1 About the OKM Plug-in for OEM

The plug-in for Oracle Enterprise Manager (OEM) Cloud Control provides monitoring for OKM clusters.

The plug-in monitors each KMA in the cluster and provides the following primary features:

• Gathers and presents key management system, configuration, and performance information for OKM clusters
• Raises alerts for pre-selected configuration and monitoring data
• Ties together Oracle ZFS storage appliances and Oracle databases that use OKM for its encrypted data.
• Supports monitoring by remote agents in the Cloud Control environment.

Sample Configurations Using the Plug-in

The OKM Cluster plug-in for OEM Cloud Control can support a variety of OKM configurations.

Before you deploy the plug-in, your planning process should consider the number of OKM clusters and each OKM cluster topology, along with the enterprise monitoring requirements. The figure below presents a large hypothetical enterprise including OKM clusters on three continents: North America, Europe, and South America. By presenting a large enterprise example, the diagram demonstrates a variety of possibilities for deploying the plug-in.

• An Admin Site that is not servicing any OKM agents
• Sites A and B that service OKM agents with keys.

Sites A and B contain isolated service networks for their agents. Your planning process should consider which KMA within each cluster will be used for the monitoring target.

In this example, the North American cluster uses KMA-Admin as the KMA within the Admin site for the plug-in. This plug-in will be hosted in the Management Agent with the target labeled “OKM-NA." You can configure other KMAs, but selecting this particular KMA minimizes traffic on KMAs that also service agents. You would need to perform a similar selection process for the other OKM clusters in Europe and South America.

Figure 1-1 Large Enterprise Plug-in Deployment Example

Description of "Figure 1-1 Large Enterprise Plug-in Deployment Example"

Supported Versions of OKM and OEM

Deployment of the Oracle Enterprise Manager System Monitoring Plug-in for OKM requires these specific software versions.

• Oracle Enterprise Manager Cloud Control 12c Release 4 (12.1.0.4.0) or higher (Oracle Management Server and Oracle Management Agent).
• The KMA used to monitor the OKM Cluster must be at Version 2.5.2 or later.

Note:

Additional software requirements, such as the correct Java version in Cloud Control, are met through the required applications listed, provided the correct versions are installed. The plug-in can be installed on any operating system in which Enterprise Manager Cloud Control is running.

To enable the plug-in to communicate with the OKM AES-256 encryption key, you must first install the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files on Management Agents that the plug-in is deployed to. See Enable Java Unlimited Cryptographic Strengths.