11g OAM High Availability + SSL

Has anyone SUCCEEDED in setting up OVD+OID+OAM 11g in a High Availability environment to include SSL throughout on LINUX with 10g WebGate?

In the OAM Server Settings you will a "load balancing" section. You have to give the host name a value that can be reached from your users through a load balancer (eg a non-protected OHS with mod_wl_ohs configured to redirect to the login page on both OAM servers).
HTH,
--olaf

Similar Messages

Identity management 11g in High Availability Mode.

Hi All,
Can any one please give me some pointers on how to configure Identity management 11g in High Availability Mode. If possible please provide some document links for reference.
Currectly I am looking into below Oracle Ducument.
http://download.oracle.com/docs/cd/E15523_01/core.1111/e12035/directorytier_im.htm#BACIEEBD
This document completely configuring the High Avaialability case when we have Oracle Data Base in RAC mode. Please correct me if i am wrong.
But I just wanted to know how can we configure the high availability mode without Oracle DataBase in RAC mode.
Do we need to configure the DataBase in high Availability Mode also?
Thanks in Advance.
Siva Pokuri.

Below resources should be of some help to you:
http://www.oracle.com/technology/products/ias/hi_av/F5v9LBR.pdf
http://www.oracle.com/technology/products/ias/hi_av/904_Distributed_IM.pdf
http://www.oracle.com/technology/products/ias/hi_av/904_rack_mounted_im.pdf
http://www.oracle.com/technology/products/ias/hi_av/904_cfc_im.pdf
http://www.oracle.com/technology/products/ias/hi_av/OracleASInfraHAArchs.pdf

OIM 11g High Availability Deployment

Hi Experts,
I'm deploying OIM 11g in High Available schema, following Oracle docs: http://download.oracle.com/docs/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF, I have succesfully installed and configured OIM & SOA in weblogic domain on 'OIMHOST1', trying to propagate the configuration from 'OIMHOST1' to 'OIMHOST2' I have packed (using pack.sh) the domain on 'OIMHOST1' and unpacked (using unpack.sh) it to 'OIMHOST2' so I have updated the NodeManager executing setNMProps.sh and finally Ihave started the NodeManager. In order to Test everything is fine and following the documentation I'm traying to perform the following steps, but I'm not succeed
I'M MUST TO SAY THAT I'M RUNNING ON SINGLE STANDARD EDITION DB INSTANCE AND NOT RAC AS MENTIONED IN ORACLE DOCS, PLEASE CLARIFY IF RAC IS REQUIRED, FOR NOW I'M IN DEVELOPMENT ENVIRONMENT, SO I THINK RAC IS NOT REQUIRED FOR NOW, PLEASE CLARIFY
8.9.3.8.3 Start the WLS_SOA2 and WLS_OIM2 Managed Servers on OIMHOST2
Follow these steps to start the WLS_SOA2 and WLS_OIM2 managed servers on OIMHOST2:
Stop the WebLogic Administration Server on OIMHOST2. Use the WebLogic Administration Console to stop the Administration Server.
Start the WebLogic Administration Server on OIMHOST2 using the startWebLogic.sh script under the $DOMAIN_HOME/bin directory. For example:
/u01/app/oracle/admin/OIM/bin/startWebLogic.sh > /tmp/admin.out 2>1&
Validate that the WebLogic Administration Server started up successfully by bringing up the WebLogic Administration Console.
Here its not possible start AdminServer on OIMHOST2, first of all, it looks like boot.properties file under WLS_OIM_DOMAIN_HOME/servers/AdminSever/security is not valid, the first time I try to execute startWeblogic.sh script, it ask for username/password, I have updated boot.properties (vi boot.properties) and manually set clear username and password, this time startWeblogic.sh script passed this stage, but fails:
<Error> <util.install.help.BuildMasterHelpSet> <BEA-000000> <IOException ioe java.io.IOException: No such file or directory>
<Error> <oracle.adf.share.config.ADFMDSConfig> <BEA-000000> <MDSConfigurationException encountered in parseADFConfigurationMDS-01330: unable to load MDS configuration document
MDS-01329: unable to load element "persistence-config"
MDS-01370: MetadataStore configuration for metadata-store-usage "writeable" is invalid.
MDS-00503: The metadata path "/u01/app/oracle/product/Middleware/user_projects/domains/IDMDomain/sysman/mds" does not contain any valid directories.
I have verified that this directory "mds" does not exists, as reported by the IOException, in OIMHOST2, but it exists in OIMHOST1. from here its not possible for me following Oracle's documentation, I test this starting Adminserver in OIMHOST1, and starting WLS_SOA2 and WLS_OIM2 managed servers from OIMHOST1 AdminServer console, I have tested 2 ways:
1.- All managed servers in OIHOST1 are shutdown, for this, managed servers in OIMHOST2 works as expected
2.- All managed servers in OIMHOST1 are RUNNING, for this, first I have started SOA2 managed server, after that, I have fired OIM2 managed server, when it finish boot process the following message appears in server's output:
<Warning> <org.quartz.impl.jdbcjobstore.JobStoreCMT> <BEA-000000> <This scheduler instance (servername.domainname1304128390936) is still active but was recovered by another instance in the cluster. This may cause inconsistent behavior.>
Start the WLS_SOA2 managed server using the WebLogic Administration Console.
Start the WLS_OIM2 managed server using the WebLogic Administration Console. The WLS_OIM2 managed server must be started after the WLS_SOA2 managed server is started.
8.9.3.9 Validate the Oracle Identity Manager Instance on OIMHOST2
Validate the Oracle Identity Manager Server instance on OIMHOST2 by bringing up the Oracle Identity Manager Console using a web browser.
The URL for the Oracle Identity Manager Console is:
http://oimvhn2.mycompany.com:14000/oim
Log in using the xelsysadm password.
Your help is highly apprecciated
Regards
Juan

Hi Vaasu,
I have succeeded deploying OIM in HA, just now my customer and I are working on the installation of webtier. Now I have a better understand about HA concepts and the way weblogic works -really nice, but little tricky-
All the magic about HA is configuring properly the network interfaces in each Linux boxes (our case) so, first of all you need to create 2 new floating IP's on each Linux boxes (google: how to create virtual Ip in linux, if you don't know) clone and modify your 'eth0' network script to create the virtual IPs
Follow the procudere in the HA guide: http://download.oracle.com/docs/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF
create DB schemas with RCU
install weblogic
install SOA
patch SOA
install IAM
---if you are working on a virtual machine is good idea to take a snapshot here---
Create and configure the weblogic domain (special attentention whe configuring the cluster), see step 13 of 8.9.3.2 Creating and Configuring the WebLogic Domain for OIM and SOA on OIMHOST1, here you need to cofigure:
For the oim_server1 entry, change the entry to the following values:
Name: WLS_OIM1
Listen Address: the IP that is confured in eth0:1 of Linux box1
Listen Port: 14000
For the soa_server1 entry, change the entry to the following values:
Name: WLS_SOA1
Listen Address: the IP configure on eth0:2 of Linux box1
Listen Port: 8001
For the second OIM Server, click Add and supply the following information:
Name: WLS_OIM2
Listen Address: the IP configured on eth0:1 of Linux box2
Listen Port: 14000
For the second SOA Server, click Add and supply the following information:
Name: WLS_SOA2
Listen Address: the IP configured on eth0:2 of Linux box2
Listen Port: 8001
Click Next.
On Step 16 ensure you are using the UNIX tab to configure the machines, also ensure that for machine1 you use the IP configured on the eth0 interface of Linux box1, the same for machine2
please confirm you have performered 8.9.3.3.2 Update Node Manager on OIMHOST1
if everything is ok you must be able to start the AdminServer as described in the guide.
configure OIM: 8.9.3.4.2 Running the Oracle Identity Management Configuration Wizard, in my case I don't need LDAPsync, I have skipped this section, if you configure properly OIM, then you mus perform 8.9.3.5 Post-Configuration Steps for the Managed Servers
resrtar AdminServer then from the weblogic console, start OIM and SOA if node manager is properly configured SOA and OIM must run properly, update deployment mode and coherence as described in the guide and verify that OIM run perfectly in Linux box1.
Propagate OIM from Linux box1 to Linux box2 as described in the guide, using pack and unpack (you MUST use the same filesystem directory structure on both Linux boxes)
Update and start NodeManager as described in the guide
VERY IMPORTAN OBSERVATION
the guide say:
8.9.3.8.3 Start the WLS_SOA2 and WLS_OIM2 Managed Servers on OIMHOST2
Follow these steps to start the WLS_SOA2 and WLS_OIM2 managed servers on OIMHOST2:
Stop the WebLogic Administration Server on OIMHOST2. Use the WebLogic Administration Console to stop the Administration Server.
JUAN OBSERVATION:
IS NOT POSSIBLE TO START OR STOP ADMINSERVER ON HOST2 SINCE ADMIN SERVER WERE CONFIGURED TO LISTEN ON THE IP ADDRES OF eth0 INTERFACE ON HOST1, SO, ITS NOT POSSIBLE TO PLAY IT ON HOST2, I THINK AND ADDITIONAL PROCEDURE SHOULD BE FOLLOWED TO CONFIGURE ADMINSERVER IN HA IN A ACTIVE-PASSIVE MODE
Start the WebLogic Administration Server on OIMHOST2 using the startWebLogic.sh script under the $DOMAIN_HOME/bin directory. For example:
/u01/app/oracle/admin/OIM/bin/startWebLogic.sh > /tmp/admin.out 2>1& -----NOT APPLICABLE
Validate that the WebLogic Administration Server started up successfully by bringing up the WebLogic Administration Console. -----NOT APPLICABLE
Start the WLS_SOA2 managed server using the WebLogic Administration Console. ----START SOA2 FROM THE CONSOLE RUNNING ON HOST1, IT DOESN'T MATTER
Start the WLS_OIM2 managed server using the WebLogic Administration Console. The WLS_OIM2 managed server must be started after the WLS_SOA2 managed server is started. ------ START OIM2 FROM THE CONSOLE RUNNING ON HOST1
HERE YOU MUST BE ABLE TO LOGIN TO OIM2 SERVER AS DESCRIBED IN THE GUIDE, YOU DON'T NEED TO EXECUTE config.sh SCRIPT THIS SHOULD WORK AS DESCRIBED.
Server migration should work straight-forward if you have configured the floating IPs as described, I have not configured the persistence yet since my customer does not have the skills to share a storage.
I hope this helps, and feel free to comment or complement.
By the way, did you know how to set up a valid SSL certificate in Windows 2003 server??? I need it to test and Exchange 2007 I'm tryin to integrate
Regards
Juan

High Availibility

Hello Everyone,
We are implementing the entire Identity and Access Management Suite in High Availability.
We have 2 boxes for OID & OVD AND 2 for OAM.
We have Apache webserver on which we have a webgate, which would be configured for reverse proxy.
My question here is, for HA in regards to Apache WebServer:
Should I only have one Apache webserver in the HA or should I have two of those for those 2 boxes of OAM ?
I am fairly new to this technology, so please bear with me.
Thanks.

Hey,
Take a look at this picture(Figure 5-1 Oracle Access Manager in Active-Active Topology) of OAM High Availability documentation, it should be answer your main question:
This link: http://download.oracle.com/docs/cd/B28196_01/core.1014/b28186/coreid_topo.htm.
If you need more, I have some topologies examples and we can discuss about your particular situation. Example: Zone1(2 servers with WebCache[reverse proxy]) ; Zone2(2 servers with OAM) ; Zone3(2 servers with OID).
regards,

Configuring two 11g OID servers in High Availability mode.

I have OID1 server where I have installed OID11g and WLS using SSL Port 3131 and Non SSL Port 3060. The ldap set up is working as the sqlnet connections are using ldap adapter to resolve the request.
I have OID2 server where I have installed OID11g using the same port.
Now, I want to setup a cluster for these two so that the the load balancer will automatically route the requests to either of the two servers so that if one is unavailable, the other will fill the request. I am following "Configuring High Availability for Identity Management Components" document, but it is not very what steps needs to be followed.
Any suggestion will be appreciated;
I am also having problem using ldapbind or any of the oid commands as it gives "unable to locate message file: ldap<language>.msb" despite the fact that I am seting all the env vars such as ORACLE_HOME, ORACLE_INTANCE, ORA_NLS33 and so on.

You don't need to setup a cluster for Load balancer. The Load balancer configuration can point to both the server and depending on the configuration in LBR act in failover and load balanced mode. All you need to take care of is that the two OID servers are using the same schema.
When installing first OID server it gives a option to install in cluster mode and when installing the second server you can use the option to expand the cluster created in first installation. But that should not stop you from configuring OID in highly available mode using Load balancer as explained above.
"unable to locate message file: ldap<language>.msb" occurs if you have not set the ORACLE_HOME variable. See that it is set to <MiddlewareHome>/Oracle_IDM1 if you have used the defaults.
Hope this helps,
Sagar

11g OID Configuration in High Availability Mode on OEL5.6 64 Bit

Hi Could you please provide me with some good document to install and configure 11g OID (Oracle Internet Directory) Configuration in High Availability Mode on OEL5.6 64 Bit.
Regards
Mohammed Riyaz Ahmed

Hi,
You get OID 11g as part of OFM 11g. Refer here for docs on high availability:
http://docs.oracle.com/cd/E21764_01/install.1111/e12002/overview.htm#CJAJEDFC
For other OID docs:
http://www.oracle.com/technetwork/documentation/oid-089101.html
I hope this helps.
regards,
GP

Oracle EBS R12.1.3 High Availability with RAC 11g on VMWARE

Dear All,
Our customer requirement is of high availability and good utilization of hardware for EBS R12.13 implementation.As per our strategy we want to use Oracle VM(I think it doesn't require any licensing) , RAC 11gR2 and appstier load balancing.We have only two servers to achieve all these.One one node there will be two VMs one for dbtier and another one for appstier and same will be on second server.So this way we will be having four virtual machines on two physical nodes.For all these we will use OEL Linux as Operating system
Please share your experiences , if above deployment model is correct or need further enhancements.
Regards.

Our customer requirement is of high availability and good utilization of hardware for EBS R12.13 implementation.As per our strategy we want to use Oracle VM(I think it doesn't require any licensing) , Please contact your Oracle Sales representative for license questions.
RAC 11gR2 and appstier load balancing.We have only two servers to achieve all these.One one node there will be two VMs one for dbtier and another one for appstier and same will be on second server.So this way we will be having four virtual machines on two physical nodes.For all these we will use OEL Linux as Operating system
Please share your experiences , if above deployment model is correct or need further enhancements.Please see these docs.
Using Oracle VM Templates for Oracle E-Business Suite [ID 975734.1]
Using Oracle VM with Oracle E-Business Suite Release 11i or Release 12 [ID 465915.1]
Oracle E-Business Suite High Availability on Oracle VM [ID 986690.1]
Certified Software on Oracle VM [ID 464754.1]
Oracle VM General Frequently Asked Questions [ID 464756.1]
Thanks,
Hussein

File Adapter vs BPEL interaction issue on high availability environment

Hi all,
i would really appreciate your help on a matter i'm facing about a composite (SCA) deployed on a clustered environment configured for high availability. To help you better understand the issue i briefly describe what my composite does. Composite's instances are started by means of an Inbound File Adapter which periodically polls a directory in order to check if any file with a well defined naming convention is available. The adapter is not meant to read the file content but only its properties. Furthermore, the adapter automatically makes a backup copy of the file and doesn't delete the file. Properties read by the adapter are provided to a BPEL process which obtains them using the various "jca.file.xyz" properties (configurable in any BPEL receive activity) and stores them in some of its process variables. How the BPEL process uses these properties is irrilevant to the issue i'd like to pose to your attention.
The just described interaction between the File Adapter and the BPEL process has always worked in other non-HA environments. The problem i'm facing is that this interaction stops to work when i deploy the composite in a clustered environment configured for high availability: the File Adapter succeeds to read the file but no BPEL process instance gets started and the composite instance gets stuck (that is, it keeps always running until you don't manually abort it!).
Interesting to say, if I put a Mediator between the File Adapter and the BPEL, the Mediator instance gets started, that is the file's properties read by the adapter are passed to the mediator, but then the composite gets stuck again 'cos even the mediator doesn't seem to be able to initiate the BPEL process instance.
I think the problem lies in the way i configured either the SOA infrastructure for HA or the File Adapter or BPEL process in my composite. To configure the adapter, i followed the instructions given here:
http://docs.oracle.com/cd/E14571_01/integration.1111/e10231/adptr_file.htm#BABCBIAH
but maybe i missed something. Instead, i didn't find anything about BPEL configuration for HA with SOA Suite 11g (all the material i found refers to SOA Suite 10g).
I've also read in some posts that for using the db as a coordinator between the file adapters deployed on the different nodes of the cluster, the db must be a RAC! Is that true or is possible to use even another type of oracle db?
Please, let me know if someone of you has already encountered (and solved :)) a problem like this!
Thanks in advance,
Bye!

Hi,
thanks for your prompt reply. Anyway, i had already read through out that documentation and tried all settings suggested in it without any luck! I'm thinking the problem could be related to the Oracle DB used in the clustered environment, which is not RAC while all documentation i read about high availability configuration always refers to a RAC db. Anyone knows if a RAC Oracle DB is strictly needed for file adapter configuration in HA cluster?
Thanks, bye!
Fabio

UOO sequencing along with WLS high availability cluster and fault tolerance

Hi WebLogic gurus.
My customer is currently using the following Oracle products to integrate Siebel Order Mgmt to Oracle BRM:
* WebLogic Server 10.3.1
* Oracle OSB 11g
They use path service feature of a WebLogic clustered environment.
They have configured EAI to use the UOO(Unit Of Order) Weblogic 10.3.1 feature to preserve the natural order of subsequent modifications on the same entity.
They are going to apply UOO to a distributed queue for high availability.
They have the following questions:
1) When during the processing of messages having the same UOO, the end point becomes unavailable, and another node is available in order to migrate, there is a chance the UOO messages exist in the failed endpoint.
2) During the migration of the initial endpoint, are these messages persisted?
By persisted we mean that when other messages arrive with the same UOO in the migrated endpoint this migrated resource contains also the messages that existed before the migration?
3) During the migration of endpoints is the client receiving error messages or not?
I've found an entry on the WLS cluster documentation regarding fault tolerance of such solution.
Special Considerations For Targeting a Path Service
When the path service for a cluster is targeted to a migratable target, as a best practice, the path
service and its custom store should be the only users of that migratable target.
When a path service is targeted to a migratable target its provides enhanced storage of message
unit-of-order (UOO) information for JMS distributed destinations, since the UOO information
will be based on the entire migratable target instead of being based only on the server instance
hosting the distributed destinations member.
Do you have any feedback to that?
My customer is worry about loosing UOO sequencing during migration of endpoints !!
best regards & thanks,
Marco

First, if using a distributed queue the Forward Delay attribute controls the number of seconds WebLogic JMS will wait before trying to forward the messages. By default, the value is set to −1, which means that forwarding is disabled. Setting a Forward Delay is incompatible with strictly ordered message processing, including the Unit-of-Order feature.
When using unit-of-order with distributed destinations, you should always send the messages to the distributed destination rather than to one of its members. If you are not careful, sending messages directly to a member destination may result in messages for the same unit-of-order going to more than one member destination and cause you to lose your message ordering.
When unit-of-order messages are processed, they will be processed in strict order. While the current unit-of-order message is being processed by a message consumer, the next message in the unit-of-order will not be delivered unless it is to the same transaction or session. If no message associated with a particular unit-of-order is processing, then a message associated with that unit-of-order may go to any session that’s consuming from the message’s destination. This guarantees that all messages will be processed one at a time and in order, and any rollback or recover will not prevent ordered processing of the messages.
The path service uses a persistent store to save the state of which member destination a particular unit-of-order is currently using. When a Path Service receives the first message for a particular unit-of-order bound for a distributed destination, it uses the normal JMS load balancing heuristics to select which member destination will handle the unit and writes that information into its persistent store. The Path Service ensures that a new UOO, or an old UOO that has no messages currently on any destination, can be enqueued anywhere in the cluster. Adding and removing member destinations will not disrupt any existing unit-of-order because the routing decision is made dynamically and those decisions are persistent.
If the Path Service is unavailable, any requests to create new units-of-order will throw the JMSOrderException until the Path Service is available. Information about existing units-of-order are cached in the connection factory and destination servers so the Path Service availability typically will not prevent existing unit-of-order messages from being sent or processed.
Hope this helps.

NAC Manager High Availability Peer CAM DEAD

Hi,
I have two NAC Managers with High Availability and i have used both sides eth1 interface as a Heartbit link.
I have done following Steps for High Availability.
1) Synchronize the times between two CAMs.
2) Generate a Temporary SSL certificate in both CAMs and done export-import procedure in each other.
3) Make One CAM as a Primary and another as Seconday.
But after all this configuration done i can see the status in Monitoring> Reports as--------Primary CAM is up in both the servers and Redundant CAM is down.
Also in Failover Tab i can see ------Local CAM - OK [Active] and Peer CAM :- DEAD.
I have also attached some screenshots so you can find out the same.
Your help will highly appreciated.
Thanks

Try the following steps and verify that all the steps were followed :
http://www.cisco.com/c/en/us/support/docs/security/nac-appliance-clean-access/99945-NAC-CAM-HA.html

High Availability - Active Passive setup for EBS Database

Hello Gurus,
We have the below environment:
Oracle Applications - 12.1.3
Oracle Database - 11.2.0.3
OS - Oracle Enterprise Linux 5.7
I would like to know how to achieve high availability (*Active/Passive*) for the database. We don't want to go with RAC at this stage. Can you please guide on a specific note id which explains how to setup an active passive database environment for HA.
Thanks.

Hi;
We have the below environment:
Oracle Applications - 12.1.3
Oracle Database - 11.2.0.3
OS - Oracle Enterprise Linux 5.7
I would like to know how to achieve high availability (*Active/Passive*) for the database. We don't want to go with RAC at this stage. Can you please guide on a specific note id which explains how to setup an active passive database environment for HA.You can go with Dataguard. Please review:
Business Continuity for Oracle E-Business Release 12 Using Oracle 11g Physical Standby Database [ID 1070033.1]
Also see:
MAA Roadmap for the E-Business Suite [ID 403347.1]
Regard
Helios

EBS AccessGate in High Availability

Hi,
We are integrating EBS 11i with OAM 10g uisng EBS AccessGate.
My question is whether we can configure EBS AccessGate in High Availability ? If yes, can you pls provide the details.
Thanks

Hi
Were you able to configure EBS access gate in high availability.

R12 High Availability

Hi
We have R12 Instance and we are using As Contol also to deploy custom applications like mapviewer. We want to have high availability solution.
I checked The documents and one solution which Iam looking is Standby database. We don't want to use RAC.
But with Stanby database we need to do autoconfig duing the swithover/failover.But normally it takes 3-4 hrs for us to get the application setup and bring the system up after teh autoconfig.
Iam looking at any other solution whihc provides the minimum downtime. Any suggestions.
Thanks In Advance.

Iam looking at any other solution whihc provides the minimum downtime. Any suggestions.There are no more options available apart from Data Guard and RAC.
Business Continuity for Oracle E-Business Release 12 Using Oracle 11g Physical Standby Database [ID 1070033.1]
Using Oracle 11g Release 2 Real Application Clusters with Oracle E-Business Suite Release 12 [ID 823587.1]
Oracle E-Business Suite Release 12 High Availability Documentation Roadmap [ID 1072636.1]
Thanks,
Hussein

Install Cloud Control 12c High Availability

Good day,
I am installing cloud control high availibility, but when i install the Third Party Certificate the services are not available when I check for HTTP.
I followed the following guidelines:
Deploying a Highly Available Enterprise Manager 12c Cloud Control:
http://www.oracle.com/technetwork/oem/framework-infra/wp-em12c-building-ha-level3-1631423.pdf
And configuration Third Party Certificate, note:
NOTE:1399293.1 - EM 12c Cloud Control How to Create a Wallet With Third Party Trusted Certificate that Can Be Imported into the OMS For SSL Comunication?
I have a couple of questions
How i can to change the CA in OMS?
How export the certificate and key?
Can anyone help me, please,
Best Regards,
Alexandra Granados

hi,
Please follow the below procedure..
EM11g / EM12c : Using ORAPKI Utility to Create a Wallet with Third Party Trusted Certificate and Import into OMS [ID 1367988.1]

CSA MC 6.0 high Availability

Hello,
i heard about CSA MC 6.0 high Availability solution, but we can't realize it.
Is it possible to make a reserve CSA server, we are planning to use it in branch office?
Thank you

Thank, but this is not acceptable, its too rich.
Will it work:
I will make a backup of a main server, and then restore this backup on a reserve csa server.
So on the reserve server i will have all information from main server, server names are the same, ip addresses are the same.
I thought that agents wil connect without any problems, but they dont.
ailed transaction, url=https://csa-mc:5401/csamc60/agent, curlerr=60 (SSL certificate problem, verify that the CA cert is OK). Check if agent and CSAMC system times are totally unsynchronized. Or you can use a browser to open the certificate file (sslca.crt) and see if the 'Valid From' date-time of the certificate is later than this host system date-time. Adjust the system time to fix it.
237: testarm1: Mar 31 2010 16:33:23.781 +0400: %CSA-4-MC_NOT_REACHABLE: %[Component=Csamanager][PID=1136]: conn_check: Failed to reach mgmtserver csa-mc:5401 via HTTPS. Will try again in 9 secs
238: testarm1: Mar 31 2010 16:33:32.812 +0400: %CSA-4-AGENT_CURL_ERROR: %[Component=Csamanager][PID=1136]: Failed transaction, url=https://csa-mc:443/csamc60/agent, curlerr=60 (SSL certificate problem, verify that the CA cert is OK). Check if agent and CSAMC system times are totally unsynchronized. Or you can use a browser to open the certificate file (sslca.crt) and see if the 'Valid From' date-time of the certificate is later than this host system date-time. Adjust the system time to fix it.
239: testarm1: Mar 31 2010 16:33:32.812 +0400: %CSA-4-MC_NOT_REACHABLE: %[Component=Csamanager][PID=1136]: conn_check: Failed to reach mgmtserver csa-mc:443 via HTTPS. Will try again in 12 secs
240: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-IP_CHECK_OK: %[Component=Csamanager][PID=1136]: conn_check: ip config: ok. one local address is 10.11.0.41
4: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-FAILED_SEND_FASTPOLL: %[Component=AgentUI][PID=3808]: Failed to send event with code 648
241: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-6-MC_DNS_LOOKUP: %[Component=Csamanager][PID=1136]: conn_check: dns : resolved mgmtserver name csa-mc to 10.11.0.2
242: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-MC_REACHABLE_CHECK: %[Component=Csamanager][PID=1136]: conn_check: https : mgmtserver is not reachable via https
243: testarm1: Mar 31 2010 16:33:44.812 +0400: %CSA-5-CONNCHECK_CMPLT: %[Component=Csamanager][PID=1136]: conn_check: finished
can anyone help, please.?
as i understood, there is a problem with ssl certificate, agents have a root certificate (old server), but old server is unreachable and there is a new server with another root certificate.

11g OAM High Availability + SSL

Similar Messages

Maybe you are looking for