Oracle® Fusion Middleware Quick Installation Guide for Oracle Identity Management 11g Release 1 (11.1.1) Part Number E10033-09 |
|
|
PDF · Mobi · ePub |
This chapter provides information you should review before installing Oracle Identity Management 11g Release 1 (11.1.1) components.
It includes the following topics:
Note:
For information about prerequisites for installing the 11g (11.1.1.6.0) version of Oracle Internet Directory (OID), Oracle Virtual Directory (OVD), Oracle Directory Services Manager (ODSM), Oracle Directory Integration Platform (ODIP), and Oracle Identity Federation (OIF), see Before Installing Oracle Identity Management (11.1.1.6.0).For information about prerequisites for installing the 11g (11.1.1.5.0) version of Oracle Identity Manager (OIM), Oracle Access Manager (OAM), Oracle Adaptive Access Manager (OAAM), Oracle Entitlements Server (OES), and Oracle Identity Navigator (OIN), see Before Installing Oracle Identity and Access Management (11.1.1.5.0).
This topic provides information you should review before installing OID, OVD, ODSM, ODIP, and OIF (11.1.1.6.0).
This section discusses the following topics:
Understanding Oracle Fusion Middleware Support of 64-bit JDK
Installing and Configuring Java Access Bridge (Windows Only)
Before performing any installation, you should read the system requirements and certification documents to ensure that your environment meets the minimum installation requirements for the products you are installing.
Oracle Fusion Middleware System Requirements and Specifications at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html
This document contains information related to hardware and software requirements, minimum disk space and memory requirements, and required system libraries, packages, or patches.
Oracle Fusion Middleware Supported System Configurations at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
This document contains information related to supported installation types, platforms, operating systems, databases, JDKs, and third-party products.
For interoperability and compatibility issues that may arise when installing, refer to Oracle Fusion Middleware Interoperability and Compatibility Guide.
This document contains important information regarding the ability of Oracle Fusion Middleware products to function with previous versions of other Oracle Fusion Middleware, Oracle, or third-party products. This information is applicable to both new Oracle Fusion Middleware users and existing users who are upgrading their existing environment.
If you are using a 64-bit JVM in your environment, ensure that all your Oracle Fusion Middleware components are using the 64-bit JVM. You cannot mix components using a 32-bit JVM with those using a 64-bit JVM.
For more information, refer to the "System Requirements and Supported Platforms for Oracle Fusion Middleware 11gR1" document, available at the following page:
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
If your Oracle Fusion Middleware components are running in a 64-bit JVM environment, ensure that WebLogic Server is installed with the 64-bit JDK. For 32-bit JVM support, refer to the Oracle Fusion Middleware Release Notes for information on how to configure your environment for 32-bit JVM support for your platform.
If you are installing Oracle Identity Management on a Windows system, you have the option of installing and configuring Java Access Bridge for Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility features:
Download Java Access Bridge from the following Web site:
http://java.sun.com/javase/technologies/accessibility/accessbridge/
Install Java Access Bridge.
Copy access-bridge.jar
and jaccess-1_4.jar
from your installation location to the jre\lib\ext
directory.
Copy the WindowsAccessBridge.dll
, JavaAccessBridge.dll
, and JAWTAccessBridge.dll
files from your installation location to the jre\bin
directory.
Copy the accessibility.properties
file to the jre\lib
directory.
Oracle Directory Integration Platform (ODIP) and Oracle Identity Federation (OIF) are configured with a WebLogic domain. Oracle Internet Directory (OID) and Oracle Virtual Directory (OVD) can be configured with or without a WebLogic domain. For Oracle Identity Management products that require a WebLogic domain, you must configure Node Manager.
You must perform the following steps after installing Oracle WebLogic Server and before installing Oracle Identity Management:
Verify the Oracle WebLogic Server Node Manager utility is stopped. If it is running, kill the process. Use the following commands to identify running process and kill the same:
For example, on UNIX:
1) ps-ef | grep -i nodemanager
This will return the Process Id of the Node Manager Process.
2) kill -9
<Process Id of the Node Manager Process>
On Windows:
Use the Windows Task Manager to identify running Node Manager processes and kill the same.
Determine if the nodemanager.properties
file is present in the WL_HOME/common/nodemanager/directory
.
If the nodemanager.properties file is not present, then follow the instructions below:
On UNIX:
Run startNodeManager.sh
(Located at <WL_HOME>/server/bin
directory) to start Node Manager.
On Windows:
Run startNodeManager.cmd
(Located at <WL_HOME>\server\bin
directory) to start Node Manager.
If the nodemanager.properties
file does exist, open it and verify that the ListenPort
parameter is included and that it is set. If the ListenPort
parameter is not included or set, edit the nodemanager.properties file so that it is similar to the following, where NODE_MANAGER_LISTEN_PORT represents the port the Node Manager listens on, such as 5556
:
ListenPort=NODE_MANAGER_LISTEN_PORT
This section discusses the following topics:
Installing and Configuring Java Access Bridge (Windows Only)
Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g Software
Installing Oracle WebLogic Server and Creating the Oracle Middleware Home
Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)
Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users Only)
Before performing any installation, you should read the system requirements and certification documents to ensure that your environment meets the minimum installation requirements for the products you are installing.
Oracle Fusion Middleware System Requirements and Specifications at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html
This document contains information related to hardware and software requirements, minimum disk space and memory requirements, and required system libraries, packages, or patches.
Oracle Fusion Middleware Supported System Configurations at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
This document contains information related to supported installation types, platforms, operating systems, databases, JDKs, and third-party products.
For interoperability and compatibility issues that may arise when installing, refer to Oracle Fusion Middleware Interoperability and Compatibility Guide.
This document contains important information regarding the ability of Oracle Fusion Middleware products to function with previous versions of other Oracle Fusion Middleware, Oracle, or third-party products. This information is applicable to both new Oracle Fusion Middleware users and existing users who are upgrading their existing environment.
If you are installing Oracle Identity and Access Management on a Windows operating system, you have the option of installing and configuring Java Access Bridge for Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility features:
Download Java Access Bridge from the following URL:
http://java.sun.com/javase/technologies/accessibility/accessbridge/
Install Java Access Bridge.
Copy access-bridge.jar
and jaccess-1_4.jar
from your installation location to the jre\lib\ext
directory.
Copy the WindowsAccessBridge.dll
, JavaAccessBridge.dll
, and JAWTAccessBridge.dll
files from your installation location to the jre\bin
directory.
Copy the accessibility.properties
file to the jre\lib
directory.
Refer to the following for more information about the latest Oracle WebLogic Server and Oracle Fusion Middleware 11g software:
You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):
http://www.oracle.com/technetwork/index.html
For information about downloading Oracle WebLogic Server, see "Product Distribution" in the Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.
For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.
Before you can install Oracle Identity and Access Management 11g Release 1 (11.1.1) components, you must install Oracle WebLogic Server and create the Oracle Middleware Home directory.
For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide.
In addition, see Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server for complete information about installing Oracle WebLogic Server.
Oracle WebLogic Server Directory Structure
After you install Oracle WebLogic Server and create a Middleware Home, a home directory, such as wlserver_10.3
, is created for Oracle WebLogic Server under your Middleware Home. This home directory is referred to as WL_HOME
.
At the same level as WL_HOME
, separate directories are created for the following components associated with Oracle WebLogic Server:
Sun JDK - jdk160_24
Oracle JRockit - jrockit_1.6.0_24
Note:
Ensure that the JDK version you select is Java SE 6 Update 24 or higher.Note that WebLogic domains are created in a directory named domains
located in the user_projects
directory under your Middleware Home. After you configure any of the Oracle Identity and Access Management products in a WebLogic administration domain, a new directory for the domain is created in the domains
directory. In addition, a directory named applications
is created in the user_projects
directory. This applications
directory contains the applications deployed in the domain.
You must install an Oracle Database before you can install some Oracle Identity and Access Management components. The database must be up and running to install the relevant Oracle Identity and Access Management component. The database does not have to be on the same system where you are installing the Oracle Identity and Access Management component.
The following database versions are supported:
10.2.0.4
11.1.0.7
11.2
Note:
You can locate the most recent information about supported databases by referring to the "Reviewing System Requirements and Certification" topic in this chapter.Table 2-1 lists the databases requirements for RCU at the time of publication:
Table 2-1 RCU Database Requirements
Category | Minimum or Accepted Value |
---|---|
Version |
Oracle Database 10.2.0.4, 11.1.0.7, or 11.2 (11.1.0.7 or later for non-XE database). Note: When installing the database, you must choose the AL32UTF8 character set. |
Shared Pool Size |
147456 KB |
SGA Maximum Size |
147456 KB |
Block Size |
8 KB |
Processes |
500 |
Note:
If you are using Oracle Database 11.1.0.7 for Oracle Identity Manager, you should install a set of platform-specific patches before creating Oracle Identity Manager schemas. For more information, see the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.After installing the Oracle 11g database, you must complete the following steps:
Log in to the database as the sys
(default) user.
Run the following commands:
alter system set session_cached_cursors=100 scope=spfile;
alter system set processes=500 scope=spfile;
Bounce the database and continue with the installation of Oracle Fusion Middleware Repository Creation Utility (RCU) and loading of schemas.
You must create and load the appropriate Oracle Fusion Middleware schema in your database before installing the following Oracle Identity and Access Management components and configurations:
Oracle Identity Manager
Oracle Access Manager
Oracle Adaptive Access Manager
Oracle Entitlements Server
You create and load Oracle Fusion Middleware schema in your database using the Oracle Fusion Middleware Repository Creation Utility (RCU), which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release media and on the Oracle Technology Network (OTN) web site. You can access the OTN web site at:
http://www.oracle.com/technetwork/index.html
Note:
RCU is available only on Linux and Windows platforms. Use the Linux RCU to create schemas on supported UNIX databases. Use Windows RCU to create schemas on supported Windows databases. After you extract the contents of thercuHome.zip
file to a directory, you can see the executable file rcu
in the BIN
directory.
For information about launching and running RCU, see the "Launching RCU with a Variety of Methods" and "Running Oracle Fusion Middleware Repository Creation Utility (RCU)" topics in the guide Oracle Fusion Middleware Repository Creation Utility User's Guide. For information about troubleshooting RCU, see the "Troubleshooting Repository Creation Utility" topic in the guide Oracle Fusion Middleware Repository Creation Utility User's Guide.
When you run RCU, create and load only the following schema for the Oracle Identity and Access Management component you are installing—do not select any other schema available in RCU:
For Oracle Identity Manager, select the Identity Management - Oracle Identity Manager schema. The SOA Infrastructure schema, the User Messaging Service schema, and the Metadata Services schema are also selected, by default.
For Oracle Adaptive Access Manager, select the Identity Management - Oracle Adaptive Access Manager schema. By default, the AS Common Schemas - Metadata Services schema is also selected.
For Oracle Adaptive Access Manager with partition schema support, select the Identity Management - Oracle Adaptive Access Manager (Partition Supp...) schema. By default, the AS Common Schemas - Metadata Services schema is also selected.
Note:
For information about Oracle Adaptive Access Manager schema partitions, see the "OAAM Partition Schema Reference" topic in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.For Oracle Access Manager, select the Identity Manager - Oracle Access Manager schema. By default, the AS Common Schema - Audit Services schema is also selected.
For Oracle Entitlements Server, select the Identity Management - Oracle Entitlements Server schema. By default, the AS Common Schemas - Metadata Services schema is also selected.
Note:
When you create a schema, be sure to remember the schema owner and password that is shown in RCU.If you are creating schemas on databases with Oracle Database Vault installed, note that statements such as CREATE USER, ALTER USER, DROP USER, CREATE PROFILE, ALTER PROFILE, and DROP PROFILE can only be issued by a user with the DV_ACCTMGR role. SYSDBA can issue these statements by modifying the Can Maintain Accounts/Profiles rule set only if it is allowed.
See:
The Oracle Fusion Middleware Repository Creation Utility User's Guide for complete information.If you want to reuse an existing database schema, you must upgrade your old database schema to work with Oracle Fusion Middleware 11g products and components.
For information about upgrading your existing database schema, see Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management.
If you are installing Oracle Identity Manager, you must install the latest version of Oracle SOA Suite (11.1.1.5.0).
Follow the instructions in this section to install the latest Oracle SOA Suite software. The installation of Oracle SOA Suite is a prerequisite for configuring Oracle Identity Manager.
Installing the latest version of Oracle SOA Suite 11g involves the following steps:
Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software
Installing Oracle WebLogic Server and Creating the Middleware Home
Refer to the following for more information about the latest Oracle WebLogic Server and Oracle Fusion Middleware 11g software:
You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):
http://www.oracle.com/technetwork/index.html
At the time this document was published, the latest release of Oracle Fusion Middleware 11g was 11g Release 1 (11.1.1.5.0), which provides new features and capabilities that supersede those available in Oracle Fusion Middleware 11g Release 1 (11.1.1.1.0) and 11g Release 1 (11.1.1.2.0).
For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.
Oracle SOA Suite requires Oracle WebLogic Server and a Middleware Home directory. For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide. In addition, see "Running the Installation Program in Graphical Mode" in Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.
Note:
If you have already created a Middleware Home before installing Oracle Identity and Access Management components, you do not need to create a new Middleware Home again. You must use the same Middleware Home for installing Oracle SOA Suite.Note that only Oracle Identity Manager requires Oracle SOA Suite 11g (11.1.1.5.0). This step is required because Oracle Identity Manager uses process workflows in Oracle SOA Suite to manage request approvals.
Follow the instructions in Table 2-2 to install Oracle SOA Suite. If you need additional help with any of the installation screens, click Help to access the online help.
To start the Oracle SOA Suite installation wizard, you must complete the following steps:
Extract the contents of the soa.zip
(11.1.1.5.0) to a directory, such as soa
.
From your present working directory, move to the Disk1
directory under soa
.
From the Disk1
directory, run runInstaller
(on UNIX) or setup.exe
(on Windows) executable files to launch the Oracle SOA Suite 11.1.1.5.0 installation wizard.
Table 2-2 Installation Flow for Install Only Option
No. | Screen | Description and Action Required |
---|---|---|
1 |
Welcome Screen |
Click Next to continue. |
2 |
Prerequisite Checks Screen |
Click Next to continue. |
3 |
Specify Installation Location Screen |
Specify the Middleware Home and Oracle Home locations. You must specify the location of the same Middleware Home that contains Oracle Identity and Access Management components. For more information about these directories, see "Oracle Fusion Middleware Directory Structure and Concepts" in Oracle Fusion Middleware Installation Planning Guide. Click Next to continue. |
4 |
Specify Security Updates Screen |
Provide your E-mail address to be informed of the latest product issues. Click Next to continue. |
5 |
Installation Summary Screen |
Verify the information on this screen. Click Install to begin the installation. |
6 |
Installation Progress Screen |
If you are installing on a UNIX system, you may be asked to run the Click Next to continue. |
7 |
Installation Complete Screen |
Click Finish to dismiss the installer. |