OHS 12c Webgate Deployment and configuration with OAM 12c ( 12.2.1.3.0)

OHS 12c Webgate Deployment and configuration with OAM 12c ( 12.2.1.3.0)

1. Login to oamconsole -> Application Security -> SSO Agents -> create Webgate

2. Make sure the HTTP 12c Server is configured and installed

Just for the reference if not already installed:

https://orclidentitymanagement.blogspot.com.au/2017/10/ohs-12c-122130-ps3-installation-and.html

3. Deployment of Webgate

Since OHS 12c, the OAM Webgate gets shipped along with the OHS installers so no need to install a separate Webgate binary.

Run the following command in-order to deploy the webgate:

Cd /oracle/Middleware/OHS_HOME/webgate/ohs/tools/deployWebGate

./deployWebGateInstance.sh -w /oracle/Middleware/OHS_HOME/user_projects/domains/ohs_domain/config/fmwconfig/components/OHS/instances/OHS_Instance1 -oh /oracle/Middleware/OHS_HOME/

4. Configure Webgate :

Run the following command:

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/oracle/Middleware/OHS_HOME/lib

cd /oracle/Middleware/OHS_HOME/webgate/ohs/tools/setup/InstallTools/

./EditHttpConf -w /oracle/Middleware/OHS_HOME/user_projects/domains/ohs_domain/config/fmwconfig/components/OHS/instances/OHS_Instance1 -oh /oracle/Middleware/OHS_HOME/

5. Copying the OAM Artefacts to the Webgate :

Copy cwallet.sso and ObAccessClient.xml file from “/oracle/Middleware/Oracle_Home/user_projects/domains/oam_domain1/output/DCCWebgate” to “/oracle/Middleware/OHS_HOME/user_projects/domains/ohs_domain/config/fmwconfig/components/OHS/instances/OHS_Instance1/webgate/config/” location

6. Restart OHS server instance:

7. Try to access OHS index.html, the default OAM login page should get displayed

http://<<ohs_hostname>>:7777/index.html

Enter your weblogic credentials for the OAM SSO

Result:

The basic SSO has been configured in between the OHS12c and OAM 12c ☺

OAM 12c / 12.2.1.3.0 Installation Using Quick Installer

1. OAM 12 c / 12.2.1.3.0 ( PS3) Installation :

Following are some of the improvements made in OAM 12c (12.2.1.3.0) with respect to Installation and Configurations:

- Reduced number of steps as compared to earlier releases

– 12c (12.2.1.3.0) allows to re-bootstrap individual components if failed. eg:  policy, system, federation. This makes the installation process easier. In case of failure, individual components can be re-run again instead of starting over from the beginning.

2. Download the installer using below link:

http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/oid-11gr2-2104316.html

3. Make sure your operating system, DB , JDK ( Above jdk1.8.0_131) are present as per the OAM 12c Certification matrix:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

http://www.oracle.com/technetwork/middleware/fmw-122130-certmatrix-3867828.xlsx

4. This quick installation installs Weblogic 12c & OAM at once. You don’t need to install them separately. Unzip the downloaded installer zip , you can find below mentioned jars:
1. fmw_12.2.1.3.0_idmquickstart.jar
2. fmw_12.2.1.3.0_idmquickstart2.jar

5. Install Oracle Fusion Middleware Infrastructure, Oracle SOA Suite, OAM and Oracle Identity Governance 12.2.1.3.0 using the quick installer

Run the command :  java -jar fmw_12.2.1.3.0_idmquickstart.jar

Click on Next:

Select skip auto update and click on Next

Enter Oracle Home Path and click on Next:

Click on Skip:

Click on Install:

Click on Next:

Click on Finish:

6. Running RCU :

The RCU utility is located at the below path:

/app/Middleware/Oracle_Home/oracle_common/bin

./rcu

At Step 1, click on Next :

Click on Next,

Enter the DB Credentials and login as SYS AS SYSDBA and click on Next:

Click on OK

Enter the Prefix name as ‘DEV’ and click on Next

Click on Next:

7. Weblogic Domain Configuration:

Start the Configuration Wizard to begin configuring a domain.

To start the Configuration Wizard:

Change to the following directory:

<ORACLE_HOME>/oracle_common/common/bin

Cd /oracle/Middleware/Oracle_Home/oracle_common/common/bin

./config.sh

Click on Next:

Click on Next:

Enter Weblogic Credentials and Click on Next:

Click on Next:

Click on Next:

Click on Next:

Click on Create:

Click on Finish:

8. Updating the java.security File (Optional):

If you wish to integrate Oracle Access Management 12c (12.2.1.3.0) with Oracle Adaptive Access Manager (OAAM) 11g Release 2 (11.1.2.3.0), you must update java.security file with the following changes, post upgrade:

To do this:

1. Open the java.security file located at JAVA_HOME/jre/lib/security/ in an editor.

2. Remove TLSv1, TLSv1.1, MD5withRSA from the following key:

key - jdk.tls.disabledAlgorithms

3. Remove MD5 from the following key:

key - jdk.certpath.disabledAlgorithms

9. Start the servers:

Weblogic:

./startWeblogic.sh

Start Policy and OAM Managed Servers:

Access OAM Admin console:

The OAM 12c is ready to use ☺