6 Installing OracleAS Infrastructure

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Identity Management and Metadata Repository.

2.

Select Configuration Options

Select Oracle Internet Directory.

Select Oracle Application Server Single Sign-On.

Select Oracle Application Server Delegated Administration Services.

Select Oracle Application Server Directory Integration and Provisioning.

Select Oracle Application Server Certificate Authority (OCA) if you want to configure your own certificate authority which can issue certificates for users and servers.

Do not select High Availability and Replication.

Click Next.

3.

Specify Port Configuration Options

If you want to use default ports for the components, select Automatic.

If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file.

Click Next.

4.

Specify Namespace in Internet Directory

Select the suggested namespace, or enter a custom namespace for the location of the default Oracle Identity Management realm.

Ensure the value shown in Suggested Namespace meets your deployment needs. If not, enter the desired value in Custom Namespace. See Section 6.16, "What Do I Enter in the "Specify Namespace in Internet Directory" Screen?".

Click Next.

5.

OCA screens

If you select Oracle Application Server Certificate Authority (OCA) in the Select Configuration Options screen, the installer displays screens where you need to enter OCA information. See Section 6.30, "Install Fragment: OCA Screens".

6.

Oracle Database screens

Enter information for the OracleAS Metadata Repository database. See Section 6.29, "Install Fragment: Database Screens".

7.

Specify Instance Name and ias_admin Password

Instance Name: Enter a name for this infrastructure instance. Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instance names must be unique. See Section 5.9, "Oracle Application Server Instances and Instance Names" for instance name details.

Example: infra

ias_admin Password and Confirm Password: Set the password for the ias_admin user. This is the administrative user for the instance. See Section 5.10, "The ias_admin User and Restrictions on its Password" for restrictions on the password.

Example: welcome99

Click Next.

8.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Identity Management and Metadata Repository.

2.

Select Configuration Options

Do not select Oracle Internet Directory because you want to use an existing one.

Do not select Oracle Application Server Single Sign-On.

Do not select Oracle Application Server Delegated Administration Services.

Do not select Oracle Application Server Directory Integration and Provisioning.

Select Oracle Application Server Certificate Authority (OCA) if you want to configure your own certificate authority which can issue certificates for users and servers.

Do not select High Availability and Replication.

Click Next.

3.

Specify Port Configuration Options

If you want to use default ports for the components, select Automatic.

If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file.

Click Next.

4.

Register with Oracle Internet Directory

Hostname: Enter the name of the computer where Oracle Internet Directory is running.

Port: Enter the port at which Oracle Internet Directory is listening. See Section 6.17, "How to Determine Port Numbers Used by Components" if you do not know the port number.

Use Only SSL Connections with this Oracle Internet Directory: Select this option if you want Oracle Application Server components to use only SSL to connect to Oracle Internet Directory.

Click Next.

5.

Specify Oracle Internet Directory Login

Username: Enter the username to log in to Oracle Internet Directory. You must log in as a user who belongs to the necessary groups in Oracle Internet Directory. Which groups are necessary depends on which components you are installing. See Section 8.3, "Groups Required to Configure or Deinstall Components" for details.

Password: Enter the password for the username.

Realm: Enter the realm against which to validate the username. This field appears only if your Oracle Internet Directory has multiple realms.

Click Next.

6.

OCA screens

If you select Oracle Application Server Certificate Authority (OCA) in the Select Configuration Options screen, the installer displays screens where you need to enter OCA information. See Section 6.30, "Install Fragment: OCA Screens".

7.

Oracle Database screens

Enter information for the OracleAS Metadata Repository database. See Section 6.29, "Install Fragment: Database Screens".

8.

Specify Instance Name and ias_admin Password

Instance Name: Enter a name for this infrastructure instance. Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instance names must be unique. See Section 5.9, "Oracle Application Server Instances and Instance Names" for instance name details.

Example: infra

ias_admin Password and Confirm Password: Set the password for the ias_admin user. This is the administrative user for the instance. See Section 5.10, "The ias_admin User and Restrictions on its Password" for restrictions on the password.

Example: welcome99

Click Next.

9.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Metadata Repository.

2.

Select Configuration Options

For installing the OracleAS Metadata Repository in a new database, there are no configuration options.

Click Next.

3.

Register OracleAS Metadata Repository

If you already have an Oracle Internet Directory and know its connect information, select Yes and enter the name of the computer where Oracle Internet Directory is running and the port number. See Section 6.17, "How to Determine Port Numbers Used by Components" if you do not know the port number.

Use Only SSL Connections with this Oracle Internet Directory: Select this option if you want Oracle Application Server components to use only SSL to connect to Oracle Internet Directory.

If you do not have an Oracle Internet Directory, or do not know its connect information, select No.

Click Next.

4.

Specify Oracle Internet Directory Login

This screen appears only if you selected Yes in the previous screen.

Username: Enter the username for logging into Oracle Internet Directory. The user must belong to the iAS Admins group in Oracle Internet Directory.

Password: Enter the password.

Realm: This field appears only if your Oracle Internet Directory contains multiple realms. Enter the name of the realm against which to authenticate the user.

Click Next.

5.

Oracle Database screens

Enter information for the OracleAS Metadata Repository database. See Section 6.29, "Install Fragment: Database Screens".

6.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

7.

--

Unlock the dcm schema, and set its password. This step is required only if you want to use the metadata repository for database clustering of middle-tier instances.

1. Set the ORACLE_HOME environment variable to point to the full path of the directory where you installed the OracleAS Metadata Repository.

2. Set the ORACLE_SID environment variable to the SID of the OracleAS Metadata Repository.

3. Unlock the dcm schema and set its password using SQL*Plus.

   The following alter user command sets the password to "welcome1", but you can set it to any value.

   prompt> $ORACLE_HOME/bin/sqlplus "sys/password as sysdba"
   SQL> alter user dcm identified by welcome1 account unlock;
   

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Oracle Identity Management.

2.

Select Configuration Options

Select Oracle Internet Directory.

Select Oracle Application Server Single Sign-On.

Select Oracle Application Server Delegated Administration Services and/or Oracle Application Server Directory Integration and Provisioning if you need the services provided by these components. See Section 6.6, "Do I Need the Oracle Delegated Administration Services or the Oracle Directory Integration and Provisioning Components?"

Select Oracle Application Server Certificate Authority (OCA) if you want to configure your own certificate authority which can issue certificates for users and servers.

Do not select High Availability and Replication.

Click Next.

3.

Specify Port Configuration Options

If you want to use default ports for the components, select Automatic.

If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file.

Click Next.

4.

Specify Repository

Username: Enter the username to use to log in to the OracleAS Metadata Repository database. The user must have DBA privileges.

Password: Enter the user's password.

Hostname and Port: Enter the name of the computer where the database is running, and the port number at which it is listening. Use the format: host:port.

Service Name: Enter the service name of the database. Note that the service name must include the database domain name.

Example: orcl.mydomain.com

Click Next.

5.

Specify Namespace in Internet Directory

Select the suggested namespace, or enter a custom namespace for the location of the default Oracle Identity Management realm.

Ensure the value shown in Suggested Namespace meets your deployment needs. If not, enter the desired value in Custom Namespace. See Section 6.16, "What Do I Enter in the "Specify Namespace in Internet Directory" Screen?".

Click Next.

6.

Enter information to configure OCA

Provide the information as prompted by the OCA screens. See Section 6.30, "Install Fragment: OCA Screens" for details.

7.

Specify Instance Name and ias_admin Password

Instance Name: Enter a name for this infrastructure instance. Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instance names must be unique. See Section 5.9, "Oracle Application Server Instances and Instance Names" for instance name details.

Example: id_mgmt

ias_admin Password and Confirm Password: Set the password for the ias_admin user. This is the administrative user for the instance. See Section 5.10, "The ias_admin User and Restrictions on its Password" for restrictions on the password.

Example: welcome99

Click Next.

8.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Oracle Identity Management.

2.

Select Configuration Options

Do not select Oracle Internet Directory.

Select Oracle Application Server Single Sign-On.

Select Oracle Application Server Delegated Administration Services and/or Oracle Application Server Directory Integration and Provisioning if you need the services provided by these components. See Section 6.6, "Do I Need the Oracle Delegated Administration Services or the Oracle Directory Integration and Provisioning Components?"

Select Oracle Application Server Certificate Authority (OCA) if you want to configure your own certificate authority which can issue certificates for users and servers.

Do not select High Availability and Replication.

Click Next.

3.

Specify Port Configuration Options

If you want to use default ports for the components, select Automatic.

If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file.

Click Next.

4.

Register with Oracle Internet Directory

Hostname: Enter the name of the computer where Oracle Internet Directory is running.

Port: Enter the port on which Oracle Internet Directory is listening. See Section 6.17, "How to Determine Port Numbers Used by Components" if you do not know the port number.

Use Only SSL Connections with this Oracle Internet Directory: Select this option if you want Oracle Application Server components to use only SSL to connect to Oracle Internet Directory.

Click Next.

5.

Specify Oracle Internet DirectoryLogin

Username: Enter the username to log in to Oracle Internet Directory. You must log in as a user who belongs to the necessary groups in Oracle Internet Directory. Which groups are necessary depends on which components you are installing. See Section 8.3, "Groups Required to Configure or Deinstall Components" for details.

Password: Enter the password for the username.

Realm: Enter the realm against which to validate the username. This field appears only if your Oracle Internet Directory has multiple realms.

Click Next.

6.

Specify ODS Password

Enter the password for the ODS schema in the OracleAS Metadata Repository. The ODS schema is the main schema used by Oracle Internet Directory.

By default, the ODS password is the same as the ias_admin password (the password that you entered in the Specify Instance Name and ias_admin Password screen).

Click Next.

7.

Enter information to configure OCA

Provide the information as prompted by the OCA screens. See Section 6.30, "Install Fragment: OCA Screens" for details.

8.

Specify Instance Name and ias_admin Password

Instance Name: Enter a name for this infrastructure instance. Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instance names must be unique. See Section 5.9, "Oracle Application Server Instances and Instance Names" for instance name details.

Example: id_mgmt

ias_admin Password and Confirm Password: Set the password for the ias_admin user. This is the administrative user for the instance. See Section 5.10, "The ias_admin User and Restrictions on its Password" for restrictions on the password.

Example: welcome99

Click Next.

9.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Identity Management.

2.

Select Configuration Options

Select Oracle Internet Directory.

Do not select Oracle Application Server Single Sign-On.

Do not select Oracle Application Server Delegated Administration Services.

Do not select Oracle Application Server Directory Integration and Provisioning.

Do not select Oracle Application Server Certificate Authority (OCA).

Do not select High Availability and Replication.

Click Next.

3.

Specify Port Configuration Options

If you want to use default ports for the components, select Automatic.

If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file.

Click Next.

4.

Specify Repository

Username: Enter the username to use to log in to the OracleAS Metadata Repository database. The user must have DBA privileges.

Password: Enter the user's password.

Hostname and Port: Enter the name of the computer where the database is running, and the port number at which it is listening. Use the format: host:port.

Service Name: Enter the service name of the database. Note that the service name must include the database domain name.

Example: orcl.mydomain.com

Click Next.

5.

Specify Namespace in Internet Directory

Select the suggested namespace, or enter a custom namespace for the location of the default Oracle Identity Management realm.

Ensure the value shown in Suggested Namespace meets your deployment needs. If not, enter the desired value in Custom Namespace. See Section 6.16, "What Do I Enter in the "Specify Namespace in Internet Directory" Screen?".

Click Next.

6.

Specify Instance Name and ias_admin Password

Instance Name: Enter a name for this infrastructure instance. Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instance names must be unique. See Section 5.9, "Oracle Application Server Instances and Instance Names" for instance name details.

Example: infra

ias_admin Password and Confirm Password: Set the password for the ias_admin user. This is the administrative user for the instance. See Section 5.10, "The ias_admin User and Restrictions on its Password" for restrictions on the password.

Example: welcome99

Click Next.

7.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

1.

--

Start up the installer and complete the first few screens. See Section 6.27, "Install Fragment: The First Few Screens of the Installation" for details.

Notes:

• In the Select Installation Type screen, select Identity Management and OracleAS Metadata Repository.

2.

Select Configuration Options

Do not select Oracle Internet Directory because you want to use an existing one.

Do not select Oracle Application Server Single Sign-On.

Do not select Oracle Application Server Delegated Administration Services.

Do not select Oracle Application Server Directory Integration and Provisioning.

Select Oracle Application Server Certificate Authority (OCA).

Do not select High Availability and Replication.

Click Next.

3.

Specify Port Configuration Options

If you want to use default ports for the components, select Automatic.

If you do not want to use the default ports, and you have created a staticports.ini file, select Manual and enter the fullpath to your staticports.ini file.

Click Next.

4.

Register with Oracle Internet Directory

Hostname: Enter the name of the computer where Oracle Internet Directory is running.

Port: Enter the port on which Oracle Internet Directory is listening. See Section 6.17, "How to Determine Port Numbers Used by Components" if you do not know the port number.

Use Only SSL Connections with this Oracle Internet Directory: Select this option if you want Oracle Application Server components to use only SSL to connect to Oracle Internet Directory.

Click Next.

5.

Specify Oracle Internet Directory Login

Username: Enter the username to log in to Oracle Internet Directory. You must log in as a user who belongs to the Trusted Application Admins group and to the iAS Admins group in Oracle Internet Directory.

Password: Enter the password for the username.

Realm: Enter the realm against which to validate the username. This field appears only if your Oracle Internet Directory has multiple realms.

Click Next.

6.

OCA screens

Enter information to configure OCA. See Section 6.30, "Install Fragment: OCA Screens".

7.

Oracle Database screens

Enter information for the OracleAS Metadata Repository database. See Section 6.29, "Install Fragment: Database Screens".

8.

Specify Instance Name and ias_admin Password

Instance Name: Enter a name for this infrastructure instance. Instance names can contain alphanumeric characters and the _ (underscore) character. If you have more than one Oracle Application Server instance on a computer, the instance names must be unique. See Section 5.9, "Oracle Application Server Instances and Instance Names" for instance name details.

Example: infra_oca

ias_admin Password and Confirm Password: Set the password for the ias_admin user. This is the administrative user for the instance. See Section 5.10, "The ias_admin User and Restrictions on its Password" for restrictions on the password.

Example: welcome99

Click Next.

9.

--

Finish the installation. See Section 6.28, "Install Fragment: The Last Few Screens of the Installation" for details.

1.

--

Start the installer. See Section 5.19, "Starting theOracle Universal Installer" for details.

2.

Welcome

Click Next.

3.

Specify Inventory Directory and Credentials

This screen appears only if this is the first installation of any Oracle product on this computer.

Enter the full path of the inventory directory: Enter a full path to the inventory directory. Enter a directory that is different from the Oracle home directory for the product files.

Example: /opt/oracle/oraInventory

Specify Operating System group name: Select the operating system group that will have write permission for the inventory directory.

Example: oinstall

Click Next.

4.

Run orainstRoot.sh

This screen appears only if this is the first installation of any Oracle product on this computer.

Run the orainstRoot.sh script in a different shell as the root user. The script is located in the oraInventory directory.

After running the script, click Continue.

5.

Specify File Locations

Name: Enter a name to identify this Oracle home. The name can consist of alphanumeric and the underscore (_) characters only, and cannot be longer than 128 characters.

Example: OH_INFRA

Path: Enter the full path to the destination directory. This is the Oracle home. If the directory does not exist, the installer creates it. If you want to create the directory beforehand, create it as the oracle user; do not create it as the root user.

Example: /opt/oracle/infra

Click Next.

6.

Specify Hardware Cluster Installation Mode

This screen appears only if the computer is part of a hardware cluster.

If you are installing an infrastructure, select the computers in the hardware cluster where you want to install the infrastructure. You can select multiple computers, or you can just select the current computer.

Click Next.

7.

Select a Product to Install

Select Oracle Application Server Infrastructure 10g.

If you need to install additional languages, click Product Languages. See Section 5.8, "Installing Additional Languages" for details.

Click Next.

8.

Select Installation Type

The options displayed on this screen depend on what you selected in the Select a Product to Install screen.

The installation types for OracleAS Infrastructure are:

• Identity Management and Metadata Repository

• Identity Management

• Metadata Repository

Click Next.

If you get an error message saying that the TMP environment variable is not set, it means that the default temp directory does not have enough space. You can either set the TMP environment variable to point to a different directory or free up enough space in the default temp directory.

For details on the TMP environment variable, see Section 4.9.6, "TMP".

9.

Upgrade Existing Oracle9iAS Infrastructure

This screen appears if the installer detects an Infrastructure Release 2 (9.0.2) instance on the computer and you selected to install OracleAS Infrastructure.

This screen presents you with the option to upgrade the existing Release 2 (9.0.2) Infrastructure, or install the current version of the OracleAS Infrastructure. If you want to upgrade, see the Oracle Application Server Upgrade and Compatibility Guide.

10.

Confirm Pre-Installation Requirements

Verify that your computer meets all the requirements. Click Next.

1.

Summary

Verify your selections and click Install.

2.

Install Progress

This screen shows the progress of the installation.

3.

Run root.sh

Note: Do not run the root.sh script until this dialog appears.

1. When you see this dialog, run the root.sh script in a different shell as the root user. The script is located in this instance's Oracle home directory.

2. Click OK.

4.

Configuration Assistants

This screen shows the progress of the configuration assistants. Configuration assistants configure components.

5.

End of Installation

Click Exit to quit the installer.

1.

Specify Database Configuration Options

Global Database Name: Enter a name for the OracleAS Metadata Repository database. Append a domain name to the database name. This domain name for the global database name can be different from your network domain name.

The domain name portion of the global database name has the following naming restrictions:

• Can contain only alphanumeric, underscore (_), minus (-), and pound (#) characters

• Must not be longer than 128 characters

The database name portion of the global database name has the following naming restrictions:

• Must contain alphanumeric characters only

• Must not be longer than eight characters

• Must not contain PORT or HOST in uppercase characters. If you want the name to contain "host" or "port", use lowercase characters.

Example: orcl.mydomain.com

Note: Be sure that you do not enter two or more periods together, for example, orcl.mydomain.com. The installer does not check for this, and this will lead to errors later during the installation process.

SID: Enter the system identifier for the OracleAS Metadata Repository database. Typically this is the same as the global database name, but without the domain name. The SID must be unique across all databases.

SIDs have the following naming restrictions:

• Must contain alphanumeric characters only

• Must not be longer than eight characters

• Must not contain PORT or HOST in uppercase characters. If you want the name to contain "host" or "port", use lowercase characters.

Example: orcl

Database Character Set: Select the character set to use. See also Section 6.15, "Support for NE8ISO8859P10 and CEL8ISO8859P14 Characters Sets".

Database File Location: Enter the full path to the parent directory for the data files directory. This parent directory must already exist, and you must have write permissions in this directory.

The installer will create a subdirectory in this parent directory, and the subdirectory will have the same name as the SID. The data files will be placed in this subdirectory.

Example: If you enter /u02/oradata, and the SID is orcl, then the data files will be located in /u02/oradata/orcl.

Click Next.

2.

Specify Database Schema Passwords

Set the passwords for these privileged database schemas: SYS, SYSTEM, SYSMAN, and DBSNMP. You can set different passwords for each schema, or you can set the same password for all the schemas.

Click Next.

1.

Select OracleAS Metadata Repository

This screen appears only if you are configuring OCA and you are using an existing Oracle Internet Directory and you are using an existing OracleAS Metadata Repository. The Oracle Internet Directory must contain the registration for the OracleAS Metadata Repository that you want to use.

Select the OracleAS Metadata Repository that you want OCA to use.

Click Next.

2.

Specify OCA Distinguished Name

OCA uses the DN specified on this screen to populate the Issuer field of certificates that it issues.

Typical DN: Use this section if your DN uses only the attributes listed in this section. You do not have to fill in all the attributes specified in this section. Only the o (organization) attribute is required. Note that the ' (single quote) character is not a valid character in any of the attributes.

• Common Name (CN): Enter the name that you want on the certificate. This name must be different from your hostname. Example: John Doe.

• Organizational Unit (OU): Enter the name of your division or department. Example: Sales.

• Organization (O)*: Enter the name of your company or organization. Example: Oracle Corporation.

• Country (C): Select your country from the drop-down list.

Custom DN: If your DN uses attributes not listed in the Typical DN section, specify your DN in this section.

Click Next.

3.

Select OCA Key Length

Key Length (bits): Select the key length used in RSA algorithm to sign all certificates issued by OCA. Oracle recommends that you use at least a 2048-bit key length. Longer key lengths provide greater security, but require more time to issue each new certificate.

Click Next.

4.

Specify OCA Administrator's Password

Administrator's Password and Confirm Password: Specify and confirm the password for the OCA administrator. The password has the following restrictions:

• It must contain at least eight characters.

• It must contain at least one alphabetic character.

• It must contain at least one non-alphabetic character (for example, a number).

• Its first character cannot be a number.

You need this password to manage OCA. This password is also used by the OCA Configuration Assistant.

You can change the password after installation using the ocactl command. See the OCA Online Help for details.

Click Next.