Skip Headers
Oracle® Fusion Middleware Quick Installation Guide for Oracle Identity Management
11g Release 1 (11.1.1)

Part Number E10033-04
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Master Index
Master Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
View PDF

2 Preparing to Install Oracle Identity Management

This chapter provides information you should review before installing Oracle Identity Management 11g Release 1 (11.1.1.3.0) components.

It includes the following topics:

2.1 Before Installing OID, OVD, ODSM, ODIP, and OIF

This topic provides information you should review before installing Oracle Internet Directory (OID), Oracle Virtual Directory (OVD), Oracle Directory Services Manager (ODSM), Oracle Directory Integration Platform (ODIP), and Oracle Identity Federation (OIF):

2.1.1 System Requirements and Certification

Before performing any installation, read the system requirements and certification documentation to ensure that your environment meets the minimum installation requirements for the components you are installing. Both of these documents are available on Oracle Technology Network (OTN).

Oracle Fusion Middleware System Requirements, Prerequisites, and Specifications

The system requirements document covers information such as hardware and software requirements, minimum disk space and memory requirements, and required system libraries, packages, or patches:

http://www.oracle.com/technology/software/products/ias/files/fusion_requirements.htm

Note:

The system requirements document also covers Oracle Universal Installer Startup Requirements.

Oracle Fusion Middleware Supported System Configurations

The certification document covers supported installation types, platforms, operating systems, databases, JDKs, and third-party products:

http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html

2.1.2 Installing and Configuring Java Access Bridge (Windows Only)

If you are installing Oracle Identity Management on a Windows system, you have the option of installing and configuring Java Access Bridge for Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility features:

  1. Download Java Access Bridge from the following Web site:

    http://java.sun.com/javase/technologies/accessibility/accessbridge/
    
  2. Install Java Access Bridge.

  3. Copy access-bridge.jar and jaccess-1_4.jar from your installation location to the jre\lib\ext directory.

  4. Copy the WindowsAccessBridge.dll, JavaAccessBridge.dll, and JAWTAccessBridge.dll files from your installation location to the jre\bin directory.

  5. Copy the accessibility.properties file to the jre\lib directory.

2.1.3 Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity Management Installations

For Oracle Identity Management Installations that require Oracle WebLogic Server, you must perform the following steps after installing Oracle WebLogic Server and before installing Oracle Identity Management:

  1. Verify the Oracle WebLogic Server Node Manager utility is stopped. If it is running, kill the process.

  2. Determine if the nodemanager.properties file is present in the WL_HOME/common/nodemanager/ directory.

    • If the nodemanager.properties file is not present, continue installing Oracle Identity Management.

    • If the nodemanager.properties file does exist, open it and verify that the ListenPort parameter is included and that it is set. If the ListenPort parameter is not included or set, edit the nodemanager.properties file so that it is similar to the following, where NODE_MANAGER_LISTEN_PORT represents the port the Node Manager listens on, such as 5556:

      ListenPort=NODE_MANAGER_LISTEN_PORT
      

2.1.4 Installing Oracle Database

You must install an Oracle Database before you can install some Oracle Identity Management components, such as:

  • Oracle Internet Directory

  • Oracle Identity Federation, if you want to use an RDBMS data store

For the latest information about supported databases, visit the following Web site:

http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html

The database must be up and running to install the relevant Oracle Identity Management component. The database does not have to be on the same system where you are installing the Oracle Identity Management component.

The database must also be compatible with Oracle Repository Creation Utility (RCU), which is used to create the schemas that Oracle Identity Management components require. For information about RCU requirements, refer to the system requirements document at the following Web site:

http://www.oracle.com/technology/software/products/ias/files/fusion_requirements.htm

2.1.5 Creating Database Schema Using the Repository Creation Utility (RCU)

You must create and load the appropriate Oracle Fusion Middleware schema in your database before installing the following Oracle Identity Management components and configurations:

  • Oracle Internet Directory, if you want to use an existing schema rather than create a new one using the Installer during installation.

    Note:

    When you install Oracle Internet Directory, you have the choice of using an existing schema or creating a new one using the Installer. If you want to use an existing schema, you must create it using the Repository Creation Utility (RCU) before you can install Oracle Internet Directory. If you choose to create a new schema during installation, the Installer creates the appropriate schema for you and you do not need to use the RCU.
  • Oracle Identity Federation Advanced configurations that use RDBMS for the Federation Store, Session Store, Message Store, or Configuration Store.

You create and load Oracle Fusion Middleware schema in your database using the RCU, which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release media and on the Oracle Technology Network (OTN) Web site. You can access the OTN Web site at:

http://www.oracle.com/technology/index.html

Note:

RCU is available only on Linux and Windows platforms. Use the Linux RCU to create schemas on supported UNIX databases. Use Windows RCU to create schemas on supported Windows databases.

When you run RCU, create and load only the following schema for your Oracle Identity Management—do not select any other schema available in RCU:

  • For Oracle Internet Directory, select only the Identity Management - Oracle Internet Directory schema

  • For Oracle Identity Federation, select only the Identity Management - Oracle Identity Federation schema

Note:

When you create schema, be sure to remember the schema owner and password that is shown in RCU. For Oracle Identity Federation, it is of the form PREFIX_OIF. You will need to provide this information when configuring Oracle Identity Federation with RDBMS stores.

2.2 Before Installing OIM, OAM, OAAM, OAPM, and OIN

This section discusses the following topics related to Oracle Identity Manager (OIM), Oracle Access Manager (OAM), Oracle Adaptive Access Manager (OAAM), Oracle Authorization Policy Manager (OAPM), and Oracle Identity Navigator (OIN):

2.2.1 Oracle Fusion Middleware Certification

The Oracle Fusion Middleware Supported System Configurations document provides certification information for Oracle Fusion Middleware, including supported installation types, platforms, operating systems, databases, JDKs, and third-party products related to Oracle Identity Management 11g Release 1 (11.1.1).

You can access the Oracle Fusion Middleware Supported System Configurations document by searching the Oracle Technology Network (OTN) web site:

http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html

2.2.2 System Requirements

This topic describes the system requirements for installing Oracle Identity Management 11g Release 1 (11.1.1) and includes the following sections:

2.2.2.1 Most Recent Information

The information in this topic is current at the time of publication. For the most recent information, refer to the Oracle Fusion Middleware System Requirements, Prerequisites, and Specification document, which contains information related to hardware, software, disk space, memory, system library, and patch requirements.

You can access the Oracle Fusion Middleware System Requirements, Prerequisites, and Specification document by searching the Oracle Technology Network (OTN) web site:

http://www.oracle.com/technology/

2.2.2.2 Installer Startup Requirements

When you start the Installer, it checks for the requirements listed in Table 2-1. The Installer will notify you if any requirements are not met.

Table 2-1 Installer Startup Requirements

Category Minimum or Accepted Value

Platform

UNIX:

  • Solaris 9, Solaris 10

  • HP-UX 11i (11.23), HP-UX 11i (11.31)

  • Oracle Enterprise Linux 4, Oracle Enterprise Linux 5, Red Hat Linux 4, Suse 11, Red Hat Linux 5, SUSE 10

  • IBM AIX 5.3, IBM AIX 6.1

Windows:

  • Windows XP SP2 (Win32 platforms only), Windows 2003, Windows 2008, Windows Vista, Windows 7

CPU Speed

At least 300 MHZ

Temp Space

At least 500 MB

Swap Space

At least 500 MB

Monitor

At least 256 colors


2.2.2.3 Memory Requirements

Table 2-2 lists the minimum memory requirements to install Oracle Identity Management 11g Release 1 (11.1.1):

Table 2-2 Minimum Memory Requirements

Operating System Minimum Physical Memory Minimum Available Memory

Linux

2 GB

1 GB

UNIX

2 GB

1 GB

Microsoft Windows

2 GB

1 GB


The specific memory requirements for your Oracle Identity Management 11g Release 1 (11.1.1) deployment depends on which components, or combination of components, you install.

2.2.3 Installing and Configuring Java Access Bridge (Windows Only)

If you are installing Oracle Identity Management on a Windows operating system, you have the option of installing and configuring Java Access Bridge for Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility features:

  1. Download Java Access Bridge from the following URL:

    http://java.sun.com/javase/technologies/accessibility/accessbridge/
    
  2. Install Java Access Bridge.

  3. Copy access-bridge.jar and jaccess-1_4.jar from your installation location to the jre\lib\ext directory.

  4. Copy the WindowsAccessBridge.dll, JavaAccessBridge.dll, and JAWTAccessBridge.dll files from your installation location to the jre\bin directory.

  5. Copy the accessibility.properties file to the jre\lib directory.

2.2.4 Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g Software

Refer to the following for more information about the latest Oracle WebLogic Server and Oracle Fusion Middleware 11g software:

  • You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):

    http://www.oracle.com/technology/

    For information about downloading Oracle WebLogic Server, see "Product Distribution" in the Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.

  • Oracle Fusion Middleware 11g also requires the latest version of Oracle WebLogic Server. At the time this document was published, the latest version of Oracle WebLogic Server was Oracle WebLogic Server 11g (10.3.3).

  • For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.

2.2.5 Installing Oracle WebLogic Server 10.3.3 and Creating the Oracle Middleware Home

Before you can install Oracle Identity Management 11g Release 1 (11.1.1) components, you must install Oracle WebLogic Server and create the Oracle Middleware Home directory.

Complete the following steps to install Oracle WebLogic Server and create the Oracle Middleware Home directory. You can refer to the Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server for complete information about installing Oracle WebLogic Server.

  1. Insert the Oracle WebLogic Server CD-ROM or download the Oracle WebLogic Server Installer from the following URL:

    http://www.oracle.com/technology/software/products/ias/htdocs/wls_main.html
    

    For information about downloading Oracle WebLogic Server, see "Product Distribution" in the Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.

  2. Locate the appropriate executable file for your system, such as:

    • wls_linux32.bin for 32-bit Linux systems

    • wls_win32.exe for 32-bit Windows systems

    • wls_generic.jar for all 64-bit platforms

    The 32-bit executable files are bundled with the appropriate JDK version. If you use the 64-bit installer, you will need to invoke the installer with a supported JDK for your platform. This JDK must be installed on your system before you install Oracle WebLogic Server. Refer to the Oracle Fusion Middleware certification document for a list of supported JDKs for your platform:

    http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html
    
  3. Run the Oracle WebLogic Server Installer directly from the CD-ROM, or copy the file to your local system and run it locally.

    For example, on 32-bit systems:

    Linux:

    ./wls_linux32.bin
    

    Windows:

    wls_win32.exe
    

    For example, on 64-bit systems:

    UNIX:

    JAVA_HOME/bin/java -jar wls_generic.jar
    

    or

    JAVA_HOME/bin/java -d64 -jar wls_generic.jar
    

    Windows:

    JAVA_HOME\bin\java -jar wls_generic.jar
    

    For 64-bit installations:

    • Before running the installer, set the DISPLAY environment variable on your system.

    • Replace JAVA_HOME with the installation location of the supported JDK you installed for your platform.

    • Use the -d64 flag when using 32/64-bit hybrid JDKs (such as the HP JDK for HP-UX and SUN JDK for Solaris SPARC).

    • Execute JAVA_HOME/bin/java -version (or JAVA_HOME/bin/java -d64 -version on 32/64-bit hybrid JDKs) to ensure that your JAVA_HOME refers to a 64-bit JDK.

    Note:

    After you start the Oracle WebLogic Server Installer, the Welcome screen appears.
  4. Click Next. The Choose Middleware Home Directory screen appears.

  5. Select Create a new Middleware Home and identify the desired location for your new Middleware Home directory, which is the top-level directory for all Oracle Fusion Middleware products. The WebLogic Home directory will be created inside the Middleware Home directory.

    Note:

    If the Middleware Home directory already exists on your system, it must be an empty directory. Do not enter any special characters in the name of the Middleware Home directory.

    Click Next. The Register for Security Updates screen appears.

  6. Select whether or not you want to receive the latest product and security updates. If you choose not to receive anything, you will be asked to verify your selection before continuing.

    Click Next. The Choose Install Type screen appears.

  7. Select the Typical install type and click Next. The JDK Selection screen appears. On this screen, select the Sun JDK or the Oracle JRockit JDK. Click Next.

    The Choose Product Installation Directories screen appears.

  8. Specify the desired location for your WebLogic Server Home directory and click Next.

    If you are installing Oracle WebLogic Server on a UNIX system, the Installation Summary screen appears. Go to step 9 now.

    If you are installing Oracle WebLogic Server on a Windows system, the Choose Shortcut Location screen appears. Specify a location where you want Windows to create a shortcut to Oracle products and click Next. The Installation Summary screen appears.

  9. Click Next on the Installation Summary screen.

    The Installation Progress screen appears.

  10. Click Next. The Installation Complete screen appears.

  11. De-select Run Quickstart and click Done to exit the Installer.

Notes:

  • The same user that installed Oracle WebLogic Server must install Oracle Identity Management.

  • Do not log in to the Oracle WebLogic Server Administration Console during Oracle Identity Management installation.

Oracle WebLogic Server Directory Structure

After you install Oracle WebLogic Server and create a Middleware Home, a home directory, such as wlserver_10.3, is created for Oracle WebLogic Server under your Middleware Home. This home directory is referred to as WL_HOME or WLS_HOME.

At the same level as WL_HOME, separate directories are created for the following components associated with Oracle WebLogic Server:

  • Sun JDK - jdk160_18

  • Oracle JRockit - jrockit_160_17_R28.0.0-679

Note that WebLogic domains are created in a directory named domains located in the user_projects directory under your Middleware Home. After you configure any of the Oracle Identity Management products in a WebLogic administration domain, a new directory for the domain is created in the domains directory. In addition, a directory named applications is created in the user_projects directory. This applications directory contains the applications deployed in the domain.

2.2.6 Installing Oracle Database

You must install an Oracle Database before you can install some Oracle Identity Management components. The database must be up and running to install the relevant Oracle Identity Management component. The database does not have to be on the same system where you are installing the Oracle Identity Management component.

The following database versions are supported:

  • 10.2.0.4

  • 11.1.0.7

  • 11.2

Note:

You can locate the most recent information about supported databases by referring to the "Oracle Fusion Middleware Certification" topic in this chapter.

The database must also be compatible with Oracle Repository Creation Utility (RCU), which is used to create the schemas that Oracle Identity Management components require.

Table 2-3 lists the databases requirements for RCU at the time of publication:

Table 2-3 RCU Database Requirements

Category Minimum or Accepted Value

Version

Oracle Database 10.2.0.4, 11.1.0.7, or 11.2 (11.1.0.7 or later for non-XE database) using the AL32UTF8 character set.

Shared Pool Size

147456 KB

SGA Maximum Size

147456 KB

Block Size

8 KB

Processes

500


Note:

If you are using Oracle Database 11.1.0.7 for Oracle Identity Manager, you should install a set of platform-specific patches before creating Oracle Identity Manager schemas. For more information, see the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

After installing the Oracle 11g database, you must complete the following steps:

  1. Log in to the database as the sys (default) user.

  2. Run the following scripts:

    alter system set session_cached_cursors=100 scope=spfile;

    alter system set processes=500 scope=spfile;

  3. Bounce the database and continue with the installation of Repository Creation Utility (RCU) and loading of schemas.

2.2.7 Creating Database Schema Using the Repository Creation Utility (RCU)

You must create and load the appropriate Oracle Fusion Middleware schema in your database before installing the following Oracle Identity Management components and configurations:

  • Oracle Identity Manager

  • Oracle Access Manager

  • Oracle Adaptive Access Manager

  • Oracle Authorization Policy Manager

You create and load Oracle Fusion Middleware schema in your database using the Repository Creation Utility (RCU), which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release media and on the Oracle Technology Network (OTN) web site. You can access the OTN web site at:

http://www.oracle.com/technology/index.html

Note:

RCU is available only on Linux and Windows platforms. Use the Linux RCU to create schemas on supported UNIX databases. Use Windows RCU to create schemas on supported Windows databases. After you extract the contents of the rcuHome.zip file to a directory, you can see the executable file rcu in the BIN directory.

For information about launching and running RCU, see the "Launching RCU with a Variety of Methods" and "Running Repository Creation Utility (RCU)" topics in the guide Oracle Fusion Middleware Repository Creation Utility User's Guide. For information about troubleshooting RCU, see the "Troubleshooting Repository Creation Utility" topic in the guide Oracle Fusion Middleware Repository Creation Utility User's Guide.

When you run RCU, create and load only the following schema for the Oracle Identity Management component you are installing—do not select any other schema available in RCU:

  • For Oracle Identity Manager, select the Identity Management - Oracle Identity Manager schema. The SOA Infrastructure schema, the User Messaging Service schema, and the Metadata Services schema are also selected, by default.

  • For Oracle Adaptive Access Manager, select the Identity Management - Oracle Adaptive Access Manager schema. By default, the AS Common Schemas - Metadata Services schema is also selected.

    For Oracle Adaptive Access Manager with partition schema support, select the Identity Management - Oracle Adaptive Access Manager (Partition Supp...) schema. By default, the AS Common Schemas - Metadata Services schema is also selected.

    Note:

    For information about Oracle Adaptive Access Manager schema partitions, see the "OAAM Partition Schema Reference" topic in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.
  • For Oracle Access Manager, select the Identity Manager - Oracle Access Manager schema. By default, the AS Common Schema - Audit Services schema is also selected.

  • For Oracle Authorization Policy Manager, select the Identity Management - Authorization Policy Manager schema. By default, the AS Common Schemas - Metadata Services schema is also selected.

Note:

When you create a schema, be sure to remember the schema owner and password that is shown in RCU.

If you are creating schemas on databases with Oracle Database Vault installed, note that statements such as CREATE USER, ALTER USER, DROP USER, CREATE PROFILE, ALTER PROFILE, and DROP PROFILE can only be issued by a user with the DV_ACCTMGR role. SYSDBA can issue these statements by modifying the Can Maintain Accounts/Profiles rule set only if it is allowed.

2.2.8 Upgrading an Existing Database Schema

If you want to reuse an existing database schema, you must upgrade your old database schema to work with Oracle Fusion Middleware 11g products and components.

For information about upgrading your existing database schema, see Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management.

2.2.9 Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users Only)

If you are installing Oracle Identity Manager, you must install the latest version of Oracle SOA Suite (11.1.1.3.0).

Follow the instructions in this section to install the latest Oracle SOA Suite software. The installation of Oracle SOA Suite is a prerequisite for configuring Oracle Identity Manager.

Installing the latest version of Oracle SOA Suite 11g involves the following steps:

  1. Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software

  2. Installing Oracle WebLogic Server and Creating the Middleware Home

  3. Installing the Latest Version of Oracle SOA Suite

  4. Patching the Software to 11.1.1.3.0

2.2.9.1 Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software

Refer to the following for more information about the latest Oracle WebLogic Server and Oracle Fusion Middleware 11g software:

  • You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):

    http://www.oracle.com/technology/
    
  • At the time this document was published, the latest release of Oracle Fusion Middleware 11g was 11g Release 1 (11.1.1.3.0), which provides new features and capabilities that supersede those available in Oracle Fusion Middleware 11g Release 1 (11.1.1.1.0) and 11g Release 1 (11.1.1.2.0).

  • Oracle Fusion Middleware 11g also requires the latest version of Oracle WebLogic Server. At the time this document was published, the latest version of Oracle WebLogic Server was Oracle WebLogic Server 11g (10.1.3.3).

  • For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.

2.2.9.2 Installing Oracle WebLogic Server and Creating the Middleware Home

Oracle SOA Suite requires Oracle WebLogic Server and a Middleware Home directory. For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide. In addition, see "Running the Installation Program in Graphical Mode" in Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.

Note:

If you have already created a Middleware Home before installing Oracle Identity Management components, you do not need to create a new Middleware Home again. You must use the same Middleware Home for installing Oracle SOA Suite.

2.2.9.3 Installing the Latest Version of Oracle SOA Suite

Note that only Oracle Identity Manager requires Oracle SOA Suite 11g (11.1.1.3.0). This step is required because Oracle Identity Manager uses process workflows in Oracle SOA Suite to manage request approvals.

Follow the instructions in Table 2-4 to install Oracle SOA Suite. If you need additional help with any of the installation screens, click Help to access the online help.

To start the Oracle SOA Suite installation wizard, you must complete the following steps:

  1. Extract the contents of the soa.zip (11.1.1.2.0) to a directory, such as soa.

  2. From your present working directory, move to the Disk1 directory under soa.

  3. From the Disk1 directory, run runInstaller (on UNIX) or setup.exe (on Windows) executable files to launch the Oracle SOA Suite 11.1.1.2.0 installation wizard.

Table 2-4 Installation Flow for Install Only Option

No. Screen Description and Action Required

1

Welcome Screen

Click Next to continue.

2

Prerequisite Checks Screen

Click Next to continue.

3

Specify Installation Location Screen

Specify the Middleware Home and Oracle Home locations. You must specify the location of the same Middleware Home that contains Oracle Identity Management components.

For more information about these directories, see "Oracle Fusion Middleware Directory Structure and Concepts" in Oracle Fusion Middleware Installation Planning Guide.

Click Next to continue.

4

Specify Security Updates Screen

Provide your E-mail address to be informed of the latest product issues.

Click Next to continue.

5

Installation Summary Screen

Verify the information on this screen.

Click Install to begin the installation.

6

Installation Progress Screen

If you are installing on a UNIX system, you may be asked to run the ORACLE_HOME/oracleRoot.sh script to set up the proper file and directory permissions.

Click Next to continue.

7

Installation Complete Screen

Click Finish to dismiss the installer.


Note:

At this stage of the installation process, do not configure a WebLogic domain for Oracle SOA Suite.

2.2.9.4 Patching the Software to 11.1.1.3.0

After the installation is complete, you must run the Patch Set Installer for Oracle SOA Suite (included in the Disk1 directory under the soa_patchset.zip file) to update your 11.1.1.2.0 software to the latest version of Oracle SOA Suite (11.1.1.3.0).

For instructions, go to "Applying the Latest Oracle Fusion Middleware Patch Set with the Patch Set Installers" in Oracle Fusion Middleware Patching Guide.