6 Oracle Database Appliance Postinstallation Tasks

Complete these administrative tasks after you have deployed software, but before the system is operational.

• Configuring CPU Core Count
  Oracle Database Appliance is delivered with all cores on each server enabled. Follow this procedure to reduce the number of cores, if required.
• Modifying Oracle ASM Listener Port After Deployment
  Understand how you can modify Oracle ASM listener port on Oracle Database Appliance after deployment.
• Securing Oracle ILOM Service Processors
  Change the Oracle ILOM default password after completing Oracle Database Appliance deployment.
• Changing Oracle Database Appliance Passwords
  After deploying your appliance, ensure that you change the following passwords for securing your system.

Configuring CPU Core Count

Oracle Database Appliance is delivered with all cores on each server enabled. Follow this procedure to reduce the number of cores, if required.

1. To reduce the number of cores, run the following command on Node 0 only:
   Set the cores in multiples of 2, for example, 12:

   [root@oak1 opt]# /opt/oracle/dcs/bin/odacli modify-cpucore --cores 12

   When you run the command, the nodes are restarted to apply the changes.
2. Check if the job completed successfully:

   [root@oak1 opt]# /opt/oracle/dcs/bin/odacli describe-job -i job_ID

3. Verify that the core count is updated on both nodes:

   [root@oak1 opt]# /opt/oracle/dcs/bin/odacli describe-cpucore 

Modifying Oracle ASM Listener Port After Deployment

Understand how you can modify Oracle ASM listener port on Oracle Database Appliance after deployment.

In earlier Oracle Database Appliance releases, you provisioned your bare metal system with Oracle ASM listener port 1525 as the default and as the Oracle ASM discovery address port from DB systems. Starting with Oracle Database Appliance release 19.24, you can customize Oracle ASM listener port number as a postinstallation task. All DB systems that you provision after changing the Oracle ASM listener port number use the new Oracle ASM port number.

Use the following command to modify the Oracle ASM listener port number:

odacli modify-asmport -p any_unused_port_between_1024_and_65536

For example:

# odacli modify-asmport -p 1528

Note:

You can run the odacli modify-asmport command only on deployments where the bare metal system is on Oracle Database Appliance release 19.24 and the DB system is on release 19.24 and you use the DB 23ai clones available with Oracle Database Appliance release 19.24.

Securing Oracle ILOM Service Processors

Change the Oracle ILOM default password after completing Oracle Database Appliance deployment.

Do not change the default password until after you have completed software deployment on the Oracle Database Appliance.

Changing Oracle ILOM Password from the Console

1. In the Oracle ILOM console, from the Administration menu, select User Management, and then navigate to the User Accounts subtab.

2. Select root user and click Edit.

3. Change the root user password.

Changing Oracle ILOM Password Using CLI Commands

1. Connect to the Oracle ILOM service processor (SP) through SSH:

   # ssh -l root SP-ipaddr

2. Set the new password:

   -> set /SP/users/root password=new_password
   Changing password for user /SP/users/root/password...
   Enter new password again: *********
   New password was successfully set for user /SP/users/root

Changing Oracle Database Appliance Passwords

After deploying your appliance, ensure that you change the following passwords for securing your system.

Changing the Oracle Installation Owner Passwords

During deployment, the root and database users SYS, SYSTEM and PDBADMIN are set to the system password. After deployment, the oracle and grid passwords are also set to the system password. Change the passwords to comply with your enterprise user security protocols. Refer to the Oracle Database Appliance Security Guide and Oracle Database Security Guide for information about the required configuration and best practices to secure database systems.

Changing the oda-admin User Password through the Command-Line

1. Log in to the appliance as root.

2. Run the odacli set-credential command to reset the password. Enter the new password when prompted.

   # odacli set-credential --username oda-admin
   Enter 'user' password: 
   Retype 'user' password:

Changing the the oda-admin User Password through the Browser User Interface

1. Log into the Browser User Interface using the user name oda-admin.

2. Click About, then User Settings in the upper right corner of the Browser User Interface.

3. Enter the password in the Password field and the Password Confirmation field, then click Submit.

   A confirmation message is displayed.

4. Click About, then click Sign Out.

5. Log back into the Browser User Interface with the new password.

Note:

The oda-admin password expiration period is 90 days.