1 Installing and Configuring Oracle Enterprise Content Management Suite

1.3.5.1 Configuring a DHCP Host on a UNIX System

On a UNIX operating system, configure the host to resolve host names to the loopback IP address by modifying the /etc/hosts file to contain the following entries:

127.0.0.1 hostname.domainname hostname
127.0.0.1 localhost.localdomain localhost

To check that the host name resolves to the loopback IP address, use this command:

/bin/ping hostname.domainname

1.3.5.2 Configuring a DHCP Host on a Windows x86 System

On a Windows x86 operating system, install a loopback adapter on the DHCP server (see Section 1.3.5.3, "Installing a Loopback Adapter on a Windows System"). This assigns a local IP address to your computer.

After installing the adapter, add a line immediately after the localhost line in the %SYSTEMROOT%\system32\drivers\etc\hosts file, with the following format:

IP_address   hostname.domainname   hostname

Replace IP_address with the local IP address of the loopback adapter, hostname with the name of the host, and domainname with the name of the domain.

1.3.5.3 Installing a Loopback Adapter on a Windows System

On a Windows operating system, you can install a loopback adapter on the DHCP server to assign a local IP address to your computer.

To install a loopback adapter on a Windows system:

1. Open Control Panel.

2. Select Add Hardware.

3. In the "Welcome" window, click Next.

4. On the "Is the hardware connected?" window, select Yes, I have already connected the hardware, then click Next.

5. In the "The following hardware is already installed on your computer" window, in the list of installed hardware, select Add a new hardware device, then click Next.

6. In the "The wizard can help you install other hardware" window, select Install the hardware that I manually select from a list, then click Next.

7. In the "From the list of hardware types, select the type of hardware you are installing" window, select Network adapters, then click Next.

8. In the "Select Network Adapter" window, make the following selections:

   • Manufacturer: Microsoft

   • Network Adapter: Microsoft Loopback Adapter

9. Click Next.

10. In the "The wizard is ready to install your hardware" window, click Next.

11. In the "Completing the Add Hardware Wizard" window, click Finish.

12. Restart your computer.

13. Right-click My Network Places on the desktop and choose Properties. This displays the Network Connections control panel.

14. Right-click the connection that was just created. This is usually named Local Area Connection 2. Choose Properties.

15. On the General tab, select Internet Protocol (TCP/IP), then click Properties.

16. In the Internet Protocol (TCP/IP) Properties dialog box, click Use the following IP address, and then do the following steps:

    1. IP Address: Enter a nonroutable IP for the loopback adapter, such as one of the following nonroutable addresses:

       192.168.x.x (x is any value between 1 and 255)
       10.10.10.10
       

    2. Subnet mask: Enter 255.255.255.0.

    3. Record the values you entered because you will need them later in this procedure.

    4. Leave all other fields empty.

    5. Click OK.

17. In the Local Area Connection 2 Properties dialog box, click OK.

18. Close the Network Connections control panel.

19. Restart the computer.

1.3.5.4 Removing a Loopback Adapter from a Windows System

You can remove a loopback adapter through Control Panel.

To remove a loopback adapter from a Windows system:

1. Start the System control panel.

2. On the Hardware tab, click Device Manager.

3. In the Device Manager window, expand Network adapters. You should see Microsoft Loopback Adapter.

4. Right-click Microsoft Loopback Adapter and select Uninstall.

5. Click OK.

1.7.3.1 Add the Agent User to Oracle WebLogic Server

To log in to Oracle WebLogic Server, Oracle I/PM services use the agent user, which is agentadmin by default. If you are using the Oracle WebLogic Server embedded LDAP server, you need to add this agent user, or a unique user name for the agent user, so the services can log in.

To add the Agent user to Oracle WebLogic Server:

1. Start the Administration Server (see Section 1.7.1).

2. Access the Administration Console at

   http://adminServerHost:adminServerPort/console
   

   For adminServerHost, specify the name of the computer that hosts the Administration Server for your domain. For adminServerPort, specify the listen port number for the Administration Server. The default number is 7001. For example:

   http://myHost:7001/console
   

   To log in, supply the user name and password that were specified on the Configure Administrator User Name and Password screen in the configuration wizard.

3. Click Security Realms (on the left).

4. In the Realms table on the Summary of Security Realms page, click myrealm in the Name column to open the Settings for myrealm page.

5. Go to Users and Groups, click New, and add the agentadmin user (or a unique user name).

1.7.3.2 Configure Oracle Content Server 10g to Work with Oracle I/PM

You need to configure Oracle Content Server before it can work together with Oracle I/PM.

To configure Oracle Content Server 10g to work with Oracle I/PM:

1. Update the IP address filter:

   1. On the system where Oracle UCM is installed, navigate to the installation directory.

   2. Execute the SystemProperties application: ./bin/SystemProperties

   3. Click the Server tab.

   4. In the IP Address Filter field, add a vertical bar (|) followed by the IP address of the system where Oracle I/PM is installed.

      The IP address is required for the Oracle I/PM system to have access to the Oracle UCM system without authentication.

   5. Click OK.

      This change will require a restart of Oracle Content Server, which you can do at the end of this procedure, after installing the Oracle UCM components.

2. Open the Oracle UCM Web client in a Web browser (http://hostname:port/location, such as http://myhost.mycompany.com:8000/idc), and log in.

3. Open the Administration tray.

4. Upgrade the default file store:

   1. Under Administration, select Providers.

   2. Select Info in the Action column of the DefaultFileStore row.

      Oracle I/PM content is not accessible in a Web store. Oracle Content Server traditionally uses a weblayout directory on a file system to store content in a format for viewing in a Web browser, but this feature does not have much use in an Oracle I/PM solution and uses extra disk space. After the file store upgrade, you should disable the weblayout functionality in Oracle Content Server for any file store provider configured for use as an Oracle I/PM volume.

   3. When asked if you want to upgrade the file store, click Upgrade, and then click Update in the Edit File Store Provider dialog box.

      Oracle UCM does the upgrade automatically.

5. Configure system properties:

   1. Confirm that the SearchIndexerEngineName variable matches the type of Oracle UCM system to use (DATABASE.METADATA, DATABASE.FULLTEXT, or OracleTextSearch).

   2. Under Administration tray, select Admin Server.

   3. Click idc.

   4. Select General Configuration, on the left.

   5. Select Automatically assign a content ID on check in.

   6. Specify an Auto Number Prefix value, such as ucm1.

   7. Set the EnableIdcProfileField variable to 1:

      EnableIdcProfileField=1
      

   8. Click Save.

6. Install Oracle UCM components:

   1. Select Component Manager, on the left.

   2. In the Install New Component section, click Browse.

   3. Browse to the ECM_ORACLE_HOME/ipm/lib directory, and select IpmRepository.zip.

   4. Click Open.

   5. Click Install.

   6. Click Continue.

   7. Click here to return to the Component Manager.

   8. Select any installed component in the Update Bundle /component/CS10gR35UpdateBundle/extras directory and IpmRepository.

   9. Click Enable.

   10. In the Install New Component section, click Browse.

   11. On the Oracle Enterprise Content Management Suite media disk, select CS10gR35UpdateBundle.zip.

   12. Click Open.

   13. Click Install.

   14. Click Continue.

   15. Select any installed component in the Update Bundle /component/CS10gR35UpdateBundle/extras directory and IpmRepository.

   16. Click Open.

   17. Click Enable.

   18. Fill in any necessary details for each component you selected, and then click Continue.

   19. Click here to return to the Component Manager.

   20. From the Options list on the left, select Start/Stop Content Server.

   21. Select Restart.

   22. Ensure that Oracle Content Server is running after you restart it.

1.7.3.3 Add the Administrator User and Administrators Group to Oracle UCM

You need to add the administrator user to Oracle UCM and assign it to the Administrators group before this user can perform administration tasks on Oracle UCM.

To add the administrator user and Administrators group to Oracle UCM

1. In the Oracle UCM Web client, select Admin Applets under Administration.

2. Click User Admin.

3. On the Security tab, select Permissions By Role.

4. Select Add New Role.

5. In the Role Name field, enter Administrators.

6. Click OK.

7. Click Close.

8. Click Add.

9. For Authorization Type: Local, click OK.

10. Create the administrator user, and enter the password.

11. Click the Roles tab.

12. Click Add Role.

13. Select Administrators, and then click OK.

14. Click OK.

15. Close the User Admin applet.

1.7.3.4 Start the Oracle I/PM Managed Server and Access the Web Client

After you complete the preceding configuration tasks, you can start the Oracle I/PM Managed Server and access its Web client.

For transformations to work on some platforms, the following environment variables must be set before you start the Managed Server:

• Environment variables for library paths

  • Solaris SPARC: LD_LIBRARY_PATH=/usr/local/packages/gcc-3.4.2/lib

    Note:

    For document conversions on a Solaris SPARC platform, Oracle I/PM requires the GNU Compiler Collection (GCC) package 3.4.2 or later in the /usr/local/packages directory.

    Install this package on the Solaris operating system that will run Oracle I/PM. You can download GCC from the Sunfreeware Web site at

    http://www.sunfreeware.com
    

    You also need to set the LD_LIBRARY_PATH environment variable to /usr/local/packages/gcc-3.4.2/lib before starting the Oracle I/PM Managed Server. If you are using a later version of GCC, set that version instead of 3.4.2.

  • AIX: LIBPATH=$DOMAIN_HOME/oracle/imaging/imaging-server

  • HPI: LD_PRELOAD=/usr/lib/hpux64/libpthread.so.1 and LD_LIBRARY_PATH=$DOMAIN_HOME/oracle/imaging/imaging-server

  For more information, see Section 1.5, "Installing Oracle Enterprise Content Management Suite in a Middleware Home."

• DISPLAY environment variable

  On UNIX platforms running XWindows, when redirecting the display to a system with suitable graphic capabilities, set DISPLAY to a valid X Server.

To start the Oracle I/PM Managed Server and access the Web client:

1. Go to the bin directory under your domain home directory.

2. Start the Oracle I/PM Managed Server (see Section 1.7.2).

3. Enter the administrator user name and password.

4. Wait until the Oracle I/PM Managed Server is running.

5. Access the Web client at this URL: http://hostname:16000/imaging

   Log in with the administrator user name and password.

   Note:

   The first user to connect to the Oracle I/PM system is registered as the Oracle I/PM administrator.

1.7.3.5 Connect to the Oracle UCM Repository

Before Oracle I/PM can use the Oracle UCM repository, you need to configure a connection to Oracle Content Server. You can create a connection to it from Oracle I/PM.

To connect to an Oracle UCM repository:

1. Open a Web browser, and navigate to this Web site:

   http://hostname:16000/imaging
   

2. Log in with the administrator user name and password.

3. Navigate to the Manage Connections tray, and select Create Content Server Connection from the list.

4. Enter a name for the connection on the Basic Information page, and optionally a description, and then click Next.

5. Enter the following values on the Connection Settings page:

   • Repository Proxy: fmwadmin

   • Primary: localHost

   • Port: The IDC port of the Oracle UCM instance, 4444 by default

6. Click Next.

   If you get the "Content Server does not have a defined document profile field" message, go to General Configuration, add the variable EnableIdcProfileField=1, and then restart Oracle Content Server.

7. Enter a Connection Security value for the connection.

   Select which users and groups should have permission to access, modify, delete, or grant others access to this connection definition.

8. Click Next.

9. At the Summary screen, click Submit.

1.7.3.6 Configure the AgentUser and GDFontPath MBeans

Three agents run outside of Oracle I/PM, so you need to log into the Oracle I/PM system using a standard user in the security store. Oracle I/PM assigns security to this user name, which you need to configure as the agent user, by setting the AgentUser MBean. To set the font path on a UNIX operating system, you also need to configure the GDFontpath MBean. You can configure these MBeans through the System MBean Browser in Fusion Middleware Control.

To configure the AgentUser and GDFontPath MBeans:

1. Access the Oracle I/PM domain in Oracle Enterprise Manager 11g Fusion Middleware Control at the following URL:

   http://adminServerHost:adminServerPort/em
   

   For adminServerHost, specify the name of the computer that hosts the Administration Server for your domain. For adminServerPort, specify the listen port number for the Administration Server. The default number is 7001. For example:

   http://myHost:7001/cem
   

   To log in, supply the user name and password that were specified on the Configure Administrator User Name and Password screen in the configuration wizard.

2. In the navigation tree on the left, expand Application Deployments, and then click imaging (IPM_server1).

3. On the Application Deployment menu, select System MBean Browser.

4. In the navigation tree on the System MBean Browser page, under Configuration MBeans, close the com.bea folder,.

5. Expand the oracle.imaging folder, under Application Defined MBeans.

6. Expand the Server: IPM_server1 and config folders.

7. Click config.

8. Set the value of the AgentUser attribute to agentadmin (or to a unique user name), click Apply, and then click Return.

9. On a UNIX operating system, set the value of the GDFontPath attribute to the location of your TTF files; for example:

   /usr/share/X11/fonts/TTF
   

   Some standard font locations on different UNIX platforms follow:

   • Solaris SPARC: /usr/openwin/lib/X11/fonts/TrueType

   • AIX: /usr/lpp/X11/lib/X11/fonts/TrueType

   • HPI: /usr/lib/X11/fonts/TrueType

   For systems on which Oracle WebLogic Server includes a JDK, you can find some True Type Fonts (TTF) in the JDK/jre/lib/fonts directory.

10. MW_HOME/jdk160_11/jre/lib/fonts
    

    Some standard font locations on different UNIX platforms follow:

    • Solaris SPARC: /usr/openwin/lib/X11/fonts/TrueType

    • AIX: /usr/lpp/X11/lib/X11/fonts/TrueType

    • HPI: /usr/lib/X11/fonts/TrueType

    For systems on which Oracle WebLogic Server includes a JDK, you can find some True Type Fonts (TTF) in the JDK/jre/lib/fonts directory.

11. Click Apply.

12. Restart the Oracle I/PM Managed Server.

1.7.4.1 Setting the Server URL Configuration Parameter for Oracle IRM

You can set the Server URL configuration parameter to an Oracle IRM Managed Server on the General Settings page for Oracle IRM in Fusion Middleware Control.

For a simple installation where the Managed Server is directly accessible to Oracle IRM Desktop, this value will be the URI of the Managed Server; for example:

https://managedServerHost:managedServerPort/irm_desktop

To set the Server URL configuration parameter:

1. Start Fusion Middleware Control by navigating to the following Web site:

   http://adminServerHost:adminServerPort/em
   

   For adminServerHost, specify the name of the computer that hosts the Administration Server for your domain. For adminServerPort, specify the listen port number for the Administration Server. The default number is 7001. For example:

   http://myHost:7001/em
   

   To log in, supply the user name and password that were specified on the Configure Administrator User Name and Password screen in the configuration wizard.

2. From the farm navigation tree in Fusion Middleware Control, expand Content Management and Information Rights Management, and then click irm.

3. From the IRM menu, select Administration and then General Settings.

   Fusion Middleware Control displays the General Settings page.

4. In the Server URL field, enter the URL to access the Oracle IRM Managed Server; for example:

   https://irm.example.com/irm_desktop
   

   On the General Settings page, you can also specify other settings for Oracle IRM.

5. Click Apply.

1.7.4.2 Configuring a Key Store for Oracle IRM

To configure a key store for Oracle IRM, you need to create the key store and set its location and passwords.

ECM_ORACLE_HOME/common/bin/wlst.sh
connect('username','password','t3://adminServerHost:adminServerPort')
createCred("IRM","keystore:irm.jks","dummy","password")
createCred("IRM","key:irm.jks:oracle.irm.wrap","dummy","password")

ECM_ORACLE_HOME/common/bin/wlst.cmd
connect('username','password','t3://adminServerHost:adminServerPort')
createCred("IRM","keystore:irm.jks","dummy","password")
createCred("IRM","key:irm.jks:oracle.irm.wrap","dummy","password")

1.7.4.3 Configuring One-Way SSL for a Development Environment

For a development environment, you also need to configure one-way SSL with a server-specific certificate. One-way SSL means that only the server certificate passes from the server to the client but not the other way around.

To configure one-way SSL for a development environment:

1. Run the following script to set the environment.

   On a UNIX operating system:

   MW_HOME/wlserver_10.3/server/bin/setWLSEnv.sh
   

   On a Windows operating system:

   MW_HOME\wlserver_10.3\server\bin\setWLSEnv.cmd
   

   For the Java and Oracle WebLogic Server tools to work, you should have the weblogic.jar file in the MW_HOME/wlserver_10.3/server/lib directory (UNIX system) or MW_HOME\wlserver_10.3\server\lib directory (Windows system).

2. Use the CertGen utility to create a server-specific, private key and certificate, as follows:

   java utils.CertGen -selfsigned 
                      -certfile MyOwnSelfCA.cer
                      -keyfile MyOwnSelfKey.key 
                      -keyfilepass mykeypass
                      -cn "hostname"
   

   For hostname, substitute the name of the machine where Oracle IRM is deployed. You should use the same name while accessing Oracle IRM Web services. For example, to generate the server certificate for a machine named myhost.us.example.com, the command would be as follows:

   java utils.CertGen -selfsigned 
                      -certfile MyOwnSelfCA.cer
                      -keyfile MyOwnSelfKey.key 
                      -keyfilepass mykeypass
                      -cn "myhost.us.example.com"
   

   This command will generate a server certificate for the machine myhost.us.example.com. Verify that the certificate has been issued to the machine name you specified.

   CertGen creates a unique and secret Private Key for Oracle IRM and a Self-Signed Root Certificate.

3. Run the ImportPrivateKey utility to package the Private Key and Self-Signed Root Certificate into a keystore, as follows:

   java utils.ImportPrivateKey 
                      -keystore MyOwnIdentityStore.jks
                      -storepass identitypass
                      -keypass keypassword
                      -alias trustself
                      -certfile MyOwnSelfCA.cer.pem
                      -keyfile MyOwnSelfKey.key.pem
                      -keyfilepass mykeypass
   

4. Run the keytool utility to package the key and certificate into a separate keystore called the Trust Keystore, as follows:

   keytool -import -trustcacerts -alias trustself 
           -keystore TrustMyOwnSelf.jks 
           -file MyOwnSelfCA.cer.der -keyalg RSA
   

5. On the client machine, double-click the certificate file to open the Certificate window, and then click Install Certificate to start the Certificate Import Wizard.

6. Install the certificate under Trusted Root Certification Authorities in Internet Explorer.

   On every machine running Oracle IRM Desktop, in the Certificate Import Wizard, explicitly select a certificate store for Trusted Root Certification Authorities. The root certificate must be trusted on all client computers that will access the server.

7. Click Next, and then follow the instructions on the wizard screens.

8. Set Up a Custom Identity Keystore and Trust Store:

   1. Log in to the Oracle WebLogic Server Administration Console at

      http://adminServerHost:adminServerPort/console
      

      For adminServerHost, specify the name of the computer that hosts the Administration Server for your domain. For adminServerPort, specify the listen port number for the Administration Server. The default number is 7001. For example:

      http://myHost:7001/console
      

      To log in, supply the user name and password that were specified on the Configure Administrator User Name and Password screen in the configuration wizard.

   2. Select Environments under your domain from Domain Structure.

   3. Select Servers from Environment.

   4. From Summary of Servers, select the server for which to enable SSL.

   5. Click the KeyStores tab on the Settings for servername page.

   6. In the KeyStores field, select Custom Identity and Custom Trust.

   7. Enter values in the other fields on the KeyStores tab.

   8. Save the changes.

   9. Click the SSL tab.

   10. In the Identity and Trust Locations field, select Keystores.

   11. Enter values in the other fields on the SSL tab.

   12. Save the changes.

1.7.4.4 Accessing the Oracle IRM Management Console

When the Oracle IRM Managed Server is in running mode, the Oracle IRM application is deployed and ready to be accessed through the Oracle IRM Management Console:

https://managedServerHost:managedServerPort/irm_rights

1.9.2.1 Starting Repository Creation Utility

Insert the Repository Creation Utility DVD, and start RCU from the rcuHome/bin directory (UNIX system) or from the rcuHome\BIN directory (Windows system):

• On a UNIX operating system:

  ./rcu
  

• On a Windows operating system:

  rcu.bat
  

If you download the Repository Creation Utility ZIP file from Oracle Technology Network, you can also start RCU as the preceding text describes.

1.9.2.2 Dropping Schemas

Follow these instructions to drop one or more Oracle Enterprise Content Management Suite schemas with RCU:

1. Welcome screen

   Click Next.

2. Create Repository screen

   Select Drop, and click Next.

3. Database Connection Details screen

   Provide the credentials to connect to your database instance. These are the same credentials you provided on this screen when you created the Oracle Enterprise Content Management Suite schemas. For more information, see Section 1.4, "Creating Oracle Enterprise Content Management Suite Schemas."

   Click Next. The Checking Prerequisites screen appears.

   If you have any prerequisite errors, the Database Connection Details screen displays details about the errors. Fix any errors, and click Next again.

   After the checking is complete with no errors, click OK to dismiss the screen.

4. Select Components screen

   Select a schema prefix, and then select the name of each schema you want to drop from the repository.

   Click Next. The Checking Prerequisites screen appears.

   If you have any prerequisite errors, the Select Components screen displays details about the errors. Fix any errors, and click Next again.

   After the checking is complete with no errors, click OK to dismiss the screen.

5. Summary screen

   Click Drop. A DROP screen appears.

   If you have any drop errors, the Summary screen displays details about the errors. Fix them, and click Next again.

   Note:

   If your database is running on a Windows operating system, ensure that previous sessions accessing the tablespace are closed before the drop. After the drop, you might need to manually delete the dbf files.

   After the schemas are dropped with no errors, click OK to dismiss the screen.

6. Completion Summary screen

   Click Close.

1.9.3.1 Starting the Deinstaller

You can start the deinstaller from the ECM_ORACLE_HOME/oui/bin directory (UNIX system) or ECM_ORACLE_HOME\oui\bin directory (Windows system).

On a UNIX operating system:

./runInstaller -deinstall [-jreLoc jre_location]

On a Window operating system:

setup.exe -deinstall [-jreLoc jre_location]

The value of jre_location must specify the absolute path to the Java Runtime Environment (JRE) on your system. A relative path will not work.

On a Windows operating system, you can also start the deinstaller from the Start menu by selecting Programs, then Oracle ECM 11g - Home1, and then Uninstall.

1.9.3.2 Deinstallation Screens and Instructions

Follow these instructions to remove the installed software:

1. Welcome screen

   Click Next.

2. Deinstall Oracle Home screen

   Verify the ECM Oracle home you are about to deinstall, and click Deinstall to continue.

3. Deinstall Progress screen

   This screen shows the progress and status of the deinstallation.

4. Deinstall Completed screen

   Click Finish.