SSL for Enterprise Manager (on 10g)

Hi all,
Database 10g'a Enterprise manager in its default installation (on Linux) requires HTML browser access to the server's port 5500. There is a lot of authentication (server OS, oracle database credentials) going on. How do I encrypt this traffic? At first glance the documentation suggests to use SSL features of Oracle's Apache distribution (I am not sure that is installed by default). I have tried port forwarding through ssh. That fails probably because of the web server's (what web server?) configuration. Is there an easy way I have overlooked?
Thanks.
Wolfram

Had similar issues. Executed the following on the host server:
emctl stop dbconsole
emctl secure dbconsole
emctl start dbconsole
After these steps, https://hostname:5500/em worked.

Similar Messages

Using Weblogic as web server for Enterprise Manager 10g R3?

hello,
can i have your help on this?
i want to use Weblogic as web server instead of apache in the structure of Enterprise Manager 10g R3?
have any of you try this? can someone please provide me some link related to how to configure Weblogic as web server for Enterprise Manager.
Many thanks in advance
Cheers,
Cosmin

Im dont think its possible to do this with enterpise manager (Dbcosole), It might be possible with GRID .. have a look here
http://www.oracle.com/technology/products/wag/index.html

The OMS is not set up for Enterprise Manager Security

Hi, I'm trying to add an agent to grid control and its not connecting with the management server because i cant secure it...
bash-2.05$ ../../bin/emctl secure agent <password>
Oracle Enterprise Manager 10g Release 3 Grid Control 10.2.0.3.0.
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
Agent is already stopped... Done.
Securing agent... Started.
Requesting an HTTPS Upload URL from the OMS... Failed.
The OMS is not set up for Enterprise Manager Security.
i have tried this on two seperate servers, both do the exact same thing. However, on my repository server where the OMS is housed, i can secure the agent no problem. Does anyone know what the problem could be? My OMS is on a Linux (SuSE 10.2) 32-bit machine.
heres the emdctl.trc on the agent machine:
2007-07-11 11:00:20 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
2007-07-11 11:00:21 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
2007-07-11 11:00:21 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
2007-07-11 11:00:21 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
2007-07-11 11:00:21 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
2007-07-11 11:00:22 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
2007-07-11 11:00:22 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
2007-07-11 11:05:10 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
2007-07-11 11:05:10 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
2007-07-11 11:10:08 Thread-1 WARN http: snmehl_connect: connect failed to (cbldb3:3872): Connection refused (error = 239)
2007-07-11 11:10:08 Thread-1 ERROR main: nmectla_agentctl: Error connecting to http://cbldb3:3872/emd/main/. Returning status code 1
bash-2.05$ lsof | grep 3872
bash-2.05$
seems to be failing the connect but nothing is running on the port so i'm not sure why
Thanks in advance
Message was edited by:
user581869

some further information and hopefully someone can help me...
I went to the OMS binary folder (fmc45712:$OMS_HOME/bin) and executed the following commands...
$OMS_HOME/opmn/bin/opmnctl stopall
$OMS_HOME/bin/emctl stop oms
$OMS_HOME/bin/emctl secure oms
$OMS_HOME/bin/emctl start oms
$OMS_HOME/opmn/bin/opmnctl startall
then i go to $AGENT_HOME on the OMS machine (fmc45712:$AGENT_HOME/bin) and execute..
$AGENT_HOME/bin/emctl status agent -secure
Oracle Enterprise Manager 10g Release 3 Grid Control 10.2.0.3.0.
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
Checking the security status of the Agent at location set in /opt/oracle/OracleHomes/agent10g/sysman/config/emd.properties... Done.
Agent is secure at HTTPS Port 3872.
Checking the security status of the OMS at http://fmc45712:4889/em/upload/... Done.
OMS is secure on HTTPS Port 1159
I then to go the server i deployed the agent on that i want to get communicating wtih my OMS...
$AGENT_HOME/bin/emctl status agent -secure
Oracle Enterprise Manager 10g Release 3 Grid Control 10.2.0.3.0.
Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
Checking the security status of the Agent at location set in /u101/em/agent10g/sysman/config/emd.properties... Done.
Agent is unsecure at HTTP Port 3872.
Checking the security status of the OMS at http://fmc45712:4889/em/upload/... Done.
OMS is running but has not been secured. No HTTPS Port available.
same command, different computer, but on the same network, and it just doesn't work. The OMS is on Linux x86 and the agent on the alternate computer is on HP-UX. If anyone has any help it'd be much appreciated.

Using weblogic as web server for Enterprise Manager can someone pls help?

hello,
can i have your help on this?
i want to use Weblogic as web server instead of apache in the structure of Enterprise Manager 10g R3?
have any of you try this? can someone please provide me some link related to how to configure Weblogic as web server for Enterprise Manager.
Many thanks in advance
Cheers,
Cosmin

You'll probably have better luck posting in the Enterprise Manager forum:
Enterprise Manager

RE: Oracle Enterprise Manager Extensibility 10g Release 4 (10.2.0.4) Guide

Hi:
- I have a question about the SNMP Receivelet code in this guide:
Oracle® Enterprise Manager Extensibility
10g Release 4 (10.2.0.4)
Part Number B40007-01
- Basically I copied the SNMP Receivelet code from the guide into a plug-in.
I was able to load the plug-in without any error messages, but no alerts are raised
when I send a trap.
- Could someone please tell me what port the snmp receivelet listens on?
- I tried ports: 3002, 1830, 3872 and 8002.
- Port 3002 was obtained from emd.properties
- Port 1830 was obtained from the OEM console
- What condition is necessary for agent to receive SNMP traps?
- My agent environment is:
[oracle@blade bin]$ ./emctl status agent
Oracle Enterprise Manager 10g Release 5 Grid Control 10.2.0.5.0.
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
Agent Version : 10.2.0.5.0
OMS Version : 10.2.0.1.0
Protocol Version : 10.2.0.0.0
Agent is Running and Ready
[oracle@blade bin]$
- My metadata file is:
<?xml version="1.0"?>
<!DOCTYPE TargetMetadata SYSTEM "../dtds/TargetMetadata.dtd">
<TargetMetadata META_VER="1.001" TYPE="oracle_guide" >
<Display>
<Label NLSID="oracle_guide">Oracle CCA Application</Label>
</Display>
<Metric NAME="Response" TYPE="TABLE">
<Display>
<Label NLSID="oracle_guide_resp">Response</Label>
</Display>
<TableDescriptor>
<ColumnDescriptor NAME="Status" TYPE="NUMBER">
<Display>
<Label NLSID="guide_SNMP_resp_status">CCA SNMP SubAgent
Status</Label>
</Display>
</ColumnDescriptor>
</TableDescriptor>
<QueryDescriptor FETCHLET_ID="OSLineToken">

<Property NAME="perlBin" SCOPE="SYSTEMGLOBAL">perlBin</Property>
<Property NAME="scriptsDir" SCOPE="SYSTEMGLOBAL">scriptsDir</Property>
<Property NAME="command" SCOPE="GLOBAL">
%perlBin%/perl %scriptsDir%/osresp.pl
</Property>
<Property NAME="ENVEM_TARGET_NAME" SCOPE="INSTANCE">AgentAddr</Property>
<Property NAME="startsWith" SCOPE="GLOBAL">em_result=</Property>
<Property NAME="delimiter" SCOPE="GLOBAL">|</Property>
</QueryDescriptor>
</Metric>
<Metric NAME="interfaces" TYPE="TABLE">
<TableDescriptor>
<ColumnDescriptor NAME="name" TYPE="STRING" IS_KEY="TRUE"/>
<ColumnDescriptor NAME="type" TYPE="NUMBER" IS_KEY="FALSE"/>
<ColumnDescriptor NAME="status" TYPE="NUMBER" IS_KEY="FALSE"/>
<ColumnDescriptor NAME="configured_status" TYPE="NUMBER" IS_KEY="FALSE"/>
</TableDescriptor>
<PushDescriptor RECVLET_ID="SNMPTrap">
<Property NAME="MatchEnterprise" SCOPE="GLOBAL">1.3.6.1.4.1.529</Property>
<Property NAME="MatchGenericTrap" SCOPE="GLOBAL">6</Property>
<Property NAME="MatchSpecificTrap" SCOPE="GLOBAL">50</Property>
<Property NAME="MatchAgentAddr" SCOPE="INSTANCE">AgentAddr</Property>
<Property NAME="SeverityStatusOID" SCOPE="GLOBAL">1.3.6.1.2.1.2.2.1.8</Property>
<Property NAME="KeyNameOID" SCOPE="GLOBAL">1.3.6.1.2.1.2.2.1.31</Property>
<Property NAME="ContextTypeOID" SCOPE="GLOBAL">1.3.6.1.2.1.2.2.1.3</Property>
<Property NAME="ContextConfigured_statusOID" SCOPE="GLOBAL">1.3.6.1.2.1.2.2.1.7</Property>
<Property NAME="SeverityCode" SCOPE="GLOBAL">CRITICAL</Property>
</PushDescriptor>
</Metric>
<InstanceProperties>
<InstanceProperty NAME="AgentHost" CREDENTIAL="FALSE"
OPTIONAL="FALSE">
<Display>
<Label NLSID="oracle_guide_SNMP_agent_host">Hostname (SNMP Agent )
</Label>
</Display>
</InstanceProperty>
<InstanceProperty NAME="AgentAddr" CREDENTIAL="FALSE"
OPTIONAL="FALSE">
<Display>
<Label NLSID="oracle_guide_SNMP_agent_addr">IP Address (SNMP Agent)
</Label>
</Display>
</InstanceProperty>
<InstanceProperty NAME="CommunityString" CREDENTIAL="TRUE"
OPTIONAL="TRUE">
<Display>
<Label NLSID="oracle_guide_SNMP_community_string">SNMP Read
Community String (Default: public)</Label>
</Display>
public
</InstanceProperty>
<InstanceProperty NAME="Timeout" CREDENTIAL="FALSE"
OPTIONAL="TRUE">
<Display>
<Label NLSID="oracle_guide_SNMP_timeout">SNMP Timeout (Default: 30
seconds)</Label>
</Display>
30
</InstanceProperty>
</InstanceProperties>
</TargetMetadata>
bash-3.00#
- My collection file is:
<!DOCTYPE TargetCollection SYSTEM "../dtds/TargetCollection.dtd">
<TargetCollection TYPE="oracle_guide">
<CollectionItem NAME = "Response">
<Schedule>
<IntervalSchedule INTERVAL = "5" TIME_UNIT = "Min"/>
</Schedule>
<Condition COLUMN_NAME="Status"
CRITICAL="0"
WARNING="NotDefined"
OPERATOR="EQ"
OCCURRENCES="1"
MESSAGE="%target% is unreachable or is down."
MESSAGE_NLSID="oracle_guide_response_status"
CLEAR_MESSAGE="%target% is up."
CLEAR_MESSAGE_NLSID="oracle_guide_response_status_clear"/>
</CollectionItem>
</TargetCollection>
bash-3.00#
Thanks
John
Edited by: user8826739 on Feb 23, 2010 7:12 AM

Looks like this was also posted 4 messages above ... follow the anwers there.
Please only post the question once ... reposted will not get any answers you wouldn't have gotten anyway.
That just makes it hard for other users to follow all the information.
Dave

How do I create a new emkey for Enterprise Manager Database Control?

Hi,
I just installed 11gR2.
I am evaluating it.
How do I create a new emkey for Enterprise Manager Database Control?
I tried various combinations of this command:
emctl config emkey
I did find a probable bug:
$ emctl config emkey -emkey -emkeyfile emkey.ora -force -sysman_pwd he11ow0rld
Oracle Enterprise Manager 11g Database Control Release 11.2.0.1.0
Copyright (c) 1996, 2009 Oracle Corporation. All rights reserved.
Undefined subroutine &EmKeyCmds::promptUserPasswd called at /u2/app/oracle/product/11.2.0/dbhome_1/bin/EmKeyCmds.pm line 160, <FILE> line 3.
$
Again,
How do I create a new emkey for Enterprise Manager Database Control?
I do have a copy of my old key but it is no longer good because I reinstalled the repository with these commands:
emca -repos drop ...
emca -repos create ...
Oh, and where is emctl "documented".
I poked around in some book-index links and with the search engine.
I could not find anything.
Thanks,
-Janis

user11892726 wrote:
Oh, and where is emctl "documented".
http://download.oracle.com/docs/cd/B16240_01/welcome.html

User name for Enterprise Manager

I finally got the oracle Infastrucure installed, but now I'm a little lost.
During the install it never asked for a user id only a password, now when I bring up the WEB page for Enterprise Manager it ask for USER ID and Password.
Can someone tell me what the default USER ID would be or is there one?
I can USE SYS or SYSTEM via the ENTERPRISE CONSOLE but they won't work on the WEB PAGE.
help....

Hi..
I have the same problem, attempt with the users SYSTEM, SYS, SYSMAN, the local user of my machine (who is where I have the oracle installed) and cannot enter to the web page of the Enterprise Manager. In SQL if I can.
Help

Looking for what software required for Enterprise Manager Installation

Hi All,
I am fairly new in working with Enterprise Manager, Previously used 11g Database Control, but never install Enterprise Manager (OEM). Now due to the increase in databases, I am considering to install OEM (Oracle Enterprise Manager) to list all database (from over 20 Linux severs) to one location.
I have read documentation and still confused on what should be installed for OEM. I am planning to use OEM 12c Release (12.1.0.4), my current databases are 11gR2 (11.2.0.4 ).
Could you tell what I need from below list?
OEM (12.1.0.4)
Web Logic server (Do I need that separately, or will this be installed with OEM?)
OEM Agent on all other 20 servers (do I need to install separate software on them? Please guide)
Any specific version of Java.
Please guide me if I need any other software or plugin.
I have already installed oracle software and have created a database by using “Custom” option in DBCA. My server OS is Linux 64 Bit for Enterprise Manager.
Thanks in Advance.

Hi,
You would need 12c OEM cloud control software , Database software(For creating repository) and agent software (For monitoring targets on other hosts)
Java Development Kit (JDK) 1.6.0.43.0 and Oracle WebLogic Server 11g Release 1 (10.3.6) are installed by default with the 12c OMS installation although you do have a option of installing it separately if you want but Oracle strongly recommends using the 12c installation process to install the JDK and Oracle WebLogic Server for use with Enterprise Manager 12c.
Below is the link for Enterprise Manager Cloud Control 12c Architecture
http://docs.oracle.com/cd/E24628_01/doc.121/e25353/overview.htm#EMCON112
For 12c OMS installation steps refer to
http://docs.oracle.com/cd/E24628_01/install.121/e22624/toc.htm
EM 12c R2: How to Install Enterprise Manager Cloud Control 12.1.0.2 using GUI Mode (Doc ID 1488154.1)
For agent installation refer to
Installing Management Agents Using Add Host Targets Wizard or EM CLI
http://docs.oracle.com/cd/E24628_01/install.121/e22624/install_agent.htm#EMBSC181
Installing agents using other methods
http://docs.oracle.com/cd/E24628_01/install.121/e24089/part_installing_agent.htm#sthref323
To download 12c software
http://www.oracle.com/technetwork/oem/enterprise-manager/downloads/index.html
Regards,
Rahul

Can cold backup be taken for ASM managed oracle 10g databases

Can cold backup be taken for ASM managed oracle 10g databases
Pls help

do we still need to take cold backupYou need to take backup. Hot or cold depends on how your DB is running (archivelog or not).
Will we have file permisions for copyng Use RMAN and don't worry about that.

Oracle VM and Oracle VM Template for Enterprise Manager Cloud Control 12c M

Hello!
After installation of *"Oracle VM 3.1.1 Media Pack v1 for x86_64 (64 bit)"* to bare hardware
can I install Oracle VM Template for Enterprise Manager Cloud Control 12c Media Pack ?
Is it the wrong plan ?
What to do if I need to set VLAN №1 ? (according note of installer I have to choose number between 2 and 4094 )
Thanks and regards,
Pavel
Edited by: Pavel on Jul 30, 2012 5:01 AM

Yes, you can install Oracle VM Manager, create a server pool with the one parent Oracle VM server in it, and then deploy the Oracle VM template in the pool. Once EM VM is up and running, you can register the same Oracle VM Manager with EM, to manage the pool.
In general, it is not recommended that you use the OVM server backend directly. But for bootstrapping the EM environment, you can also try the following:
Download the OVM Template on the Oracle VM server. From the OVM server terminal itself you can do "xm create" to spin a new virtual machine using the Oracle VM teamplate. Once the VM comes up, VNC into the VM and configure the EM OMS and agent.

Oracle VM Template for Enterprise Manager Cloud Control 12c Media Pack v1

Hello
I download Oracle VM Template for Enterprise Manager Cloud Control 12c Media Pack v1
I was checking the structure and I found this
[oracle@em12c bin]$ cd /u01
[oracle@em12c u01]$ ls
app lost+found OracleHomes oracle-template.sh scripts
[oracle@em12c u01]$ cd OracleHomes/
[oracle@em12c OracleHomes]$ ls
checkpoints db11g Middleware
[oracle@em12c OracleHomes]$ pwd
/u01/OracleHomes
[oracle@em12c OracleHomes]$ cd db11g/
[oracle@em12c db11g]$ ls
admin cfgtoollogs checkpoints diag fast_recovery_area oradata product
[oracle@em12c db11g]$ cd ..
[oracle@em12c OracleHomes]$ cd Middleware/
[oracle@em12c Middleware]$ ls
[oracle@em12c Middleware]$
The Database has all binaries but Middleware is empty
Same body knows about this issue.
Regards

Yes, you can install Oracle VM Manager, create a server pool with the one parent Oracle VM server in it, and then deploy the Oracle VM template in the pool. Once EM VM is up and running, you can register the same Oracle VM Manager with EM, to manage the pool.
In general, it is not recommended that you use the OVM server backend directly. But for bootstrapping the EM environment, you can also try the following:
Download the OVM Template on the Oracle VM server. From the OVM server terminal itself you can do "xm create" to spin a new virtual machine using the Oracle VM teamplate. Once the VM comes up, VNC into the VM and configure the EM OMS and agent.

Enterprise management console 10g

Where can I find instructions on how to set up enterprise management console 10g?
Does anyone have a link?

Hi,
enter emca (enterprise manager configuration assistent) at the commandline.
This will show you the options you have.
You can create a dbconsole and also reconfigure a dbconsole container with it.
Hope this helps,
Lutz

Home.uix file not found for Enterprise Manager 10g R1

I installed Oracle 10 R1, Enterprise manager was not working. It was giving error
404 file not found.
I checked the error log, found that home.uix file was not found.
So is there any source from net to get any uix missing files.
or what else could b the solution.
Thanks

I found solution for this issue. When I started my WebLogic server, the PATH and CLASSPATH env variables contained paths leading to my E-Business Suite installation under the same user. All I had to do was unset these env variables and set them to default ones and start the WebLogic server.

How do i change the database port for enterprise manager for 10g

I ma having a problem launching my enterprise manager from my web browser ,the problem is may be there is another service using the default port which is 5500 and now i want to change it to another port but which file in the oracle installation path do i configure

Hi Bryan,
See http://download.oracle.com/docs/cd/B25329_01/doc/admin.102/b25107/network.htm#BHCBABJB
Hope this helps,
Andrew
http://www.apexskins.com

Database respository for Enterprise Manager Grid 10.2.0.2.0

Does anyone know if enterprise manager grid 10.2.0.2.0 repository database is able to be run on a 10.2.0.2.0 database.
The documentation states that it is certified to run on 10.1.0.4.0 or higher database, but I think this means only 10.1.x database not 10.2
I have checked the certification page, and it only indicates the 10.2.0.1.0 release of the software is able to run on 10.1.0.4.0, the mention of 10.2 database is planned.

Suggest you recheck the certification page, and click on the link Oracle Enterprise Manager 10g Grid Control Release 2 (10.2.0.2).
That will tell you 10.2.0.2 database is certified for a 10.2.0.2 grid control
10.2.0.1 IS NOT CERTIFIED!!!!
Cheers,
Bazza

SSL for Enterprise Manager (on 10g)

Similar Messages

Maybe you are looking for