4 Installing and Removing the Webgate Bundle Patch

This section contains the following topics to guide you, as you prepare and install the WebGate files (or as you remove a WebGate, should you need to revert to your original installation):

4.1 Preparing All Environments and Downloading the Bundle Patch

This section introduces the Oracle patch mechanism (Opatch) and requirements that must be met before applying the bundle patch. Opatch is a Java-based utility that runs on all supported operating systems and requires installation of the Oracle Universal Installer.

Note:

Oracle recommends that you have the latest version of Opatch (version 13.9.2.0.0+) from My Oracle Support. Opatch requires access to a valid Oracle Universal Installer (OUI) Inventory to apply patches.

The patching process uses both unzip and Opatch executables. After sourcing the $ORACLE_HOME environment, Oracle recommends that you confirm that both of these exist before patching.

Perform steps in the following procedure to prepare your environment and download the bundle patch. Due to formatting constraints in this document, some sample text lines wrap around. These line wraps should be ignored.

Note:

Ignore line wrapping in syntax examples and ignore steps that do not apply to your environment or intended Opatch use.

Unless explicitly identified as relevant to only a specific condition, all steps apply to all Opatch environments. Steps that relate to only a specific condition are identified with a bold condition.

To prepare your environment and download the bundle patch:

  1. Download Opatch version 13.9.2.0.0 as follows:

    Note:

    If you already have Opatch, enter opatch -help to learn the version. You must download the 13.9.2.0.0 version.
  2. Confirm and add required executables to your system PATH:
    • Check your $ORACLE_HOME to confirm that it is pointing to the right Webgate$ORACLE_HOME.

    • Confirm the required executables are in your system PATH, and add these if needed:

      which opatch

      which unzip

    To add the required executables to your system path, you need to add the path of Opatch in PATH variable using the following: 

    export PATH=$ORACLE_HOME/OPatch:$PATH
  3. Verify the OUI Inventory using one of the following commands:
    opatch lsinventory

    or

    opatch lsinventory -jdk [Path to jdk8]

    If an error occurs, contact Oracle Support and work to validate and verify the inventory setup before proceeding.

  4. On the machine that will host the bundle patch files, create a directory to store the unzipped patch (referenced later as PATCH_TOP). For example:

    Linux: /home/11.1.2.3.180414/tmp

    Solaris: /opt/11.1.2.3.180414/tmp

    Windows: C:\11.1.2.3.180414\tmp

  5. Retrieve the Bundle Patch:
    • From My Oracle Support, click the Patches & Updates link.

    • Enter the Patch ID or Number, then click Search to display a Patch Search Results table.

    • Using the Release and Platform columns, find the desired patch, then click the associated Patch ID.

    • Download: In the page that appears, click the Download button to retrieve the packages.

  6. Unzip the patch zip file into the PATCH_TOP directory you created earlier. For example:
    unzip -d PATCH_TOP p27863709_122130_platform.zip
  7. Proceed as needed for your environment:

4.2 Preparing 64-Bit Oracle HTTP Server 12c WebGates on Windows 2012 64-Bit Platforms

If you are using Windows 2012 64-bit operating systems, you must install updated Microsoft Visual C++ 2010 libraries on the machine hosting the Oracle HTTP Server 12c Webgate for Oracle Access Manager.

To install Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package MFC Security Update

Install the Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package MFC Security Update for X64 systems, which can be downloaded from the following Web site:

https://www.microsoft.com/en-us/download/details.aspx?id=26999

Proceed to Installing a WebGate Bundle Patch on Any Platform

4.3 Installing a WebGate Bundle Patch on Any Platform

This section describes how to install WebGate bundle patches on any platform using Oracle patch (Opatch). While individual command syntax might differ depending on your platform, the overall procedure is the same for all platforms.

The files in each bundle patch are installed into the destination ORACLE_HOME. This enables you to remove (roll back) the bundle patch even if you have deleted the original bundle patch files from the temporary directory you created.

Oracle recommends that you back up the ORACLE_HOME using your preferred method before any patch operation. You can use any method (zip, cp -r, tar, and cpio) to compress the ORACLE_HOME.

When Opatch starts, it validates the patch to ensure there are no conflicts with the software already installed in your ORACLE_HOME:

  • Conflicts with a patch already applied to the ORACLE_HOME. In this case, stop the patch installation and contact Oracle Support Services.

  • Conflicts with subset patch already applied to the ORACLE_HOME. In this case, continue installation because the new patch contains all the fixes from the existing patch in the ORACLE_HOME. The subset patch is automatically rolled back before installation of the new patch begins.

To install a Webgate bundle patch on any platform:

  1. Before applying the bundle patch stop the node manager and OHS component.
  2. Complete all activities in Preparing All Environments and Downloading the Bundle Patch
  3. Finish preparing your deployment using one of the following topics, as needed:
  4. Log in as the same user who installed the base WebGate and:
    • Turn off the Web server associated with the protected application.

    • Back up your ORACLE_HOME.

    • Move the backup directory to another location and record this so you can locate it later, if needed.

  5. Set your current directory to the directory where the patch is located. For example:
    cd PATCH_TOP/27863709
  6. Use one of the following Opatch commands to apply the patch to your ORACLE_HOME:
    opatch apply

    or

    opatch apply -jdk [Path to jdk8]

  7. Restart the Web server.

4.4 Failure During WebGate Bundle Patch Installation

If there is a failure during your WebGate installation, your original WebGate installation is restored automatically.

Note:

You can check the window to see if you can discern the problem, then correct the problem and restart the bundle patch installation.

4.5 Rolling Back a WebGate Bundle Patch on Any System

The steps to remove a WebGate bundle patch from all systems are provided in the following procedure, if needed. While individual command syntax might differ depending on your platform, the overall procedure is the same.

Note:

If you see "Patch not present in the Oracle Home, Rollback cannot proceed", enter opatch rollback -help to get more information. If the patch was applied using -no_inventoryoption, use -ph option.

After the WebGate bundle patch is removed, the system is restored to the state it was in immediately before the bundle patch installation.

To roll back a WebGate bundle patch on any system:

  1. Perform all steps inPreparing All Environments and Downloading the Bundle Patch to verify the inventory, set any environment variables, shut down any services running from the ORACLE_HOME or host machine.
  2. Stop the WebGate Web server, and change to the directory where the patch was unzipped. For example:
    cd PATCH_TOP/27863709
  3. Back up the ORACLE_HOME directory that includes the bundle patch and move the backup to another location so you can locate it later, if needed.
  4. Run Opatch to roll back the patch. For example:
    opatch rollback -id 27863709

    or

    opatch rollback -id 27863709 -jdk PathtoJDK8
  5. Start the WebGate Web server.