Administrator's Guide

830 Pages·2017·12.37 MB·English

Oracle® Fusion Applications
Administrator's Guide
Release 12 (11.12.x.0.0)
E66226-03
February 2018
Oracle Fusion Applications Administrator's Guide, Release 12 (11.12.x.0.0)
E66226-03
Copyright © 2011, 2018, Oracle and/or its affiliates. All rights reserved.
Primary Author: Carolina Ruiz, Claudia Gomez. Special authoring thanks to: Bor-Ruey Fu, Ramakrushna
Nara, Mansur Khan, Alan Cao, Subodh Nimbkar, Rick Lotero, Rajan Nagpal, Ravi Mohan, Chaya
Ramanujam, Vinay Vernekar, Arya Sanyal, Maco Ma, Dereck De Almeida, Ingolf Loboda, Olaf Heimburger,
Matt Shannon, Girish Nagaraj, Hassan El Bouihi, Haritha Gongalore, and Jeff Nagelkerke.
This software and related documentation are provided under a license agreement containing restrictions on
use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your
license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify,
license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means.
Reverse engineering, disassembly, or decompilation of this software, unless required by law for
interoperability, is prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If
you find any errors, please report them to us in writing.
If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on
behalf of the U.S. Government, then the following notice is applicable:
U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software,
any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are
"commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-
specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the
programs, including any operating system, integrated software, any programs installed on the hardware,
and/or documentation, shall be subject to license terms and license restrictions applicable to the programs.
No other rights are granted to the U.S. Government.
This software or hardware is developed for general use in a variety of information management applications.
It is not developed or intended for use in any inherently dangerous applications, including applications that
may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you
shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its
safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this
software or hardware in dangerous applications.
Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of
their respective owners.
Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are
used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron,
the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro
Devices. UNIX is a registered trademark of The Open Group.
This software or hardware and documentation may provide access to or information about content, products,
and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly
disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise
set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be
responsible for any loss, costs, or damages incurred due to your access to or use of third-party content,
products, or services, except as set forth in an applicable agreement between you and Oracle.
Contents
Preface
Audience xxxv
Documentation Accessibility xxxv
Related Documents xxxv
Conventions xxxv
Guide News
New and Changed Features for Release 12 (11.12.x.0.0) xxxvii
Significant Changes in this Document for 11g Release 9 (11.1.9) xxxvii
1 Overview and Roles
1.1 Roles and Key Tasks 1-1
1.1.1 System Administrator 1-1
1.1.2 Network Engineer 1-2
1.1.3 Database Engineer 1-2
1.1.4 Oracle Identity Management and Security Specialist 1-2
1.1.5 Oracle Fusion Applications Technical Lead or System Administrator 1-3
1.1.6 Support Technician 1-3
2 Understand the Environment
2.1 Access Oracle Fusion Applications 2-1
2.2 Start and Stop an Oracle Fusion Applications Environment 2-1
2.2.1 Start the Entire Environment in Order 2-2
2.2.1.1 Start the Oracle Database 2-2
2.2.1.2 Start the Oracle Identity Management Suite 2-3
2.2.1.3 Start Node Manager 2-4
2.2.1.4 Start the Key Oracle Fusion Middleware Components on the
Provisioned Environment 2-5
2.3 Stop the Entire Environment in Order 2-5
2.3.1 Stop the Key Oracle Fusion Middleware Components on the
Provisioned Environment 2-5
iii
2.3.2 Stop the Oracle Identity Management Suite 2-6
2.3.3 Stop the Oracle Database 2-6
2.4 Special Uses of the fastartstop Utility 2-7
2.4.1 Start Administration Servers and Managed Servers 2-7
2.4.2 Stop Administration Servers and Managed Servers 2-9
2.4.3 Start Oracle HTTP Server 2-10
2.4.4 Stop Oracle HTTP Server 2-11
2.4.5 Start Oracle Business Intelligence 2-12
2.4.6 Stop Oracle Business Intelligence 2-12
2.4.7 Stop an Oracle WebLogic Server Domain for a Product Family 2-13
2.4.7.1 Stop the Oracle HTTP Server 2-13
2.4.7.2 Stop the Product Family Domain 2-13
2.4.8 Start an Oracle WebLogic Server Domain for a Product Family 2-14
2.4.8.1 Start the Oracle HTTP Server 2-14
2.4.8.2 Start the Product Family Domain 2-14
2.4.9 Start and Stop an Oracle WebLogic Server Cluster in a Product Family
for a Configuration Change 2-14
2.4.9.1 Start and Stop an Oracle WebLogic Server Cluster Using
fastartstop 2-14
2.5 Understand the fastartstop Utility and its Syntax 2-15
2.5.1 fastartstop Syntax 2-15
2.5.1.1 fastartstop: "Start" Syntax Examples 2-19
2.5.1.2 fastartstop: "Stop" Syntax Examples 2-21
2.5.1.3 fastartstop: "Bounce" Examples 2-22
2.5.1.4 fastartstop: Other Syntax Examples 2-22
3 Secure Oracle Fusion Applications
3.1 Introduction to Security 3-1
3.2 Configure SSL for Oracle Fusion Applications 3-2
3.2.1 Background for SSL Connections in Oracle Fusion Applications 3-2
3.2.1.1 Basic Network Topology 3-2
3.2.1.2 Provisioned SSL Connections 3-4
3.2.2 End-to-End SSL for Oracle Fusion Applications 3-4
3.2.2.1 Background and Scope 3-5
3.2.2.2 Enable SSL on Oracle Fusion Applications Domains and Apps
OHS 3-6
3.2.2.3 Enable SSL between Oracle Fusion Applications Domains and
IDM Components 3-17
3.2.2.4 Known Issues 3-25
3.2.3 Checklist of SSL Connections for IDM Components 3-26
3.2.4 SSL-enable Oracle Business Intelligence 3-28
iv
3.2.5 Enable Secure Sockets Layer on ECSF 3-28
3.3 Provision of Identities 3-30
3.3.1 Identity Provisioning Concepts 3-31
3.3.1.1 Define Implementation Users 3-31
3.3.2 Understand Provisioning Steps 3-31
3.3.3 Best Practices for the Administrator Groups 3-32
3.3.4 Manage Identities After Deployment 3-32
3.4 Security Console 3-32
3.5 Masking Data 3-32
3.5.1 Data Masking in Oracle Fusion Applications 3-33
3.5.1.1 Requirements for Data Masking 3-33
3.5.1.2 Sensitive Data in Oracle Fusion Applications 3-37
3.5.1.3 Masking Definitions 3-38
3.5.2 Manage the Masking Templates 3-38
3.5.2.1 Use Self Update to Obtain the Masking Templates 3-38
3.5.2.2 Import Masking Templates from the Library 3-38
3.5.2.3 Export Masking Templates from the Library 3-40
3.5.3 View and Modify Data Masking Definitions 3-40
3.5.4 Generate and Submit the Masking Script 3-44
3.5.5 Customize Mask Formats 3-45
3.5.6 Best Practices when Masking Test Databases 3-46
3.5.7 Masking References 3-47
3.6 Secure Web Services 3-47
3.6.1 Configure and Manage Local Policies 3-47
3.6.2 Configure and Manage Global Policies 3-48
3.6.3 Web Services Security Profiles 3-48
3.6.4 Key Exchange with the Domain Hosting Oracle Identity Manager 3-48
3.6.4.1 Export a Keystore Alias from Application Domain 3-48
3.6.4.2 Import a Keystore Alias into Oracle Identity Manager Domain 3-49
3.7 Hardening Tasks 3-49
3.7.1 Secure Database Network Traffic 3-49
3.7.2 Disable Unused Components to Minimize Risks 3-50
3.7.3 Hardening Backchannel Network and Services 3-51
3.7.4 Configure External Clients with Externally-Facing Web Services 3-51
3.7.4.1 Choose a Mechanism 3-52
3.7.4.2 Set Up Policy Assertions and Configure Mechanisms 3-52
3.7.5 Hardening Web Services 3-54
3.7.6 More Secure Keys and Certificates 3-55
3.8 Password and Certificate Management 3-55
3.8.1 Change the FMWAdmin Password 3-56
v
3.8.1.1 Change the Oracle Fusion Middleware Administrative User
Password Using the Command Line 3-56
3.8.1.2 Change the Oracle Fusion Middleware Administrative User
Password Using the Administration Console 3-56
3.8.2 Use PRT to Change Various Passwords 3-57
3.8.2.1 Prerequisites 3-57
3.8.2.2 Invoke PRT in Interactive Mode 3-58
3.8.3 Use PCU to Change DB Schema Passwords 3-58
3.8.3.1 Use PCU 3-59
3.8.3.2 Validate Password Complexity 3-60
3.8.3.3 Run templateGen 3-61
3.8.3.4 Run iniGen 3-62
3.8.3.5 Run PCU Offline 3-63
3.8.3.6 Additional PCU Features 3-64
3.8.3.7 Encrypt and Decrypt with lcmcrypt 3-64
3.8.4 Use CCU to Change Common User Passwords 3-65
3.8.4.1 Categories of DB Users 3-65
3.8.4.2 Prerequisites and General Steps for Running CCU 3-66
3.8.4.3 Run CCU 3-67
3.8.4.4 Backup and Restore Features 3-68
3.8.4.5 Run utilities 3-72
3.8.5 Update Certificates with the Certificate Renewal Utility 3-76
3.8.5.1 About CRU 3-76
3.8.5.2 Locate CRU 3-76
3.8.5.3 Use CRU for fa/weblogic Certificates 3-77
3.8.5.4 Use CRU for OWSM Certificates 3-79
4 Get Started with Enterprise Manager Cloud Control
4.1 Reasons to Use Cloud Control for Oracle Fusion Applications 4-1
4.1.1 Related Documentation 4-1
4.1.2 Review Enterprise Manager Cloud Control Components 4-2
4.1.3 Plan the Cloud Control Implementation 4-4
4.1.3.1 Sizing Considerations for a Cloud Control Site 4-5
4.2 Install Enterprise Manager Cloud Control 4-6
4.2.1 Prepare the Oracle Database for the OMR 4-7
4.2.2 Run the Installer and Choose Advanced Configuration 4-7
4.2.3 Start and Stop Cloud Control Components Using EMCTL 4-9
4.3 Discover and Add Fusion Applications Targets to Cloud Control 4-10
4.3.1 Understand the Order to Discover Oracle Fusion Applications Targets 4-11
4.3.1.1 Discover Hosts: General Notes 4-12
4.3.2 Discover Databases: General Notes 4-12
vi
4.3.3 Discover Identity Management: General Notes 4-13
4.3.4 Discover the Oracle Fusion Applications Components 4-13
4.3.4.1 Run Diagnostic Pre-Checks 4-13
4.3.4.2 Discover the Fusion Instance 4-15
4.3.5 Add and Remove Targets Later 4-16
4.3.5.1 Add Subsequent Targets and Refreshing an Instance 4-16
4.3.5.2 Remove Oracle Fusion Applications Targets 4-17
4.3.6 Use Target Credentials 4-17
4.4 Log In to Cloud Control 4-17
4.5 Create Target Groups in Cloud Control 4-18
4.6 The Fusion Instance Overview Page and Sections in Cloud Control 4-18
4.6.1 Summary Section 4-20
4.6.1.1 Monitoring and Diagnostics Region 4-20
4.6.1.2 Database System Region 4-20
4.6.2 Member Target Summary Section 4-20
4.6.3 Status Section 4-20
4.6.4 Infrastructure Section 4-21
4.6.5 Compliance Summary Section 4-21
4.6.6 Patch Recommendations 4-21
5 Monitor an Oracle Fusion Applications Environment
5.1 Access Fusion Applications Home Pages in Cloud Control 5-1
5.1.1 Access a Fusion Instance Home Page 5-2
5.1.2 Access the Product Family and Product Home Pages 5-5
5.1.3 Access the Fusion Applications-Related Cloud Control Menu 5-6
5.1.4 Access Cloud Control Online Help 5-7
5.2 Access and Use the Topology Views 5-8
5.2.1 View Options 5-8
5.2.2 Access Options 5-8
5.2.3 Use the Routing Topology 5-9
5.2.4 Use the Products Topology 5-10
5.2.5 Use the Configuration Topology 5-11
5.3 Monitor System and Key Performance Indicators 5-12
5.3.1 Check System Performance Pages 5-13
5.3.1.1 Monitor the System Performance of Oracle Fusion Applications
Deployed to a Cluster 5-13
5.3.2 Check Key Performance Indicators 5-15
5.3.3 Monitor Mid-Tier Elements 5-16
5.3.3.1 Monitor an Oracle WebLogic Server Domain 5-16
5.3.3.2 Monitor an Oracle WebLogic Server Administration or Managed
Server 5-18
vii
5.3.3.3 Monitor a Cluster 5-19
5.3.4 View Activity, Historical Reports, Metrics, and Chart Sets 5-20
5.3.4.1 View a Summary of Activity 5-20
5.3.4.2 View Current Activity 5-21
5.3.4.3 View Historical Reports 5-21
5.3.4.4 View Metrics 5-22
5.3.4.5 Manage Chart Sets 5-22
5.3.4.6 Select the Performance Time Period 5-24
5.4 Check Metrics and Change Metric Thresholds 5-24
5.4.1 Use Metrics at the Mid-Tier Level with Monitoring Templates 5-24
5.4.1.1 Access Mid-Tier Metrics 5-24
5.4.1.2 Edit Metrics Manually 5-25
5.4.1.3 Create Mid-Tier Monitoring Templates 5-26
5.4.2 Use Metrics at the Instance, Product Family, and Product Levels 5-26
5.5 Set Up Notifications and Incident Rules 5-27
5.6 Start and Stop Components 5-27
5.6.1 Start and Stop an Individual Application Instance for a Cluster Using
Cloud Control 5-28
5.6.2 Start and Stop all Application Instances for a Cluster Using Cloud
Control 5-28
5.7 Use Blackouts 5-28
5.8 Implement Compliance Rules 5-29
5.8.1 Understand Rules, Standards, and Frameworks 5-29
5.8.1.1 Real-Time Monitoring Facets 5-29
5.8.2 Prerequisites and Related Documentation 5-29
5.8.3 Implement Compliance 5-30
5.8.3.1 Understand the Rules, Standards, and Framework in the
Compliance Library 5-30
5.8.3.2 Apply Standards to Targets in the Fusion Instance 5-35
5.9 Monitor Product Families and Products 5-36
5.10 Monitor Business Performance Metrics for a Product Family 5-38
5.11 Monitor Business Performance Metrics for a Product 5-40
5.12 Manage Disk Usage for Log Files and Diagnostic Test Results 5-41
5.12.1 Manage Incidents and Flood Control for Fusion Applications: 5-41
5.12.2 Manage Incidents and Flood Control for Middleware Components 5-42
5.12.3 Purge the Results of Selected Diagnostic Tests 5-42
6 Manage Oracle Database for Oracle Fusion Applications
6.1 Access Oracle Database Information in Cloud Control 6-1
6.1.1 Database Statistics 6-1
6.1.2 Database Alerts 6-2
viii
6.1.3 Database Instance 6-2
6.1.4 User and Session Activity 6-3
6.1.5 Host System 6-4
6.2 Set up Diagnostic and Tune Tools for Oracle Fusion Applications Databases 6-4
6.2.1 Create a Baseline of the Database 6-4
6.2.2 Tune the Database Proactively 6-5
6.2.3 Tune the Database Reactively 6-5
6.2.4 Tune SQL Statements 6-5
6.2.4.1 Create SQL Tuning Sets 6-6
6.2.4.2 Manage SQL Profiles 6-6
6.2.4.3 Use SQL Tuning Advisor 6-7
6.2.4.4 Use SQL Access Advisor 6-7
6.2.4.5 Use SQL Tracing 6-7
6.2.5 Review Automatic Database Diagnostic Monitor (ADDM) Reports
Regularly 6-8
6.2.6 Compare Database Performance Over Time Using AWR Reports 6-8
6.2.7 Identify Transient Performance Problems Using ASH Reports 6-8
6.2.8 Identify Wait Time Using Wait Events 6-9
6.3 Tune Tips Specific to Oracle Fusion Applications Environments 6-9
6.3.1 Discover How a Connection is Being Used 6-10
6.3.2 Tune Database Initialization Parameters 6-10
6.3.3 Use Fusion Applications Tools to Optimize UNDO, TEMP, and LOGS
Handling 6-14
6.3.4 Configure Kernel Parameters 6-15
6.3.5 Configure the Database Listener 6-16
6.3.6 Tune Tips for the Real Application Cluster (RAC) Databases in Oracle
Fusion Applications 6-16
6.3.7 Optimize SQL Statements 6-18
6.3.7.1 Collect Optimizer Statistics 6-18
6.3.7.2 Pin Packages and Cursors 6-20
6.3.8 Configure the Database Resource Manager 6-21
6.3.8.1 Assign Connections to Resource Consumer Groups 6-21
6.3.8.2 Use the Oracle Database Resource Manager 6-22
6.3.8.3 Monitor the Resource Manager 6-25
6.3.9 Tune the PS_TXN Table in the FUSION Schema 6-25
6.3.10 Optimize Maintenance Windows 6-25
6.3.10.1 Disable AUTOTASK 6-25
6.3.10.2 Adjust Default Maintenance Windows 6-26
6.3.11 Reduce Connection Creation Originating from SOA Server 6-26
6.4 Test Oracle Database Changes 6-26
6.4.1 Use the SQL Performance Analyzer 6-27
6.4.2 Use Database Replay 6-27
ix
6.4.3 Manage Test Data Management 6-27
7 Manage Oracle Enterprise Scheduler Service and Jobs
7.1 Introduction to Managing Oracle Enterprise Scheduler 7-1
7.2 Understand the Scheduler Administration Pages 7-3
7.2.1 Understand the Scheduling Service Home Page 7-5
7.2.2 Understand the Regions on the Page 7-5
7.2.2.1 Top 10 Long Running Requests and Top 10 Ready Job Requests
Regions 7-6
7.2.2.2 Scheduler Components Region 7-6
7.2.2.3 Completed Job Requests Region 7-6
7.2.2.4 Response and Load Region 7-6
7.2.2.5 Performance Region 7-7
7.2.3 View General Oracle Enterprise Scheduler Instance Information 7-7
7.3 Monitor the Scheduler 7-8
7.3.1 Monitor Server Status 7-8
7.3.2 Monitor Oracle Enterprise Scheduler Service Activity 7-9
7.3.2.1 View the Top 10 Long Running Oracle Enterprise Scheduler
Requests 7-10
7.3.2.2 View the Top 10 Oracle Enterprise Scheduler Jobs Ready to Be
Executed 7-10
7.3.3 Set Metric Thresholds and Monitor Alerts 7-10
7.3.3.1 Set Metric Thresholds 7-12
7.3.3.2 View Oracle Enterprise Scheduler Alerts 7-14
7.4 Manage Oracle Enterprise Scheduler 7-15
7.4.1 Stop and Start Oracle Enterprise Scheduler Processes 7-15
7.4.2 Manage Job Traffic 7-15
7.4.2.1 Manage Work Assignments 7-16
7.4.2.2 Manage Workshifts 7-20
7.4.3 Manage Purge Policies 7-23
7.4.3.1 View Purge Policies 7-23
7.4.3.2 Set Up a New Purge Policy 7-23
7.4.3.3 Update a Purge Policy 7-25
7.4.3.4 Delete a Purge Policy 7-25
7.4.3.5 Purge Job Requests from the Database 7-26
7.4.4 Manage Schedules 7-27
7.4.4.1 Create a Schedule 7-27
7.4.4.2 Edit a Schedule 7-28
7.4.4.3 Delete a Schedule 7-29
7.4.5 Manage Incompatibilities 7-29
7.4.5.1 View Incompatibilities 7-29
x