigrationTrigger entries and save your changes.

    3. Start the Oracle Identity Analytics application.