OIM 9102 BP12 Migration from WebSphere 6.1 to Weblogic 10.3

Question

Hello,
We're planning to move(9102BP12) from WebSphere6.1 to Weblogic10.3.
I found Oracle metalink which says -
================================================
JDK Migration restriction:
You can only migrate to JDKs that falls with in the same groupings.
Group 1: Sun JDK, Oracle JRockit, HP JDK
Group 2: IBM JDK.
Example: If you are running OC4J using Sun JDK then you can migrate to Oracle WebLogic Server using Sun JDK, Oracle JRockit or HP JDK. However, you can't migrate to IBM JDK.
==============================================
This is because the data in the OIM schema is encrypted using the IBM's encryption libraries which are not available for Sun JDK. What i understand is that the IT resource configuration details are encrypted with installed JDK. However, if we re-configure the IT resource with Weblogic setup (after installing oim on Weblogic poining to the existing database), we could proceed with this migration.
Has anyone executed Websphere to Weblogic migration before for OIM? Any input will help.
Thanks,

Answer 1

Sorry for the delay as I got busy with my current project. Here are the answers to your questions.
1) If i install WLS point to existing OIMDB, do i necessarily need to copy old .databasekey from WAS environment?
<Abhi>: Yes, you will have to copy these files to the WLS environment.
2) During WLS install, it'll ask for xelsysadm password. Will this password overrides to existing one in OIM DB? And later on when i'll try to login to OIM-WLS using this password, will that work?
<Abhi>: Yes, but are you planning to have different passwords. The xelsysadm password is stored in OIM database. So if you update it, it will reflect in all the OIM middle-tier instances attached to this database.
How about handling the encrypted values in WLS environment:
(1) IT resource params - reconfigure them after migration - through design console in Weblogic environment
<Abhi>: Yes. you may have to review the values in the IT resource params and the other atrifacts as RO, process forms etc. But most of the work will be done by the deployment manager export/import functionality.
(2) User password and security Q&A - We're using SSO to login to OIM, so not a concern
<Abhi>: You are good with this.
(3) UDF encrypted attribute - After doing the migration, if we run the user trusted recon 1 more time.. then all the user attrs values would be overriden (including encrytped UDF).
<Abhi>: If there is an encrypted UDF field, you will have to take care of this manually. BTW, is this field encrypted on the OIM side as well as the application side.
(4) Encrypted object/process forms - i've pending task to analyze if we've any such attrs(process form encrypted 'password' to target(e.g. AD) - i could think of such cases)
<Abhi>: If there is something like this, you will have to take care of this manually. Check the possibility of writing a custom code to go thru the OIM users and dump the decrypted data in some file. Later you can update the selective user data in the new environment
Did you follow the similar process? What issues did you face because of the IBM to SUN JDK use?
<Abhi>: Yes, I followed the same steps and did not faced much issues. It was pretty straight-forward. Just make sure that the export/import using Deployment manager is successful.
Please let me know if you have more questions.