Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Enterprise Deployment Overview

• 1.1 About the Enterprise Deployment Guide
• 1.2 Enterprise Deployment Terminology
• 1.3 Benefits of Oracle Recommendations
  • 1.3.1 Built-in Security
  • 1.3.2 High Availability

2 Introduction to the Enterprise Deployment Reference Topology

• 2.1 Overview of Enterprise Deployment Reference Topology
  • 2.1.1 Reference Topology Documented in the Guide
  • 2.1.2 About Oracle Identity Management Integration
  • 2.1.3 About the Web Tier Nodes
    • 2.1.3.1 Load Balancer Requirements
  • 2.1.4 About the Application Tier
  • 2.1.5 About the Data Tier
  • 2.1.6 About the Unicast Requirement for Communication
• 2.2 Hardware Requirements for an Enterprise Deployment on Linux
• 2.3 Clock Synchronization
• 2.4 Identifying the Software Components to Install
• 2.5 Road Map for the Reference Topology Installation and Configuration
  • 2.5.1 Flow Chart of the Oracle WebCenter Portal Enterprise Deployment Process
  • 2.5.2 Steps in the Oracle WebCenter Portal Enterprise Deployment Process
  • 2.5.3 Understanding the Incremental, Modular Approach to Enterprise Deployment

3 Preparing the Network for an Enterprise Deployment

• 3.1 Overview of Preparing the Network for an Enterprise Deployment
• 3.2 About Virtual Server Names Used by the Topology
  • 3.2.1 wcp.mycompany.com
  • 3.2.2 admin.mycompany.com
  • 3.2.3 wcpinternal.mycompany.com
• 3.3 Configuring the Load Balancer
• 3.4 About IPs and Virtual IPs
• 3.5 About Firewalls and Ports
• 3.6 About LDAP as Credential and Policy Store

4 Preparing the File System for an Enterprise Deployment

• 4.1 Overview of Preparing the File System for Enterprise Deployment
• 4.2 Terminology for Directories and Directory Environment Variables
• 4.3 About Recommended Locations for the Different Directories
• 4.4 Configuring Shared Storage

5 Preparing the Database for an Enterprise Deployment

• 5.1 Overview of Preparing the Database for an Enterprise Deployment
• 5.2 About Database Requirements
  • 5.2.1 Database Host Requirements
  • 5.2.2 Supported Database Versions
  • 5.2.3 About Initialization Parameters
• 5.3 Creating Database Services
  • 5.3.1 Creating Database Services for 10g and 11g Release 1 (11.1) Databases
  • 5.3.2 Creating Database Services for 11g Release 2 (11.2) Databases
• 5.4 Loading the Oracle Fusion Metadata Repository in the Oracle RAC Database
• 5.5 Configuring SOA Schemas for Transactional Recovery Privileges
• 5.6 Backing Up the Database

6 Installing the Software for an Enterprise Deployment

• 6.1 Overview of the Software Installation Process
• 6.2 Installing Oracle HTTP Server
  • 6.2.1 Prerequisites to Installing Oracle HTTP Server
  • 6.2.2 Installing Oracle HTTP Server on WEBHOST1 and WEBHOST2
  • 6.2.3 Backing Up the Oracle Fusion Middleware Installation
• 6.3 Installing Oracle Fusion Middleware
  • 6.3.1 Installing Oracle WebLogic Server and Creating the Fusion Middleware Home
  • 6.3.2 Installing Oracle Fusion Middleware Components
    • 6.3.2.1 Installing Oracle SOA Suite
    • 6.3.2.2 Installing Oracle WebCenter Portal
    • 6.3.2.3 Installing Oracle WebCenter Content
  • 6.3.3 Backing Up the Fusion Middleware Installation

7 Configuring the Web Tier for an Enterprise Deployment

• 7.1 Overview of Configuring the Web Tier
• 7.2 Running the Configuration Wizard to Configure Oracle HTTP Server
• 7.3 Validating the Oracle HTTP Server Configuration
• 7.4 Associating the Oracle Web Tier with the Oracle WebLogic Domain
• 7.5 Configuring the Load Balancer to Route HTTP Requests
• 7.6 Configuring Virtual Hosts
  • 7.6.1 Editing the httpd.conf File
  • 7.6.2 Restarting Both OHS Servers
  • 7.6.3 Validating the Configuration

8 Creating a Domain for an Enterprise Deployment

• 8.1 Overview of Creating a Domain
• 8.2 Enabling VIP1 in SOAHOST1
• 8.3 Running the Configuration Wizard on SOAHOST1 to Create a Domain
• 8.4 Post-Configuration and Verification Tasks
  • 8.4.1 Creating boot.properties for the Administration Server on SOAHOST1
  • 8.4.2 Starting Node Manager on SOAHOST1
  • 8.4.3 Starting the Administration Server on SOAHOST1
  • 8.4.4 Validating GridLink Data Source Configuration
  • 8.4.5 Validating the Administration Server Configuration
  • 8.4.6 Creating a Separate Domain Directory for Managed Servers in the Same Node as the Administration Server
  • 8.4.7 Applying the Java Required Files (JRF) Template to the WSM-PM_Cluster
  • 8.4.8 Disabling Host Name Verification for the Administration Server and the WLS_WSM1 Managed Server
  • 8.4.9 Starting and Validating the WLS_WSM1 Managed Server
• 8.5 Propagating the Domain Configuration to SOAHOST2
  • 8.5.1 Propagating the Domain Configuration to SOAHOST2 Using the unpack Utility
  • 8.5.2 Disabling Host Name Verification for the WLS_WSM2 Managed Server
  • 8.5.3 Starting Node Manager on SOAHOST2
  • 8.5.4 Starting and Validating the WLS_WSM2 Managed Server
  • 8.5.5 Configuring the Java Object Cache for Oracle WSM
• 8.6 Configuring Oracle HTTP Server for the WebLogic Domain
  • 8.6.1 Configuring Oracle HTTP Server for the Administration Server and the WLS_WSMn Managed Servers
  • 8.6.2 Turning on the WebLogic Plug-In Enabled Flag
  • 8.6.3 Registering Oracle HTTP Server With WebLogic Server
  • 8.6.4 Setting the Frontend URL for the Administration Console and Setting Redirection Preferences
  • 8.6.5 Validating Access Through Oracle HTTP Server
  • 8.6.6 Manually Failing Over the Administration Server to SOAHOST2
  • 8.6.7 Validating Access to SOAHOST2 Through Oracle HTTP Server
  • 8.6.8 Failing the Administration Server Back to SOAHOST1
• 8.7 Backing Up the WebLogic Domain Configuration

9 Extending the Domain for SOA Components

• 9.1 Overview of Extending the Domain for SOA Components
• 9.2 Preparing to Extend the Domain for Oracle SOA Components
  • 9.2.1 Enabling VIP2 on SOAHOST1 and VIP3 on SOAHOST2
• 9.3 Extending the Domain for SOA Components using the Configuration Wizard
• 9.4 Configuring Oracle Coherence for Deploying Composites
  • 9.4.1 Enabling Communication for Deployment Using Unicast Communication
  • 9.4.2 Specifying the Host Name Used by Oracle Coherence
• 9.5 Post-Configuration and Verification Tasks
  • 9.5.1 Disabling Host Name Verification for the WLS_SOAn Managed Server
  • 9.5.2 Restarting the Node Manager on SOAHOST1
  • 9.5.3 Verifying GridLink Data Source Configuration and ONS for Oracle SOA Suite
  • 9.5.4 Propagating the Domain Changes to the Managed Server Domain Directory
  • 9.5.5 Starting and Validating the WLS_SOA1 Managed Server
• 9.6 Propagating the Domain Configuration to SOAHOST2
  • 9.6.1 Propagating the Domain Configuration to SOAHOST2 Using the unpack Utility
  • 9.6.2 Starting and Validating the WLS_SOA2 Managed Server
• 9.7 Configuring Oracle HTTP Server with the Extended Domain
  • 9.7.1 Configuring Oracle HTTP Server for the WLS_SOAn Managed Servers
  • 9.7.2 Validating Access Through Oracle HTTP Server
  • 9.7.3 Setting the Frontend HTTP Host and Port
• 9.8 Configuring a Default Persistence Store for Transaction Recovery
• 9.9 Configuring Oracle Adapters
  • 9.9.1 Enabling High Availability for Oracle File and FTP Adapters
    • 9.9.1.1 Using the Database Mutex Locking Operation
  • 9.9.2 Enabling High Availability for Oracle JMS Adapter
  • 9.9.3 Scaling the Oracle Database Adapter
• 9.10 Backing Up the SOA Configuration

10 Extending the Domain for WebCenter Portal Components

• 10.1 Overview of Extending the Domain for WebCenter Portal Components
• 10.2 Extending the Domain for WebCenter Portal Components using the Configuration Wizard
• 10.3 Post-Configuration Tasks
  • 10.3.1 Disabling Host Name Verification for the WebCenter Portal Managed Servers
  • 10.3.2 Starting Node Manager on SOAHOST1
  • 10.3.3 Propagating the Domain Changes to the Managed Server Domain Directory
• 10.4 Propagating the Domain Configuration to SOAHOST2, WCPHOST1, and WCPHOST2
  • 10.4.1 Propagating the Domain Configuration to SOAHOST2, WCPHOST1, and WCPHOST2 Using the unpack Utility
  • 10.4.2 Starting the Node Manager on WCPHOST1 and WCPHOST2
  • 10.4.3 Starting the WC_Spaces1, WC_Portlet1, WC_Utilities1, and WC_Collaboration1 Managed Servers on WCPHOST1
  • 10.4.4 Verifying GridLink Data Source Configuration and ONS for WebCenter Portal
  • 10.4.5 Validating the WC_Spaces1, WC_Portlet1, WC_Utilities1, and WC_Collaboration1 Managed Servers
  • 10.4.6 Starting the WC_Spaces2, WC_Portlet2, WC_Utilities2, and WC_Collaboration2 Managed Servers on WCPHOST2
  • 10.4.7 Validating the WC_Spaces2, WC_Portlet2, WC_Utilities2, and WC_Collaboration2 Managed Servers
• 10.5 Configuring the Java Object Cache for Spaces_Cluster
• 10.6 Converting Discussions from Multicast to Unicast
• 10.7 Configuring Clustering on the Discussions Server
• 10.8 Configuring Analytics
• 10.9 Configuring Activity Graph
• 10.10 Configuring REST APIs
• 10.11 Configuring Oracle HTTP Server with the Extended Domain
  • 10.11.1 Configuring Oracle HTTP Server for the WC_Spacesn, WC_Portletn, WC_Utilitiesn, and WC_Collaborationn Managed Servers
    • 10.11.1.1 Configuring Microsoft Clients
  • 10.11.2 Validating Access Through Oracle HTTP Server
  • 10.11.3 Validating Access Through the Load Balancer
• 10.12 Backing Up the WebCenter Portal Configuration

11 Setting Up Node Manager for an Enterprise Deployment

• 11.1 Overview of the Node Manager
• 11.2 Changing the Location of Node Manager Log
• 11.3 Enabling Host Name Verification Certificates for Node Manager in SOAHOST1 and WCPHOST1
  • 11.3.1 Generating Self-Signed Certificates Using the utils.CertGen Utility
  • 11.3.2 Creating an Identity Keystore Using the utils.ImportPrivateKey Utility
  • 11.3.3 Creating a Trust Keystore Using the Keytool Utility
  • 11.3.4 Configuring Node Manager to Use the Custom Keystores
  • 11.3.5 Using a Common or Shared Storage Installation
• 11.4 Starting the Node Manager on SOAHOST1
• 11.5 Enabling Host Name Verification Certificates for the Node Manager in SOAHOST2 and WCPHOST2
  • 11.5.1 Generating Self-Signed Certificates Using the utils.CertGen Utility
  • 11.5.2 Creating an Identity Keystore in Using the utils.ImportPrivateKey Utility
  • 11.5.3 Configuring Node Manager to Use the Custom Keystores
• 11.6 Starting Node Manager on SOAHOST2
• 11.7 Configuring WebLogic Servers to Use the Custom Keystores

12 Configuring External WebCenter Portal Services for an Enterprise Deployment

• 12.1 Configuring the Discussions Server Connection
  • 12.1.1 Creating a Discussions Server Connection Using Fusion Middleware Control
  • 12.1.2 Creating a Discussions Server Connection using WLST
• 12.2 Configuring the Instant Messaging and Presence (IMP) Server Connection
• 12.3 Configuring a BPEL Server Connection for Worklists and Workflows
  • 12.3.1 Before You Start
  • 12.3.2 Configuring Worklists and Workflow using Fusion Middleware Control
  • 12.3.3 Configuring Worklist and Workflow using WLST
• 12.4 Registering Portlet Producers
  • 12.4.1 Registering Out-of-the-Box Portlet Producers using Fusion Middleware Control
  • 12.4.2 Registering Out-of-the-Box Portlet Producers Using WLST
• 12.5 Registering the Pagelet Producer
• 12.6 Configuring Search Services
• 12.7 Configuring the Mail Server for Notifications

13 Extending the Domain to Include Oracle WebCenter Content

• 13.1 Overview of Extending the Domain to Include Oracle WebCenter Content
• 13.2 Extending the Domain to Include Oracle WebCenter Content
• 13.3 Propagating the Domain Configuration to WCPHOST1 and WCPHOST2 Using the unpack Utility
• 13.4 Configuring the Load Balancer to Route WebCenter Content Traffic
• 13.5 Starting Node Manager on WCPHOST1 and WCPHOST2
• 13.6 Restarting the Administration Server
• 13.7 Starting the WLS_WCC1 Managed Server
• 13.8 Verifying GridLink Data Source Configuration and ONS for WebCenter Content
• 13.9 Configuring the Content Server (on WLS_WCC1 Managed Server)
• 13.10 Updating the cwallet File in the Administration Server
• 13.11 Starting and Configuring the WLS_WCC2 Managed Server
• 13.12 Configuring Service Retries for Oracle WebCenter Content
• 13.13 Configuring Oracle HTTP Server for the WLS_WCC Managed Servers
• 13.14 Validating Access Through Oracle HTTP Server
• 13.15 Backing Up the Installation
• 13.16 Configure Oracle WebCenter Content for Oracle WebCenter Portal
  • 13.16.1 Enabling Mandatory Content Server Components (Folders_g and WebCenterConfigure)
  • 13.16.2 Enabling and Configuring the Dynamic Converter Component
  • 13.16.3 Configuring Additional Content Server Features
• 13.17 Registering Oracle WebCenter Content with Oracle WebCenter Portal Applications
• 13.18 Installing and Configuring the Inbound Refinery
  • 13.18.1 Extending the Domain to Include Inbound Refinery
  • 13.18.2 Propagating the Domain Configuration to WCPHOST1 and WCPHOST2 Using the unpack Utility
  • 13.18.3 Restarting the Administration Server
  • 13.18.4 Starting the Inbound Refinery Managed Servers
  • 13.18.5 Configuring Inbound Refinery
    • 13.18.5.1 Configuring Inbound Refinery Settings
    • 13.18.5.2 Configuring Document Conversion
    • 13.18.5.3 Configuring Oracle WebCenter Content with the Inbound Refinery

14 Configuring Server Migration for an Enterprise Deployment

• 14.1 Overview of Server Migration for an Enterprise Deployment
• 14.2 Setting Up a User and Tablespace for the Server Migration Leasing Table
• 14.3 Creating a a GridLink Data Source for Leasing Using the Administration Console
• 14.4 Enabling Host Name Verification Certificates between SOAHOST1 and SOAHOST2 and the Administration Server
• 14.5 Editing the Node Manager's Properties File
• 14.6 Setting Environment and Superuser Privileges for the wlsifconfig.sh Script
• 14.7 Configuring Server Migration Targets
• 14.8 Testing Server Migration

15 Integrating an Enterprise Deployment with Oracle Identity Management

• 15.1 Overview of Integration With Oracle Identity Management
• 15.2 Configuring the Credential Store
  • 15.2.1 Creating the LDAP Authenticator
  • 15.2.2 Moving the WebLogic Administrator to LDAP
    • 15.2.2.1 Provisioning Admin Users and Groups in an LDAP Directory
    • 15.2.2.2 Assigning the Admin Role to the Admin Group
    • 15.2.2.3 Updating the boot.properties File and Restarting the System
  • 15.2.3 Reassociating the Domain Credential Store
• 15.3 Configuring the Policy Store
  • 15.3.1 Setting a Node in the Server Directory
  • 15.3.2 Reassociating the Domain Policy Store
• 15.4 Reassociating Credentials and Policies
• 15.5 Oracle Access Manager 10g Integration
  • 15.5.1 Overview of Oracle Access Manager Integration
  • 15.5.2 Prerequisites for Oracle Access Manager
  • 15.5.3 Using the OAM Configuration Tool
    • 15.5.3.1 Prerequisites for Running the OAM Configuration Tool
    • 15.5.3.2 Running the OAM Configuration Tool
    • 15.5.3.3 Updating the REST Policies
    • 15.5.3.4 Creating an Exclusion Policy for Oracle SES and Portlets
    • 15.5.3.5 Verifying Successful Creation of the Policy Domain and AccessGate
    • 15.5.3.6 Updating the Host Identifier
    • 15.5.3.7 Updating the WebGate Profile
    • 15.5.3.8 Adding Additional Access Servers
    • 15.5.3.9 Configuring Delegated Form Authentication
  • 15.5.4 Installing and Configuring WebGate
  • 15.5.5 Configuring IP Validation for the Webgate
  • 15.5.6 Setting Up WebLogic Authenticators
    • 15.5.6.1 Back Up Configuration Files
    • 15.5.6.2 Setting Up the OAM ID Asserter
    • 15.5.6.3 Setting the Order of Providers
  • 15.5.7 Configuring Virtual Hosts for OAM 10g
• 15.6 Oracle Access Manager 11g Integration
  • 15.6.1 Overview of Oracle Access Manager Integration
  • 15.6.2 Prerequisites for Oracle Access Manager
  • 15.6.3 Installing WebGate
    • 15.6.3.1 Prerequisite for Installing GCC Libraries
    • 15.6.3.2 Installing WebGate
    • 15.6.3.3 Post-Installation Steps
  • 15.6.4 Registering the WebGate Agent
    • 15.6.4.1 The RREG Tool
    • 15.6.4.2 Updating the OAM11gRequest file
    • 15.6.4.3 Running the oamreg Tool
    • 15.6.4.4 Copying Access files to WEBHOSTs
    • 15.6.4.5 Updating REST Policies
  • 15.6.5 Setting Up the WebLogic Authenticators
    • 15.6.5.1 Back Up Configuration Files
    • 15.6.5.2 Setting Up the OAM ID Asserter
    • 15.6.5.3 Setting the Order of Providers
  • 15.6.6 Configuring Virtual Hosts for OAM11g
• 15.7 Configuring WebCenter Portal Applications for SSO
  • 15.7.1 Configuring System Properties for WebCenter Portal: Spaces
  • 15.7.2 Configuring the WebCenter Portal: Spaces Administrator Role
    • 15.7.2.1 Granting the Spaces Administrator Role Using WLST
    • 15.7.2.2 Granting the Spaces Administrator Role Using Fusion Middleware Control
  • 15.7.3 Setting Up Discussions Server to Use OAM as SSO Provider
    • 15.7.3.1 Granting Administrator Permissions on the Discussions Server
    • 15.7.3.2 Configuring System Properties for Discussions Server
• 15.8 Configuring WebCenter Portal and BPEL Authentication
  • 15.8.1 Verify Authenticators
  • 15.8.2 Set Role Members for BPMWorkflowAdmin Application Role in soa-infra
  • 15.8.3 Configure SOA Callback URLs
• 15.9 Backing Up the Identity Management Configuration

16 Managing the Topology for an Enterprise Deployment

• 16.1 Overview of Managing Monitoring the Topology
• 16.2 Managing Space in the SOA Infrastructure Database
• 16.3 Configuring UMS Drivers
• 16.4 Scaling Up the Topology (Adding Managed Servers to Existing Nodes)
  • 16.4.1 Scaling up Oracle SOA (includes WSM)
  • 16.4.2 Scaling Up Oracle WebCenter Portal
  • 16.4.3 Scaling Up Oracle WebCenter Content
• 16.5 Scaling Out the Topology (Adding Managed Servers to New Nodes)
  • 16.5.1 Scaling Out Oracle SOA (includes WSM)
  • 16.5.2 Scaling Out Oracle WebCenter Portal
  • 16.5.3 Scaling Out Oracle WebCenter Content
• 16.6 Performing Backups and Recoveries in WebCenter Portal Deployments
• 16.7 Preventing Timeouts for SQLNet Connections
• 16.8 Troubleshooting Oracle WebCenter Portal Enterprise Deployments
  • 16.8.1 Error While Activating Changes in Administration Console
  • 16.8.2 Redirecting of Users to Login Screen After Activating Changes in Administration Console
  • 16.8.3 Redirecting of Users to Administration Console's Home Page After Activating Changes to OAM
  • 16.8.4 WC_Spaces Server Does Not Start after Propagation of Domain
  • 16.8.5 Administration Server Fails to Start After a Manual Failover
  • 16.8.6 Portlet Unavailable After Database Failover
  • 16.8.7 Configured JOC Port Already in Use
  • 16.8.8 Restoring a JMS Configuration
  • 16.8.9 OAM Configuration Tool Does Not Remove URLs
  • 16.8.10 Disabling Secondary Authentication After REST Policy Configuration
  • 16.8.11 Sudo Error Occurs During Server Migration

A Using Multi Data Sources with Oracle RAC

• A.1 About Multi Data Sources and Oracle RAC
• A.2 Typical Procedure for Configuring Multi Data Sources for an EDG Topology

Index