SlideShare a Scribd company logo
1 of 64
Download to read offline
REMINDER
Check in on the
COLLABORATE mobile app
Where did my day go?: Oracle
Enterprise Manager 12c Administration
Prepared by:
Alfredo Krieg
Sr. Oracle Enterprise Cloud Administrator
The Sherwin-Williams Company
Session ID#: 230
@alfredokrieg
Where did my day go?: Oracle
Enterprise Manager 12c
Administration
Session ID#: 230
About me…
■ Work: Alfredo.Krieg.Villa@sherwin.com)
■ Personal: alfredokrieg@gmail.com
■ Senior Oracle Cloud Administrator at The Sherwin-Williams
Company based in Cleveland, Oh
■ Oracle ACE Associate
■ OEM Cloud Control 12c and Database Performance Tuning
■ Oracle Technologies since 2004 & 11g Certified
■ Blog bitkode.blogspot.com
The Sherwin-Williams Company
■ Largest Producer of Paint & Coatings in US, among Top 3 worldwide
■ Founded in 1866 in Cleveland, OH
■ 2016 is 150th Anniversary
■ 2013 - $10.19 billion in sales
■ Business in 120+ Countries
■ 34,000+ employees
■ 4,000+ Company Owned Stores
■ 90+ Manufacturing Facilities Globally
The Sherwin-Williams Company
The Sherwin-Williams Company was founded by
Henry Sherwin and Edward Williams in 1866.
Today, we are global leader in the manufacture,
development, distribution and sale of coatings and related
products to professional, industrial, commercial and retail
customers.
The Company manufactures products under well-known brands such as
Sherwin-Williams®, Dutch Boy®, Krylon®, Minwax®, Thompson’s®
Water Seal® and many more. With global headquarters in Cleveland,
Ohio, Sherwin-Williams® branded products are sold exclusively through
more than 4,000 company-operated stores and facilities, while the
Company’s other brands are sold through leading mass merchandisers,
home centers, hardware stores, automotive retailers and industrial
distributors.
www.sherwin-williams.com
Motivation
■ As an Enterprise Manager administrator you are responsible
of a wide variety of tasks including:
▪ Discovery and maintenance of targets
▪ Deploy plug-ins
▪ Tune OEM 12c performance
▪ Maintain backups
▪ Others (Cloud, Self-Service, Alerts, etc.)
■ With such time consuming tasks, administrators need to find
the most efficient ways to manage the manager.
▪ Best practices
▪ Task automation
▪ Command Line EMCLI
Agenda
■ Lifecycle Management
▪ EMCLI to deploy multiple Plug-ins at once
▪ Apply OMS, Plug-in and Agent patches during the same
maintenance window
▪ Mass Agent Deployment
■ Target Monitoring
▪ Monitoring Templates
▪ Alerts Report
▪ Administration Groups
■ Security
▪ Secure your SYSMAN schema account
▪ Secure and lock the OMS and Agents
▪ Use EMCLI to configure OEM Audit system
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - OMS
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - OMS
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - OMS
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - OMS
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - OMS
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - OMS
▪ deploy_plugin_on_server
— Deploys a plug-in on the Management Servers. The deployment
process for some plug-ins might restart the Management Servers. If
the plug-in is already deployed on one of the servers, this server is
skipped. If a lower version of the plug-in is already deployed, the
plug-in is upgraded. If a lower revision of the plug-in is already
deployed, the new revision is applied.
emcli deploy_plugin_on_server
-plugin="oracle.sysman.db:12.1.0.5.0;oracle.
sysman.emas.oms.plugin_12.1.0.5“
-sys_password=<sys_password>
-use_last_prereq_result
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once – OMS
$emcli deploy_plugin_on_server -
plugin="oracle.sysman.db;oracle.sysman.emas"
-prereq_check
Performing pre-requisites check... This will take a while.
Oracle recommends that you take a backup of the
repository, and export the first management server
configuration using the command "emctl exportconfig
oms". Otherwise ensure that appropriate recovery plan is
in place prior to deploying the plug-in.
Retry plug-in deployment once you have backed up the
repository and configuration of first management server.
Use the option "-repo_backup_taken" to confirm that
these have been backed up.
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once – OMS
■ Savings around 91 minutes
Lifecycle Management
■ Use EMCLI to deploy multiple plug-ins at once - Agent
▪ deploy_plugin_on_agent
— Deploys a plug-in on Management Agents. Agent names must be
provided for plug-in deployment.
emcli deploy_plugin_on_agent
-plugin=" oracle.sysman.db:12.1.0.5.0;
oracle.sysman.emas.oms.plugin_12.1.0.5.0"
-agent_names="myhost1.example.com:1838;
myhost2.example.com:1838"
Lifecycle Management
■ Apply OMS, Plug-in and Agent patches during the same
maintenance window
▪ I suggest to perform monthly maintenance on the OMS’s
▪ Test all patches and plug-ins on your QA environment first
▪ Always verify if your OPatch is up to date
▪ Always shutdown JVMD and APD before applying a patch
▪ Try to apply all the required changes on the same window
— Deploy new plug-ins (use emcli)
— Apply OMS patches (PSU’s & patches)
— Apply plug-in patches
— Apply patches to your standby OMS
▪ Agent patching can be done while OMS’s is up, but don’t forget
to patch the agents as well!
Lifecycle Management
■ Perform Mass Agent Deployment
Lifecycle Management
■ Perform Mass Agent Deployment
Lifecycle Management
■ Perform Mass Agent Deployment
Lifecycle Management
■ Perform Mass Agent Deployment
Lifecycle Management
■ Perform Mass Agent Deployment
▪ Fresh Install
— Installs the vanilla version of the agent.
▪ Clone Existing Agent
— Installs an agent using an existing source agent that is well tested
and patched.
▪ Add Host to Shared Agent
— Installs an agent using an existing master agent that is installed on a
NFS mounted drive.
Lifecycle Management
■ Perform Mass Agent Deployment
Lifecycle Management
■ Perform Mass Agent Deployment
emcli submit_add_host –host_names=<host_list>
-platform=<platform_id> -
installation_base_directory=<installation_base_
directory> -
credential_name=<credential_name>
-port=<agent_port>] [-
instance_directory=<instance_directory>] [-
credential_owner=<credential_owner>]
[-wait_for_completion] [-
source_agent=<clone_source_agent_name>] [-
master_agent=<master_agent_name>]
[ ] indicates that the parameter is optional
Agenda
■ Lifecycle Management
▪ EMCLI to deploy multiple Plug-ins at once
▪ Apply OMS, Plug-in and Agent patches during the same
maintenance window
▪ Mass Agent Deployment
■ Target Monitoring
▪ Monitoring Templates
▪ Alerts Report
▪ Administration Groups
■ Security
▪ Secure your SYSMAN schema account
▪ Secure and lock the OMS and Agents
▪ Use EMCLI to configure OEM Audit system
Monitoring Templates
■ Group of metrics and their thresholds for a particular target
type
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Monitoring Templates
Alerts Report
Alerts Report
Administration Groups
Administration Groups – Target Properties
Administration Groups
Administration Groups
Administration Groups
Administration Groups
Administration Groups
Administration Groups
Administration Groups
Administration Groups
Administration Groups
$ emcli login -username=sysman
Enter password :
Login successful
$ emcli set_target_property_value
-property_records="Development DB:composite:LifeCycle Status:Development"
-propagate_to_members
Properties updated successfully
$ emcli logout
Logout successful
Agenda
■ Lifecycle Management
▪ EMCLI to deploy multiple Plug-ins at once
▪ Apply OMS, Plug-in and Agent patches during the same
maintenance window
▪ Mass Agent Deployment
■ Target Monitoring
▪ Monitoring Templates
▪ Alerts Report
▪ Administration Groups
■ Security
▪ Secure your SYSMAN schema account
▪ Secure and lock the OMS and Agents
▪ Use EMCLI to configure OEM Audit system
Secure your SYSMAN account
■ SYSMAN is the schema owner, as a result is more privileged that a
Super Administrator.
■ Users and Administrators should login using their own accounts,
this is helpful while auditing operations.
■ There’s a method to disable SYSMAN access from the console and
emcli. DB access and “emctl status oms –details” still work.
SQL> UPDATE MGMT_CREATED_USERS
SET SYSTEM_USER='-1'
WHERE user_name='SYSMAN';
http://bitkode.blogspot.com/2014/12/oracle-
enterprise-manager-security.html
Set it to 1 to re-enable it
Secure and Lock OMS and Agents
■ Is recommended that all communications between OMS, agents,
repository and users is made by secure mode (HTTPS).
■ In secure mode, HTTP port is locked.
■ Secure mode is enabled by default, but upgrade does not secure-
lock the OMS.
■ Agents should be secured in order to make use of HTTPS port.
■ Agents not secured, will not be able to communicate with a secured
OMS.
Secure and Lock OMS and Agents
■ Not secured OMS
$ emctl status oms –details
Oracle Enterprise Manager Cloud Control 12c Release 4
Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host : host1.localdomain
HTTP Console Port : 7788
HTTPS Console Port : 7799
HTTP Upload Port : 4889
HTTPS Upload Port : 4900
EM Instance Home : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1/sysman/log
SLB or virtual hostname: host1-em.localdomain
HTTPS SLB Upload Port : 4900
HTTPS SLB Console Port : 443
Agent Upload is unlocked.
OMS Console is unlocked.
Active CA ID: 1
Console URL: https://host1-em.localdomain:443/em
Upload URL: https://host1-em.localdomain:4900/empbs/upload
Agent Upload is unlocked.
OMS Console is unlocked.
Secure and Lock OMS and Agents
■ Secure OMS
$ emctl secure lock
Oracle Enterprise Manager Cloud Control 12c Release 4
Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
OMS Console is locked. Access the console over HTTPS ports.
Agent Upload is locked. Agents must be secure and upload over HTTPS port.
Restart OMS.
$emctl stop oms
$emctl start oms
Secure and Lock OMS and Agents
■ Secured OMS
$ emctl status oms –details
Oracle Enterprise Manager Cloud Control 12c Release 4
Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host : host1.localdomain
HTTP Console Port : 7788
HTTPS Console Port : 7799
HTTP Upload Port : 4889
HTTPS Upload Port : 4900
EM Instance Home : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1/sysman/log
SLB or virtual hostname: host1-em.localdomain
HTTPS SLB Upload Port : 4900
HTTPS SLB Console Port : 443
Agent Upload is locked.
OMS Console is locked.
Active CA ID: 1
Console URL: https://host1-em.localdomain:443/em
Upload URL: https://host1-em.localdomain:4900/empbs/upload
Agent Upload is locked.
OMS Console is locked.
Secure and Lock OMS and Agents
■ Secure agent
$ emctl secure agent
Oracle Enterprise Manager Cloud Control 12c Release 4
Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved.
Agent successfully stopped... Done.
Securing agent... Started.
Enter Agent Registration Password : <Type agent registration password>
Agent successfully restarted... Done.
Securing agent... Successful.
Securing agent... Successful.
Use EMCLI to configure OEM Audit system
■ Basic OEM audit is enabled by default.
■ Whenever a user login-logout, the action is audited.
■ More default audit operations include:
▪ Apply Update
▪ Change MGMT_VIEW User Password
▪ Change Repository Password
▪ Configure Authentication
▪ Copy EM Key to Repository
▪ Remove EM Key from Repository
▪ Create Custom CA
▪ Remove Update
▪ Secure Console
▪ Secure Lock
▪ Secure OMS
Use EMCLI to configure OEM Audit system
■ You can configure the Enterprise Manager Audit System by using
the following EM CLI commands:
▪ enable_audit: Enables auditing for all user operations.
▪ disable_audit: Disables auditing for all user operations.
▪ show_operations_list: Shows a list of the user operations being
audited.
▪ show_audit_settings: Shows the audit status, operation list,
externalization service details, and purge period details.
▪ update_audit_settings: Updates the current audit settings in the
repository.
Use EMCLI to configure OEM Audit system
■ The update_audit_settings command updates the current audit
settings in the repository and restarts the Management Service.
emcli update_audit_settings -
audit_switch="ENABLE/DISABLE" -
operations_to_enable="name of the operations to
enable, for all oprtations use ALL" -
operations_to_disable="name of the operations to
disable, for all oprtations use ALL" -
externalization_switch="ENABLE/DISABLE" -
directory_name="directory_name (DB Directory)" -
file_prefix="file_prefix" -file_size="file_size
(Bytes)" -
data_retention_period="data_retention_period
(Days)"
Use EMCLI to configure OEM Audit system
▪ -audit_switch: Enables auditing across Enterprise Manager. The
possible values are ENABLE/DISABLE. Default value is DISABLE.
▪ -operations_to_enable: Enables auditing for specified operations.
Enter All to enable all operations.
▪ -operations_to_disable: Disables auditing for specified operations.
Enter All to disable all operations.
▪ -externalization_switch: Enables the audit data export service. The
possible values are ENABLE/DISABLE. Default value is DISABLE.
▪ -directory: The database directory that is mapped to the OS directory
where the export service archives the audit data files.
Use EMCLI to configure OEM Audit system
▪ -file_prefix: The file prefix to be used by the export service to create the
file in which audit data is to be stored.
▪ -file_size: The size of the file on which the audit data is to be stored.
The default value is 5000000 bytes.
▪ data_retention_period: The period for which the audit data is to be
retained inside the repository. The default value is 365 days.
http://docs.oracle.com/cd/E24628_01/doc.121/e36415/sec_features.ht
m#EMSEC12907
Want More?
■ Enterprise Manager Cloud Control Security Guide
http://docs.oracle.com/cd/E24628_01/doc.121/e36415/toc.htm
■ Enterprise Manager Cloud Control Administrator's Guide
http://docs.oracle.com/cd/E24628_01/doc.121/e24473/toc.htm
■ Enterprise Manager Command Line Interface
http://docs.oracle.com/cd/E24628_01/em.121/e17786/cli_verb
_ref.htm#EMCLI200
Please complete the session
evaluation
We appreciate your feedback and insight
You may complete the session evaluation either
on paper or online via the mobile app

More Related Content

What's hot

Database as a Service, Collaborate 2016
Database as a Service, Collaborate 2016Database as a Service, Collaborate 2016
Database as a Service, Collaborate 2016Kellyn Pot'Vin-Gorman
 
Oracle Enterprise Manager 12c: The Oracle Monitoring tool of choice – Why yo...
Oracle Enterprise Manager 12c:  The Oracle Monitoring tool of choice – Why yo...Oracle Enterprise Manager 12c:  The Oracle Monitoring tool of choice – Why yo...
Oracle Enterprise Manager 12c: The Oracle Monitoring tool of choice – Why yo...Jeff Kayser
 
Oracle - Enterprise Manager 12c Overview
Oracle - Enterprise Manager 12c OverviewOracle - Enterprise Manager 12c Overview
Oracle - Enterprise Manager 12c OverviewFred Sim
 
Oracle Enterprise Manager 13C and Hybrid Cloud
Oracle Enterprise Manager 13C and Hybrid CloudOracle Enterprise Manager 13C and Hybrid Cloud
Oracle Enterprise Manager 13C and Hybrid Cloudjobacle
 
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle ClusterwareManaging Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle ClusterwareLeighton Nelson
 
EM12C High Availability without SLB and RAC
EM12C High Availability without SLB and RACEM12C High Availability without SLB and RAC
EM12C High Availability without SLB and RACSecure-24
 
Advanced Shell Scripting for Oracle professionals
Advanced Shell Scripting for Oracle professionalsAdvanced Shell Scripting for Oracle professionals
Advanced Shell Scripting for Oracle professionalsAndrejs Vorobjovs
 
In Memory Database In Action by Tanel Poder and Kerry Osborne
In Memory Database In Action by Tanel Poder and Kerry OsborneIn Memory Database In Action by Tanel Poder and Kerry Osborne
In Memory Database In Action by Tanel Poder and Kerry OsborneEnkitec
 
Oracle Enterprise Manager 12c - OEM12c Presentation
Oracle Enterprise Manager 12c - OEM12c PresentationOracle Enterprise Manager 12c - OEM12c Presentation
Oracle Enterprise Manager 12c - OEM12c PresentationFrancisco Alvarez
 
Enabling: Optimized Integrations at Amway with Oracle SOA Suite
Enabling: Optimized Integrations at Amway with Oracle SOA SuiteEnabling: Optimized Integrations at Amway with Oracle SOA Suite
Enabling: Optimized Integrations at Amway with Oracle SOA SuiteRevelation Technologies
 
Configuring Oracle Enterprise Manager Cloud Control 12c for HA White Paper
Configuring Oracle Enterprise Manager Cloud Control 12c for HA White PaperConfiguring Oracle Enterprise Manager Cloud Control 12c for HA White Paper
Configuring Oracle Enterprise Manager Cloud Control 12c for HA White PaperLeighton Nelson
 
Enterprise manager 13c -let's connect to the Oracle Cloud
Enterprise manager 13c -let's connect to the Oracle CloudEnterprise manager 13c -let's connect to the Oracle Cloud
Enterprise manager 13c -let's connect to the Oracle CloudTrivadis
 
Oracle SOA Suite 12.2.1 new features
Oracle SOA Suite 12.2.1 new featuresOracle SOA Suite 12.2.1 new features
Oracle SOA Suite 12.2.1 new featuresMaarten Smeets
 
How to build a cloud adapter
How to build a cloud adapterHow to build a cloud adapter
How to build a cloud adapterMaarten Smeets
 
WebLogic Scripting Tool made Cool!
WebLogic Scripting Tool made Cool!WebLogic Scripting Tool made Cool!
WebLogic Scripting Tool made Cool!Maarten Smeets
 
Double the Performance of Oracle SOA Suite 11g? Absolutely!
Double the Performance of Oracle SOA Suite 11g? Absolutely!Double the Performance of Oracle SOA Suite 11g? Absolutely!
Double the Performance of Oracle SOA Suite 11g? Absolutely!Revelation Technologies
 

What's hot (20)

Database as a Service, Collaborate 2016
Database as a Service, Collaborate 2016Database as a Service, Collaborate 2016
Database as a Service, Collaborate 2016
 
Oracle Enterprise Manager
Oracle Enterprise ManagerOracle Enterprise Manager
Oracle Enterprise Manager
 
Oracle Enterprise Manager 12c: The Oracle Monitoring tool of choice – Why yo...
Oracle Enterprise Manager 12c:  The Oracle Monitoring tool of choice – Why yo...Oracle Enterprise Manager 12c:  The Oracle Monitoring tool of choice – Why yo...
Oracle Enterprise Manager 12c: The Oracle Monitoring tool of choice – Why yo...
 
Oracle - Enterprise Manager 12c Overview
Oracle - Enterprise Manager 12c OverviewOracle - Enterprise Manager 12c Overview
Oracle - Enterprise Manager 12c Overview
 
Oracle Enterprise Manager 13C and Hybrid Cloud
Oracle Enterprise Manager 13C and Hybrid CloudOracle Enterprise Manager 13C and Hybrid Cloud
Oracle Enterprise Manager 13C and Hybrid Cloud
 
Em13c New Features- Two of Two
Em13c New Features- Two of TwoEm13c New Features- Two of Two
Em13c New Features- Two of Two
 
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle ClusterwareManaging Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
Managing Oracle Enterprise Manager Cloud Control 12c with Oracle Clusterware
 
EM12C High Availability without SLB and RAC
EM12C High Availability without SLB and RACEM12C High Availability without SLB and RAC
EM12C High Availability without SLB and RAC
 
Advanced Shell Scripting for Oracle professionals
Advanced Shell Scripting for Oracle professionalsAdvanced Shell Scripting for Oracle professionals
Advanced Shell Scripting for Oracle professionals
 
Upgrading Em13c Collaborate 2016
Upgrading Em13c Collaborate 2016Upgrading Em13c Collaborate 2016
Upgrading Em13c Collaborate 2016
 
In Memory Database In Action by Tanel Poder and Kerry Osborne
In Memory Database In Action by Tanel Poder and Kerry OsborneIn Memory Database In Action by Tanel Poder and Kerry Osborne
In Memory Database In Action by Tanel Poder and Kerry Osborne
 
Em13c New Features- One of Two
Em13c New Features- One of TwoEm13c New Features- One of Two
Em13c New Features- One of Two
 
Oracle Enterprise Manager 12c - OEM12c Presentation
Oracle Enterprise Manager 12c - OEM12c PresentationOracle Enterprise Manager 12c - OEM12c Presentation
Oracle Enterprise Manager 12c - OEM12c Presentation
 
Enabling: Optimized Integrations at Amway with Oracle SOA Suite
Enabling: Optimized Integrations at Amway with Oracle SOA SuiteEnabling: Optimized Integrations at Amway with Oracle SOA Suite
Enabling: Optimized Integrations at Amway with Oracle SOA Suite
 
Configuring Oracle Enterprise Manager Cloud Control 12c for HA White Paper
Configuring Oracle Enterprise Manager Cloud Control 12c for HA White PaperConfiguring Oracle Enterprise Manager Cloud Control 12c for HA White Paper
Configuring Oracle Enterprise Manager Cloud Control 12c for HA White Paper
 
Enterprise manager 13c -let's connect to the Oracle Cloud
Enterprise manager 13c -let's connect to the Oracle CloudEnterprise manager 13c -let's connect to the Oracle Cloud
Enterprise manager 13c -let's connect to the Oracle Cloud
 
Oracle SOA Suite 12.2.1 new features
Oracle SOA Suite 12.2.1 new featuresOracle SOA Suite 12.2.1 new features
Oracle SOA Suite 12.2.1 new features
 
How to build a cloud adapter
How to build a cloud adapterHow to build a cloud adapter
How to build a cloud adapter
 
WebLogic Scripting Tool made Cool!
WebLogic Scripting Tool made Cool!WebLogic Scripting Tool made Cool!
WebLogic Scripting Tool made Cool!
 
Double the Performance of Oracle SOA Suite 11g? Absolutely!
Double the Performance of Oracle SOA Suite 11g? Absolutely!Double the Performance of Oracle SOA Suite 11g? Absolutely!
Double the Performance of Oracle SOA Suite 11g? Absolutely!
 

Similar to Where did my day go?: OEM 12c Administration #em12c #C15LV @IOUG

2016_1201_gangler_ppt
2016_1201_gangler_ppt2016_1201_gangler_ppt
2016_1201_gangler_pptSecure-24
 
Using RPM's to Automagically to install Oracle Agents to EM12C
Using RPM's to Automagically to install Oracle Agents to EM12CUsing RPM's to Automagically to install Oracle Agents to EM12C
Using RPM's to Automagically to install Oracle Agents to EM12CSecure-24
 
CON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptx
CON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptxCON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptx
CON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptxSergioBruno21
 
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...Courtney Llamas
 
Dan Norris: Exadata security
Dan Norris: Exadata securityDan Norris: Exadata security
Dan Norris: Exadata securityKyle Hailey
 
Oracle Enterprise manager 13c Installation
Oracle Enterprise manager 13c InstallationOracle Enterprise manager 13c Installation
Oracle Enterprise manager 13c InstallationOsama Mustafa
 
Oracle Enterprise Manager 13c Installation
Oracle Enterprise Manager 13c InstallationOracle Enterprise Manager 13c Installation
Oracle Enterprise Manager 13c Installationzkmatu
 
Best Practices with CA Workload Automation AutoSys (AE)
Best Practices with CA Workload Automation AutoSys (AE)Best Practices with CA Workload Automation AutoSys (AE)
Best Practices with CA Workload Automation AutoSys (AE)CA Technologies
 
From 0 to Secure in 1 Minute - Securing laaS - Nir Valtman
From 0 to Secure in 1 Minute - Securing laaS - Nir ValtmanFrom 0 to Secure in 1 Minute - Securing laaS - Nir Valtman
From 0 to Secure in 1 Minute - Securing laaS - Nir ValtmanEC-Council
 
Ovms ops manager_admin
Ovms ops manager_adminOvms ops manager_admin
Ovms ops manager_adminsati1981
 
ENT401 Deep Dive with Amazon EC2 Systems Manager
ENT401 Deep Dive with Amazon EC2 Systems ManagerENT401 Deep Dive with Amazon EC2 Systems Manager
ENT401 Deep Dive with Amazon EC2 Systems ManagerAmazon Web Services
 
Oracle Enterprise Manager Seven Robust Features to Put in Action final
Oracle Enterprise Manager Seven Robust Features to Put in Action finalOracle Enterprise Manager Seven Robust Features to Put in Action final
Oracle Enterprise Manager Seven Robust Features to Put in Action finalDatavail
 
Welcome to MySQL
Welcome to MySQLWelcome to MySQL
Welcome to MySQLGrigale LTD
 
Cloudefigo - From zero to secure in 1 minute
Cloudefigo - From zero to secure in 1 minuteCloudefigo - From zero to secure in 1 minute
Cloudefigo - From zero to secure in 1 minuteIsrael AWS User Group
 
A crushing blow at the heart of SAP’s J2EE Engine.
A crushing blow at the heart of SAP’s J2EE Engine. A crushing blow at the heart of SAP’s J2EE Engine.
A crushing blow at the heart of SAP’s J2EE Engine. ERPScan
 
DEFCON 23 - Nir Valtman and Moshe Ferber - from zero to secure in 1
DEFCON 23 - Nir Valtman and  Moshe Ferber - from zero to secure in 1DEFCON 23 - Nir Valtman and  Moshe Ferber - from zero to secure in 1
DEFCON 23 - Nir Valtman and Moshe Ferber - from zero to secure in 1Felipe Prado
 

Similar to Where did my day go?: OEM 12c Administration #em12c #C15LV @IOUG (20)

2016_1201_gangler_ppt
2016_1201_gangler_ppt2016_1201_gangler_ppt
2016_1201_gangler_ppt
 
Using RPM's to Automagically to install Oracle Agents to EM12C
Using RPM's to Automagically to install Oracle Agents to EM12CUsing RPM's to Automagically to install Oracle Agents to EM12C
Using RPM's to Automagically to install Oracle Agents to EM12C
 
Em13c features- HotSos 2016
Em13c features- HotSos 2016Em13c features- HotSos 2016
Em13c features- HotSos 2016
 
CON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptx
CON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptxCON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptx
CON5451_Brydon-OOW2014_Brydon_CON5451 (1).pptx
 
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
Zero to Manageability in 60 Minutes: Building a Solid Foundation for Oracle E...
 
Dan Norris: Exadata security
Dan Norris: Exadata securityDan Norris: Exadata security
Dan Norris: Exadata security
 
Oracle Enterprise manager 13c Installation
Oracle Enterprise manager 13c InstallationOracle Enterprise manager 13c Installation
Oracle Enterprise manager 13c Installation
 
Oracle Enterprise Manager 13c Installation
Oracle Enterprise Manager 13c InstallationOracle Enterprise Manager 13c Installation
Oracle Enterprise Manager 13c Installation
 
Booting Weblogic - OOW14
Booting Weblogic - OOW14Booting Weblogic - OOW14
Booting Weblogic - OOW14
 
Production-ready Software
Production-ready SoftwareProduction-ready Software
Production-ready Software
 
Oracle autovue
Oracle autovueOracle autovue
Oracle autovue
 
Best Practices with CA Workload Automation AutoSys (AE)
Best Practices with CA Workload Automation AutoSys (AE)Best Practices with CA Workload Automation AutoSys (AE)
Best Practices with CA Workload Automation AutoSys (AE)
 
From 0 to Secure in 1 Minute - Securing laaS - Nir Valtman
From 0 to Secure in 1 Minute - Securing laaS - Nir ValtmanFrom 0 to Secure in 1 Minute - Securing laaS - Nir Valtman
From 0 to Secure in 1 Minute - Securing laaS - Nir Valtman
 
Ovms ops manager_admin
Ovms ops manager_adminOvms ops manager_admin
Ovms ops manager_admin
 
ENT401 Deep Dive with Amazon EC2 Systems Manager
ENT401 Deep Dive with Amazon EC2 Systems ManagerENT401 Deep Dive with Amazon EC2 Systems Manager
ENT401 Deep Dive with Amazon EC2 Systems Manager
 
Oracle Enterprise Manager Seven Robust Features to Put in Action final
Oracle Enterprise Manager Seven Robust Features to Put in Action finalOracle Enterprise Manager Seven Robust Features to Put in Action final
Oracle Enterprise Manager Seven Robust Features to Put in Action final
 
Welcome to MySQL
Welcome to MySQLWelcome to MySQL
Welcome to MySQL
 
Cloudefigo - From zero to secure in 1 minute
Cloudefigo - From zero to secure in 1 minuteCloudefigo - From zero to secure in 1 minute
Cloudefigo - From zero to secure in 1 minute
 
A crushing blow at the heart of SAP’s J2EE Engine.
A crushing blow at the heart of SAP’s J2EE Engine. A crushing blow at the heart of SAP’s J2EE Engine.
A crushing blow at the heart of SAP’s J2EE Engine.
 
DEFCON 23 - Nir Valtman and Moshe Ferber - from zero to secure in 1
DEFCON 23 - Nir Valtman and  Moshe Ferber - from zero to secure in 1DEFCON 23 - Nir Valtman and  Moshe Ferber - from zero to secure in 1
DEFCON 23 - Nir Valtman and Moshe Ferber - from zero to secure in 1
 

More from Alfredo Krieg

Clone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13c
Clone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13cClone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13c
Clone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13cAlfredo Krieg
 
Collaborate 2019 - How to Understand an AWR Report
Collaborate 2019 - How to Understand an AWR ReportCollaborate 2019 - How to Understand an AWR Report
Collaborate 2019 - How to Understand an AWR ReportAlfredo Krieg
 
Simplifying EBS 12.2 ADOP - Collaborate 2019
Simplifying EBS 12.2 ADOP - Collaborate 2019   Simplifying EBS 12.2 ADOP - Collaborate 2019
Simplifying EBS 12.2 ADOP - Collaborate 2019 Alfredo Krieg
 
Oracle database 12.2 new features
Oracle database 12.2 new featuresOracle database 12.2 new features
Oracle database 12.2 new featuresAlfredo Krieg
 
Performance Management in Oracle 12c
Performance Management in Oracle 12cPerformance Management in Oracle 12c
Performance Management in Oracle 12cAlfredo Krieg
 
Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...
Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...
Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...Alfredo Krieg
 
Oracle SPM 12c. IOUG #C15LV
Oracle SPM 12c. IOUG #C15LVOracle SPM 12c. IOUG #C15LV
Oracle SPM 12c. IOUG #C15LVAlfredo Krieg
 
Oracle database performance are database users telling me the truth
Oracle database performance are database users telling me the truthOracle database performance are database users telling me the truth
Oracle database performance are database users telling me the truthAlfredo Krieg
 
553: Oracle Database Performance: Are Database Users Telling Me The Truth?
553: Oracle Database Performance: Are  Database Users Telling Me The Truth?553: Oracle Database Performance: Are  Database Users Telling Me The Truth?
553: Oracle Database Performance: Are Database Users Telling Me The Truth?Alfredo Krieg
 

More from Alfredo Krieg (9)

Clone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13c
Clone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13cClone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13c
Clone Oracle Databases In Minutes Without Risk Using Enterprise Manager 13c
 
Collaborate 2019 - How to Understand an AWR Report
Collaborate 2019 - How to Understand an AWR ReportCollaborate 2019 - How to Understand an AWR Report
Collaborate 2019 - How to Understand an AWR Report
 
Simplifying EBS 12.2 ADOP - Collaborate 2019
Simplifying EBS 12.2 ADOP - Collaborate 2019   Simplifying EBS 12.2 ADOP - Collaborate 2019
Simplifying EBS 12.2 ADOP - Collaborate 2019
 
Oracle database 12.2 new features
Oracle database 12.2 new featuresOracle database 12.2 new features
Oracle database 12.2 new features
 
Performance Management in Oracle 12c
Performance Management in Oracle 12cPerformance Management in Oracle 12c
Performance Management in Oracle 12c
 
Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...
Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...
Monitor Engineered Systems from a Single Pane of Glass: Oracle Enterprise Man...
 
Oracle SPM 12c. IOUG #C15LV
Oracle SPM 12c. IOUG #C15LVOracle SPM 12c. IOUG #C15LV
Oracle SPM 12c. IOUG #C15LV
 
Oracle database performance are database users telling me the truth
Oracle database performance are database users telling me the truthOracle database performance are database users telling me the truth
Oracle database performance are database users telling me the truth
 
553: Oracle Database Performance: Are Database Users Telling Me The Truth?
553: Oracle Database Performance: Are  Database Users Telling Me The Truth?553: Oracle Database Performance: Are  Database Users Telling Me The Truth?
553: Oracle Database Performance: Are Database Users Telling Me The Truth?
 

Recently uploaded

Machine learning workshop, CZU Prague 2024
Machine learning workshop, CZU Prague 2024Machine learning workshop, CZU Prague 2024
Machine learning workshop, CZU Prague 2024Gokulks007
 
ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8
ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8
ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8Access Innovations, Inc.
 
Burning Issue presentation of Zhazgul N. , Cycle 54
Burning Issue presentation of Zhazgul N. , Cycle 54Burning Issue presentation of Zhazgul N. , Cycle 54
Burning Issue presentation of Zhazgul N. , Cycle 54ZhazgulNurdinova
 
The Real Story Of Project Manager/Scrum Master From Where It Came?!
The Real Story Of Project Manager/Scrum Master From Where It Came?!The Real Story Of Project Manager/Scrum Master From Where It Came?!
The Real Story Of Project Manager/Scrum Master From Where It Came?!Loay Mohamed Ibrahim Aly
 
Communication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptxCommunication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptxkb31670
 
Communication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptxCommunication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptxkb31670
 
Dynamics of Professional Presentationpdf
Dynamics of Professional PresentationpdfDynamics of Professional Presentationpdf
Dynamics of Professional Presentationpdfravleel42
 
Juan Pablo Sugiura - eCommerce Day Bolivia 2024
Juan Pablo Sugiura - eCommerce Day Bolivia 2024Juan Pablo Sugiura - eCommerce Day Bolivia 2024
Juan Pablo Sugiura - eCommerce Day Bolivia 2024eCommerce Institute
 

Recently uploaded (8)

Machine learning workshop, CZU Prague 2024
Machine learning workshop, CZU Prague 2024Machine learning workshop, CZU Prague 2024
Machine learning workshop, CZU Prague 2024
 
ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8
ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8
ISO 25964-1Working Group ISO/TC 46/SC 9/WG 8
 
Burning Issue presentation of Zhazgul N. , Cycle 54
Burning Issue presentation of Zhazgul N. , Cycle 54Burning Issue presentation of Zhazgul N. , Cycle 54
Burning Issue presentation of Zhazgul N. , Cycle 54
 
The Real Story Of Project Manager/Scrum Master From Where It Came?!
The Real Story Of Project Manager/Scrum Master From Where It Came?!The Real Story Of Project Manager/Scrum Master From Where It Came?!
The Real Story Of Project Manager/Scrum Master From Where It Came?!
 
Communication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptxCommunication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptx
 
Communication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptxCommunication Accommodation Theory Kaylyn Benton.pptx
Communication Accommodation Theory Kaylyn Benton.pptx
 
Dynamics of Professional Presentationpdf
Dynamics of Professional PresentationpdfDynamics of Professional Presentationpdf
Dynamics of Professional Presentationpdf
 
Juan Pablo Sugiura - eCommerce Day Bolivia 2024
Juan Pablo Sugiura - eCommerce Day Bolivia 2024Juan Pablo Sugiura - eCommerce Day Bolivia 2024
Juan Pablo Sugiura - eCommerce Day Bolivia 2024
 

Where did my day go?: OEM 12c Administration #em12c #C15LV @IOUG

  • 1. REMINDER Check in on the COLLABORATE mobile app Where did my day go?: Oracle Enterprise Manager 12c Administration Prepared by: Alfredo Krieg Sr. Oracle Enterprise Cloud Administrator The Sherwin-Williams Company Session ID#: 230 @alfredokrieg
  • 2. Where did my day go?: Oracle Enterprise Manager 12c Administration Session ID#: 230
  • 3. About me… ■ Work: Alfredo.Krieg.Villa@sherwin.com) ■ Personal: alfredokrieg@gmail.com ■ Senior Oracle Cloud Administrator at The Sherwin-Williams Company based in Cleveland, Oh ■ Oracle ACE Associate ■ OEM Cloud Control 12c and Database Performance Tuning ■ Oracle Technologies since 2004 & 11g Certified ■ Blog bitkode.blogspot.com
  • 4. The Sherwin-Williams Company ■ Largest Producer of Paint & Coatings in US, among Top 3 worldwide ■ Founded in 1866 in Cleveland, OH ■ 2016 is 150th Anniversary ■ 2013 - $10.19 billion in sales ■ Business in 120+ Countries ■ 34,000+ employees ■ 4,000+ Company Owned Stores ■ 90+ Manufacturing Facilities Globally
  • 5. The Sherwin-Williams Company The Sherwin-Williams Company was founded by Henry Sherwin and Edward Williams in 1866. Today, we are global leader in the manufacture, development, distribution and sale of coatings and related products to professional, industrial, commercial and retail customers. The Company manufactures products under well-known brands such as Sherwin-Williams®, Dutch Boy®, Krylon®, Minwax®, Thompson’s® Water Seal® and many more. With global headquarters in Cleveland, Ohio, Sherwin-Williams® branded products are sold exclusively through more than 4,000 company-operated stores and facilities, while the Company’s other brands are sold through leading mass merchandisers, home centers, hardware stores, automotive retailers and industrial distributors. www.sherwin-williams.com
  • 6. Motivation ■ As an Enterprise Manager administrator you are responsible of a wide variety of tasks including: ▪ Discovery and maintenance of targets ▪ Deploy plug-ins ▪ Tune OEM 12c performance ▪ Maintain backups ▪ Others (Cloud, Self-Service, Alerts, etc.) ■ With such time consuming tasks, administrators need to find the most efficient ways to manage the manager. ▪ Best practices ▪ Task automation ▪ Command Line EMCLI
  • 7. Agenda ■ Lifecycle Management ▪ EMCLI to deploy multiple Plug-ins at once ▪ Apply OMS, Plug-in and Agent patches during the same maintenance window ▪ Mass Agent Deployment ■ Target Monitoring ▪ Monitoring Templates ▪ Alerts Report ▪ Administration Groups ■ Security ▪ Secure your SYSMAN schema account ▪ Secure and lock the OMS and Agents ▪ Use EMCLI to configure OEM Audit system
  • 8. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - OMS
  • 9. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - OMS
  • 10. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - OMS
  • 11. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - OMS
  • 12. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - OMS
  • 13. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - OMS ▪ deploy_plugin_on_server — Deploys a plug-in on the Management Servers. The deployment process for some plug-ins might restart the Management Servers. If the plug-in is already deployed on one of the servers, this server is skipped. If a lower version of the plug-in is already deployed, the plug-in is upgraded. If a lower revision of the plug-in is already deployed, the new revision is applied. emcli deploy_plugin_on_server -plugin="oracle.sysman.db:12.1.0.5.0;oracle. sysman.emas.oms.plugin_12.1.0.5“ -sys_password=<sys_password> -use_last_prereq_result
  • 14. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once – OMS $emcli deploy_plugin_on_server - plugin="oracle.sysman.db;oracle.sysman.emas" -prereq_check Performing pre-requisites check... This will take a while. Oracle recommends that you take a backup of the repository, and export the first management server configuration using the command "emctl exportconfig oms". Otherwise ensure that appropriate recovery plan is in place prior to deploying the plug-in. Retry plug-in deployment once you have backed up the repository and configuration of first management server. Use the option "-repo_backup_taken" to confirm that these have been backed up.
  • 15. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once – OMS ■ Savings around 91 minutes
  • 16. Lifecycle Management ■ Use EMCLI to deploy multiple plug-ins at once - Agent ▪ deploy_plugin_on_agent — Deploys a plug-in on Management Agents. Agent names must be provided for plug-in deployment. emcli deploy_plugin_on_agent -plugin=" oracle.sysman.db:12.1.0.5.0; oracle.sysman.emas.oms.plugin_12.1.0.5.0" -agent_names="myhost1.example.com:1838; myhost2.example.com:1838"
  • 17. Lifecycle Management ■ Apply OMS, Plug-in and Agent patches during the same maintenance window ▪ I suggest to perform monthly maintenance on the OMS’s ▪ Test all patches and plug-ins on your QA environment first ▪ Always verify if your OPatch is up to date ▪ Always shutdown JVMD and APD before applying a patch ▪ Try to apply all the required changes on the same window — Deploy new plug-ins (use emcli) — Apply OMS patches (PSU’s & patches) — Apply plug-in patches — Apply patches to your standby OMS ▪ Agent patching can be done while OMS’s is up, but don’t forget to patch the agents as well!
  • 18. Lifecycle Management ■ Perform Mass Agent Deployment
  • 19. Lifecycle Management ■ Perform Mass Agent Deployment
  • 20. Lifecycle Management ■ Perform Mass Agent Deployment
  • 21. Lifecycle Management ■ Perform Mass Agent Deployment
  • 22. Lifecycle Management ■ Perform Mass Agent Deployment ▪ Fresh Install — Installs the vanilla version of the agent. ▪ Clone Existing Agent — Installs an agent using an existing source agent that is well tested and patched. ▪ Add Host to Shared Agent — Installs an agent using an existing master agent that is installed on a NFS mounted drive.
  • 23. Lifecycle Management ■ Perform Mass Agent Deployment
  • 24. Lifecycle Management ■ Perform Mass Agent Deployment emcli submit_add_host –host_names=<host_list> -platform=<platform_id> - installation_base_directory=<installation_base_ directory> - credential_name=<credential_name> -port=<agent_port>] [- instance_directory=<instance_directory>] [- credential_owner=<credential_owner>] [-wait_for_completion] [- source_agent=<clone_source_agent_name>] [- master_agent=<master_agent_name>] [ ] indicates that the parameter is optional
  • 25. Agenda ■ Lifecycle Management ▪ EMCLI to deploy multiple Plug-ins at once ▪ Apply OMS, Plug-in and Agent patches during the same maintenance window ▪ Mass Agent Deployment ■ Target Monitoring ▪ Monitoring Templates ▪ Alerts Report ▪ Administration Groups ■ Security ▪ Secure your SYSMAN schema account ▪ Secure and lock the OMS and Agents ▪ Use EMCLI to configure OEM Audit system
  • 26. Monitoring Templates ■ Group of metrics and their thresholds for a particular target type
  • 41. Administration Groups – Target Properties
  • 50. Administration Groups $ emcli login -username=sysman Enter password : Login successful $ emcli set_target_property_value -property_records="Development DB:composite:LifeCycle Status:Development" -propagate_to_members Properties updated successfully $ emcli logout Logout successful
  • 51. Agenda ■ Lifecycle Management ▪ EMCLI to deploy multiple Plug-ins at once ▪ Apply OMS, Plug-in and Agent patches during the same maintenance window ▪ Mass Agent Deployment ■ Target Monitoring ▪ Monitoring Templates ▪ Alerts Report ▪ Administration Groups ■ Security ▪ Secure your SYSMAN schema account ▪ Secure and lock the OMS and Agents ▪ Use EMCLI to configure OEM Audit system
  • 52. Secure your SYSMAN account ■ SYSMAN is the schema owner, as a result is more privileged that a Super Administrator. ■ Users and Administrators should login using their own accounts, this is helpful while auditing operations. ■ There’s a method to disable SYSMAN access from the console and emcli. DB access and “emctl status oms –details” still work. SQL> UPDATE MGMT_CREATED_USERS SET SYSTEM_USER='-1' WHERE user_name='SYSMAN'; http://bitkode.blogspot.com/2014/12/oracle- enterprise-manager-security.html Set it to 1 to re-enable it
  • 53. Secure and Lock OMS and Agents ■ Is recommended that all communications between OMS, agents, repository and users is made by secure mode (HTTPS). ■ In secure mode, HTTP port is locked. ■ Secure mode is enabled by default, but upgrade does not secure- lock the OMS. ■ Agents should be secured in order to make use of HTTPS port. ■ Agents not secured, will not be able to communicate with a secured OMS.
  • 54. Secure and Lock OMS and Agents ■ Not secured OMS $ emctl status oms –details Oracle Enterprise Manager Cloud Control 12c Release 4 Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : Console Server Host : host1.localdomain HTTP Console Port : 7788 HTTPS Console Port : 7799 HTTP Upload Port : 4889 HTTPS Upload Port : 4900 EM Instance Home : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1 OMS Log Directory Location : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1/sysman/log SLB or virtual hostname: host1-em.localdomain HTTPS SLB Upload Port : 4900 HTTPS SLB Console Port : 443 Agent Upload is unlocked. OMS Console is unlocked. Active CA ID: 1 Console URL: https://host1-em.localdomain:443/em Upload URL: https://host1-em.localdomain:4900/empbs/upload Agent Upload is unlocked. OMS Console is unlocked.
  • 55. Secure and Lock OMS and Agents ■ Secure OMS $ emctl secure lock Oracle Enterprise Manager Cloud Control 12c Release 4 Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : OMS Console is locked. Access the console over HTTPS ports. Agent Upload is locked. Agents must be secure and upload over HTTPS port. Restart OMS. $emctl stop oms $emctl start oms
  • 56. Secure and Lock OMS and Agents ■ Secured OMS $ emctl status oms –details Oracle Enterprise Manager Cloud Control 12c Release 4 Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : Console Server Host : host1.localdomain HTTP Console Port : 7788 HTTPS Console Port : 7799 HTTP Upload Port : 4889 HTTPS Upload Port : 4900 EM Instance Home : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1 OMS Log Directory Location : /u01/oracle/oms/12.1.0.4/gc_inst/em/EMGC_OMS1/sysman/log SLB or virtual hostname: host1-em.localdomain HTTPS SLB Upload Port : 4900 HTTPS SLB Console Port : 443 Agent Upload is locked. OMS Console is locked. Active CA ID: 1 Console URL: https://host1-em.localdomain:443/em Upload URL: https://host1-em.localdomain:4900/empbs/upload Agent Upload is locked. OMS Console is locked.
  • 57. Secure and Lock OMS and Agents ■ Secure agent $ emctl secure agent Oracle Enterprise Manager Cloud Control 12c Release 4 Copyright (c) 1996, 2014 Oracle Corporation. All rights reserved. Agent successfully stopped... Done. Securing agent... Started. Enter Agent Registration Password : <Type agent registration password> Agent successfully restarted... Done. Securing agent... Successful. Securing agent... Successful.
  • 58. Use EMCLI to configure OEM Audit system ■ Basic OEM audit is enabled by default. ■ Whenever a user login-logout, the action is audited. ■ More default audit operations include: ▪ Apply Update ▪ Change MGMT_VIEW User Password ▪ Change Repository Password ▪ Configure Authentication ▪ Copy EM Key to Repository ▪ Remove EM Key from Repository ▪ Create Custom CA ▪ Remove Update ▪ Secure Console ▪ Secure Lock ▪ Secure OMS
  • 59. Use EMCLI to configure OEM Audit system ■ You can configure the Enterprise Manager Audit System by using the following EM CLI commands: ▪ enable_audit: Enables auditing for all user operations. ▪ disable_audit: Disables auditing for all user operations. ▪ show_operations_list: Shows a list of the user operations being audited. ▪ show_audit_settings: Shows the audit status, operation list, externalization service details, and purge period details. ▪ update_audit_settings: Updates the current audit settings in the repository.
  • 60. Use EMCLI to configure OEM Audit system ■ The update_audit_settings command updates the current audit settings in the repository and restarts the Management Service. emcli update_audit_settings - audit_switch="ENABLE/DISABLE" - operations_to_enable="name of the operations to enable, for all oprtations use ALL" - operations_to_disable="name of the operations to disable, for all oprtations use ALL" - externalization_switch="ENABLE/DISABLE" - directory_name="directory_name (DB Directory)" - file_prefix="file_prefix" -file_size="file_size (Bytes)" - data_retention_period="data_retention_period (Days)"
  • 61. Use EMCLI to configure OEM Audit system ▪ -audit_switch: Enables auditing across Enterprise Manager. The possible values are ENABLE/DISABLE. Default value is DISABLE. ▪ -operations_to_enable: Enables auditing for specified operations. Enter All to enable all operations. ▪ -operations_to_disable: Disables auditing for specified operations. Enter All to disable all operations. ▪ -externalization_switch: Enables the audit data export service. The possible values are ENABLE/DISABLE. Default value is DISABLE. ▪ -directory: The database directory that is mapped to the OS directory where the export service archives the audit data files.
  • 62. Use EMCLI to configure OEM Audit system ▪ -file_prefix: The file prefix to be used by the export service to create the file in which audit data is to be stored. ▪ -file_size: The size of the file on which the audit data is to be stored. The default value is 5000000 bytes. ▪ data_retention_period: The period for which the audit data is to be retained inside the repository. The default value is 365 days. http://docs.oracle.com/cd/E24628_01/doc.121/e36415/sec_features.ht m#EMSEC12907
  • 63. Want More? ■ Enterprise Manager Cloud Control Security Guide http://docs.oracle.com/cd/E24628_01/doc.121/e36415/toc.htm ■ Enterprise Manager Cloud Control Administrator's Guide http://docs.oracle.com/cd/E24628_01/doc.121/e24473/toc.htm ■ Enterprise Manager Command Line Interface http://docs.oracle.com/cd/E24628_01/em.121/e17786/cli_verb _ref.htm#EMCLI200
  • 64. Please complete the session evaluation We appreciate your feedback and insight You may complete the session evaluation either on paper or online via the mobile app