How to Implement Oracle CPUs for EBS

Size: px

Start display at page:

Download "How to Implement Oracle CPUs for EBS"

Alexandra Britney Nash
5 years ago
Views:

1 How to Implement Oracle CPUs for EBS Eng. Cristian Peque Oracle Security Specialist

2 Program Agenda Understanding what an Oracle CPU is What we need to do after Oracle launches a CPU How to install all the CPUs that we need 2

3 What is an Oracle CPU?

4 What is a CPU? Definition: CPU: Critical Patch Update Advisories Collections of security fixes for Oracle products Normally confused with: PSU: Patch Set Update Proactive cumulative patches containing recommended bug fixes that are released on a regular and predictable schedule. 4

5 When are CPUs released? January April July October 5

6 What do we need to do after Oracle launches a CPU?

7 View the Oracle Page 7

8 What is included in the CPUs Normally the list of the patches in this note is as follows: E-Business Suite Release CPU Database OJVM PSU : WebLogic Server Oracle Fusion Middleware Fusion Middleware Web Tier Home Fusion Middleware Oracle Common Home Necessary, but required third-party implementations (won t be addressed in this webcast): Oracle Java (Including Java SE (JRE) Plug-in) Oracle Java (Java Web Start) Oracle Application Management Pack for Oracle E-Business Suite Oracle Access Manager 8

9 Before Installing the CPUs Review the actual environment and know the version of your EBS. Download all patches (Remember to install them in order DEV, TEST and PROD) Close cycle in adop (for EBS 12.2) Update and run the ETCC tool for Database and Application 9

10 HOW TO INSTALL THE APRIL 2018 CPU: STEP-BY-STEP INSTRUCTIONS

11 Installation Guide Index 1. Run and show output of ETCC in DB and AS 2. Install CPU of EBS 3. Install DB CPU 4. Install OJVM CPU for DB and all required patches from ETCC 5. Install WL CPU 6. Install FMW Oracle Common Install Middleware

1. Run ETCC Patch 17537119: EBS Technology Codelevel Checker DB APP checkdbpatch.

12 1. Run ETCC Patch : EBS Technology Codelevel Checker DB APP checkdbpatch.sh -> Check all patches required for the Database in EBS checkmtpatch.sh -> Check all patches required for the Middleware, WL and EBS Location: $ORACLE_HOME/appsutil/etcc Location: /u01/oracle/ebs1227/etcc 12

13 1. Run ETCC on DB $ set DB environment $ cd $ORACLE_HOME/appsutil/etcc $ sh checkdbpatch.sh 13

14 1. Run ETCC on DB Example output when you need to install patches: 14

15 1. Run ETCC on AS $ set AS environment $ cd /u01/oracle/ebs1227/etcc $ sh checkmtpatch.sh 15

16 1. Run ETCC on AS OUTPUT EXAMPLE: 16

2. Install EBS CPU (First step) [applmgr@]$ adop -status Enter the APPS password: <*******> Connected. ============================================================== ADOP (C.Delta.

out =============================================================== Node Name Node Type Phase Status Started Finished Elapsed --------------- ---------- --------------- ---------------

2018/06/07 11:49:26 165:10:00 FINALIZE SESSION ABORTED 2018/08/28 14:15:17 2018/08/28 15:07:41 0:52:24 CUTOVER SESSION ABORTED CLEANUP COMPLETED 2018/08/28 17:29:05 2018/08/28 17:44:41

17 2. Install EBS CPU (First step) adop -status Enter the APPS password: <*******> Connected. ============================================================== ADOP (C.Delta.10) Session Id: 7 Command: status Output: /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/7/ _124614/adzdshowstatus.out =============================================================== Node Name Node Type Phase Status Started Finished Elapsed hostname master PREPARE SESSION ABORTED 2018/05/31 13:43: /05/31 14:17:36 0:34:27 APPLY SESSION ABORTED 2018/05/31 14:38: /06/07 11:49:26 165:10:00 FINALIZE SESSION ABORTED 2018/08/28 14:15: /08/28 15:07:41 0:52:24 CUTOVER SESSION ABORTED CLEANUP COMPLETED 2018/08/28 17:29: /08/28 17:44:41 0:15:36 File System Synchronization Type: Full INFORMATION: Patching cycle aborted, so fs_clone will run automatically on laborasrv1034 node in prepare phase of next patching cycle. $ adop -status For Close: $ adop phase=finalize,abort, cleanup adop exiting with status = 0 (Success) 17

18 2. Install EBS CPU adop phase=prepare Detecting configuration changes. Submitting ADZDPATCH concurrent program. Enter Log: the /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/hostname/adconfigchanges.log APPS password: Beginning Waiting application The Enter log for file conflicting the tier SYSTEM is FSCloneApply /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/hostname/adconfigchanges.log requests password: - Tue to complete. Sep 4 16:07: Synchronizing adzdpatch snapshots. concurrent program now running. Configuration Enter the WLSADMIN change detected. password: /u01/oracle/ebs1227/fs1/ebsapps/comn/adopclone_laborasrv1034/fmw/t2pjdk/bin/java File system configuration changes were detected. -Xmx600M -DCONTEXT_VALIDATED=false - Generating Saving database editions logs report. Doracle.installer.oui_loc=/oui from Validating credentials. -classpath previous session.... <long Output: command> /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/laborasrv1034/adzdshowed.out /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/hostname/adzdshowlog_cleanup.out Detecting Initializing. (this ad/txk process codelevel takes bumpup. a lot of time) Generating log report. ad/txk Run Edition codelevels context are bumped. : /u01/oracle/ebs1227/fs1/inst/apps/ebs1227_hostname/appl/admin/ebs1227_hostname.xml Creating Output: database /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/laborasrv1034/adzdshowlog.out Log file located Checking patch edition. Patch edition for CLONE context: record /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_hostname/appl/admin/ebs1227_hostname.xml existence for /u01/oracle/ebs1227/fs1/inst/apps/ebs1227_laborasrv1034/admin/log/clone/fscloneapplyappstier_ log Stopping Log: on patch CLONE Patch record file already "2018/09/04 file system. system free exist space: for 13:42:28" hostname GB <--- Check available space Stopping admin server. Target You Running System are running Checking steps Validating Fusion for adadminsrvctl.sh for Middleware CLONE. pending system setup. Home cleanup set version actions. to /u01/oracle/ebs1227/fs2/fmw_home Stopping Checking WLS Admin for pending Server... Target System Web No Node Oracle pending registry Home cleanup set cleanup is to actions valid. /u01/oracle/ebs1227/fs2/fmw_home/webtier actions. found. Target Refer System No /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034/logs/appl/admin/log/adadminsrvctl.txt pending Appl TOP cleanup set to actions /u01/oracle/ebs1227/fs2/ebsapps/appl found. for details AdminServer Blocking logs managed are located server ports. at Target System Validating Checking COMMON TOP database for set existing to /u01/oracle/ebs1227/fs2/ebsapps/comn ready adop to sessions. prepare. Target /u01/oracle/ebs1227/fs2/fmw_home/user_projects/domains/ebs_domain_ebs1227/servers/adminserver/logs System Log: Instance /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/hostname/txkcloneacquireport.log No pending Top set session to /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034 exists. <--- Check Report file Performing Generating located CLONE Starting at report /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034/temp/portpool.lst steps. new for adop key session. tablespaces. <--- Check adadminsrvctl.sh: Log: /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/hostname exiting with status 0 The new APPL_TOP context file has been created : /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034/appl/admin/ebs1227_laborasrv1034.xml adadminsrvctl.sh: check the logfile =========================================================================== Output: /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/hostname/adzdshowts.out /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034/logs/appl/admin/log/adadminsrvctl.txt Beginning application tier FSCloneStage - Tue Sep 4 13:48: for more information... contextfile=/u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034/appl/admin/ebs1227_laborasrv1034.xml ADOP (C.Delta.10) /u01/oracle/ebs1227/fs1/ebsapps/comn/util/jdk32/bin/java Starting Session Apps ID: listener. -Xmx600M -DCONTEXT_VALIDATED=false -Doracle.installer.oui_loc=/oui 8 <--- Look the new session ID -classpath Stopping. node manager. Completed FSCloneApply... adalnctl.sh Node: hostname version Tue Sep You... are 4 <long 22:43:08 running command> (this process takes a lot of time) Phase: 2018 adnodemgrctl.sh version prepare The Releasing Completed Node Manager Checking FSCloneStage... is already shutdown Log: managed /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _125810/adop.log for server FNDFS ports. executable. NodeManager Log: Tue /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/laborasrv1034/txkcloneacquireport.log Sep 4 15:00:24 log is located 2018 at /u01/oracle/ebs1227/fs2/fmw_home/wlserver_10.3/common/nodemanager/nmhome1 Listener =========================================================================== APPS_EBS1227 has already been started. adnodemgrctl.sh: exiting with status 2 adnodemgrctl.sh: check the logfile Running AutoConfig adalnctl.sh: on patch Validating exiting edition configuration with file status system. on 2node: [hostname]. The log /u01/oracle/ebs1227/fs2/inst/apps/ebs1227_laborasrv1034/logs/appl/admin/log/adnodemgrctl.txt file for this session is located at: for more information... The prepare phase Log: completed /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _125810/prepare/validate/hostname successfully. /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _132839/prepare/laborasrv1034/adconfig.log adalnctl.sh: check the logfile /u01/oracle/ebs1227/fs1/inst/apps/ebs1227_hostname/logs/appl/admin/log/adalnctl.txt for more information... adop exiting with status = 0 (Success) AutoConfig is configuring the Applications environment Submitting ADZDPATCH concurrent program. Waiting for conflicting requests to complete

19 2. Install EBS CPU Start Prepare phase: $ adop phase=prepare The prepare phase completed successfully. adop exiting with status = 0 (Success) Log: /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/7/ _125458/adop.log Run Agrants.sql (from readme s CPU) a. Create folder $ORACLE_HOME/appsutil/admin on the database server. b. Copy the higher version of adgrants.sql to $ORACLE_HOME/appsutil/admin. c. Set the environment to point to $ORACLE_HOME on the database server. d. Use SQL*Plus to run the script: Commands: $ sqlplus /nolog apps 19

20 2. Install EBS CPU ~]$ adop -status Enter the APPS password: Connected. $ adop phase=apply patches= patchtop="/stage/cpu2018" ============================================================== ADOP log: (C.Delta.10) /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/7/ _143729/apply/hostname/ /log/u log Session Id: 8 Command: Applying status patch Output: Log: /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/8/ _150136/adzdshowstatus.out =============================================================== /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/7/ _143729/apply/hostname/ /log/u log Node Name Node Type Phase Status Started Finished Elapsed hostname Generating post master apply reports. PREPARE COMPLETED 2018/09/04 13:40: /09/04 23:19:28 9:39:28 Generating log report. APPLY NOT STARTED Output: /u01/oracle/ebs1227/fs_ne/ebsapps/log/adop/7/ _143729/apply/hostname/adzdshowlog.out FINALIZE NOT STARTED CUTOVER NOT STARTED The apply phase completed CLEANUP successfully. NOT STARTED adop exiting with status = 0 (Success) File System Synchronization Type: Full adop exiting with status = 0 (Success) Check the Logs and be secure that all finish Ok and with 0 status. 20

21 3. Install DB CPU cd $ORACLE_HOME/OPatch unzip p _<version>_<platform>.zip cd cd $ $ORACLE_HOME/OPatch/opatch prereq CheckConflictAgainstOHWithDetail -ph./ Oracle Interim Patch Installer version Copyright (c) 2018, Oracle Corporation. All rights reserved. PREREQ session Oracle Home : /u01/oracle/ebs1227/db/ Central Inventory : /u01/orainventory from : /u01/oracle/ebs1227/db/12.1.0/orainst.loc OPatch version : OUI version : Log file location : /u01/oracle/ebs1227/db/12.1.0/cfgtoollogs/opatch/opatch _ am_1.log Invoking prereq "checkconflictagainstohwithdetail" Prereq "checkconflictagainstohwithdetail" passed. OPatch succeeded. 21

22 3. Install DB CPU $ cd /CPU2018/DB/ / $ $ORACLE_HOME/OPatch/opatch apply Oracle Interim Patch Installer version Copyright (c) 2018, Oracle Corporation. All rights reserved. Oracle Home : /u01/oracle/ebs1227/db/ Central Inventory : /u01/orainventory from : /u01/oracle/ebs1227/db/12.1.0/orainst.loc Backing up files... OPatch version : Applying sub-patch OUI ' ' version to OH '/u01/oracle/ebs1227/db/12.1.0' : Log file location : /u01/oracle/ebs1227/db/12.1.0/cfgtoollogs/opatch/opatch _ am_1.log Patching component oracle.network.rsf, Patching component Verifying oracle.rdbms.rsf, environment and performing prerequisite checks... Patching component OPatch oracle.rdbms.rman, continues with these patches: Patching component oracle.rdbms, Patching component Do oracle.rdbms.dbscripts, you want to proceed? [y n] y Applying sub-patch User ' ' Responded to with: OH '/u01/oracle/ebs1227/db/12.1.0' Y ApplySession: Optional All checks component(s) passed. [ oracle.assistants.asm, ] not present in the Oracle Home or a higher version is Provide found. your address to be informed of security issues, install and initiate Oracle Configuration Manager. Easier for you if you use your My Patching component Oracle oracle.network.rsf, Support address/user Name. Patching component Visit oracle.assistants.server, for details. Patching component oracle.rdbms.rsf, address/user Name: Patching component oracle.rdbms.rman, Patching component You oracle.rdbms, have not provided an address for notification of security issues. Patching component Do oracle.rdbms.dbscripts, you wish to remain uninformed of security issues ([Y]es, [N]o) [N]: y Patching component oracle.sqlplus.rsf, Composite patch Please shutdown successfully Oracle applied. instances running out of this ORACLE_HOME on the local system. Log file location: (Oracle /u01/oracle/ebs1227/db/12.1.0/cfgtoollogs/opatch/opatch _ am_1.log Home = '/u01/oracle/ebs1227/db/12.1.0') OPatch succeeded. Is the local system ready for patching? [y n] y 22

23 3. Install DB CPU finish step Load Current Modified state SQL Files of SQL into patches: the Database Patch (): Installed in the binary registry and the SQL registry Patch (): SQL> Connect / as sysdba Not installed in the binary SQL> or the Startup SQL registry Patch (): SQL> quit Installed in the binary registry and the SQL registry Patch (): $ cd $ORACLE_HOME/OPatch Not installed in the binary $ or./datapatch the SQL registry -verbose Patch (): SQL Patching tool version Production on Mon May 28 10:54: Installed in the binary registry Copyright and the (c) SQL 2012, registry 2016, Oracle. All rights reserved. Patch (): Installed in the binary registry Log file and for the this SQL registry invocation: Patch (XTTS12102: DRG /u01/oracle/ebs1227/db/12.1.0/cfgtoollogs/sqlpatch/sqlpatch_27046_2018_05_28_10_54_26/sqlpatch_invocation.log AFTER MIGRATION FROM RDBMS TO ): Installed in the binary registry and the SQL registry Bundle series PSU: Connecting to database...ok ID in the binary registry Bootstrapping and ID registry in the and SQL package registry to current versions... Bootstrap timed out after 120 seconds Adding patches to installation Retrying queue and bootstrap performing after prereq retryable checks... errors...done Installation queue: Determining current state...done Nothing to roll back The following patches will be applied: (DATABASE PATCH SET UPDATE ) Installing patches... Patch installation complete. Total patches installed: 1 Validating logfiles... Patch apply: SUCCESS logfile: /u01/oracle/ebs1227/db/12.1.0/cfgtoollogs/sqlpatch/ / / _apply_ebs1227_2018may28_10_58_38.log (no errors) 23

3. Install DB CPU (verify the installed patch) [oracle@ ~]$ cd $ORACLE_HOME/OPatch [oracle@ OPatch]$ opatch lsinventory grep 27338041 27338041 27338041 SQL> select xmltransform(dbms_qopatch.

24 3. Install DB CPU (verify the installed patch) ~]$ cd $ORACLE_HOME/OPatch OPatch]$ opatch lsinventory grep SQL> select xmltransform(dbms_qopatch.is_patch_installed(' '), dbms_qopatch.get_opatch_xslt) "Patch installed?" Patch installed? Patch Information: Patch : applied on Fri Jun 01 11:23:05 EDT : applied Patch description: T11:23:05-04:00 "Database Patch Set Update : ( )" 24

25 3. Install OJVM CPU All the step are exactly the same as the previous patch Validate invalid objects in your database after finishing both installations (DB and OJVM) Re-run adgrant.sql and compile all invalid objects 25

26 4. Install Weblogic CPU Before starting: a. Shutdown EBS b. Go to $FMW_Home/utils/bsu c. Edit bsu.sh (for UNIX) or bsu.cmd (for Windows) d. Here you will find the following: MEM_ARGS="-Xms256m -Xmx512m" e. Increase these values as needed: for example, to "-Xms2048m -Xmx2048m" Check version of WL: $. /u01/oracle/ebs1227/fs1/fmw_home/wlserver_10.3/server/bin/setwlsenv.sh $ java weblogic.version WebLogic Server PSU Patch for BUG TUE SEP 12 18:34:42 IST 2017 WebLogic Server Temporary Patch for BUG Fri Dec 20 11:32:08 IST 2013 WebLogic Server Temporary Patch for BUG Sun Mar 01 17:22:18 IST 2015 WebLogic Server Temporary Patch for BUG Tue Sep 24 00:23:38 CDT 2013 WebLogic Server Temporary Patch for BUG Tue Sep 24 00:23:38 CDT 2013 WebLogic Server Temporary Patch for BUG Tue Sep 24 00:23:38 CDT 2013 WebLogic Server Temporary Patch for BUG Tue Sep 24 00:23:38 CDT 2013 WebLogic Server Temporary Patch for BUG Tue Sep 24 00:23:38 CDT 2013 WebLogic Server Temporary Patch for ${CRS} Mon Jul 30 16:45:20 EDT 2012 WebLogic Server Temporary Patch for ${CRS} Mon Jul 30 16:45:20 EDT 2012 WebLogic Server Temporary Patch for BUG Tue Mar 20 17:35:12 IST 2012 WebLogic Server Tue Nov 15 08:52:36 PST

27 4. Install Weblogic CPU Set Environment: export ORACLE_HOME=$FMW_HOME/webtier export WL_HOME=/d01/oracle/VIS/fs1/FMW_Home/wlserver_10.3 Install $cp /CPU2018/p _1036_Generic.zip $FMW_HOME/utils/bsu/cache_dir $cd $FMW_HOME/utils/bsu/cache_dir $unzip p _1036_generic.zip replace README.txt? [y]es, [n]o, [A]ll, [N]one, [r]ename: y inflating: README.txt inflating: GFWX.jar inflating: patch-catalog_25890.xml $mv patch-catalog_25890.xml patch-catalog.xml $cd $FMW_HOME/utils/bsu Remove previous patch to resolve conflict: Patch GFWX is mutually exclusive and cannot coexist with patch(es): FMJJ $./bsu.sh -prod_dir=$fmw_home/wlserver_10.3 -patchlist=fmjj -verbose -remove $./bsu.sh -prod_dir=$fmw_home/wlserver_10.3 -patchlist=gfwx -verbose -install 27

5. Install FMW Common 11.1.1.9 $ export ORACLE_HOME=$FMW_HOME/oracle_common $ cd /CPU2018/etcc-bundle/LINUX_X86-64/oracle_common/11.1.1.9.0/etcc 17428617 13544814 16089637 20141119 $ORACLE_HOME/OPatch/opatch napply $ cd /CPU2018/etcc-bundle/LINUX_X86-64/oracle_common/11.

28 5. Install FMW Common $ export ORACLE_HOME=$FMW_HOME/oracle_common $ cd /CPU2018/etcc-bundle/LINUX_X86-64/oracle_common/ /etcc $ORACLE_HOME/OPatch/opatch napply $ cd /CPU2018/etcc-bundle/LINUX_X86-64/oracle_common/ / /oui Please shutdown Oracle instances running out of this ORACLE_HOME on the local system. (Oracle Home = '/u01/oracle/ebs1227/fs1/fmw_home/oracle_common') $ORACLE_HOME/OPatch/opatch apply Please shutdown Oracle Is the instances local system running ready out for of patching? this ORACLE_HOME [y n] y on the local system. (Oracle Home = '/u01/oracle/ebs1227/fs1/fmw_home/oracle_common') User Responded with: Y Backing up files... Is the local system Applying ready interim for patching? patch ' ' [y n]y to OH '/u01/oracle/ebs1227/fs1/fmw_home/oracle_common' User Responded with: Patching Y component oracle.jrf.thirdparty.jee, Backing up files... Verifying the update... Applying interim patch ' ' to OH '/u01/oracle/ebs1227/fs1/fmw_home/oracle_common' Patching component Patching oracle.jrf.adfrt, component oracle.jrf.thirdparty.jee, Verifying the update... Verifying the update... Applying interim patch ' ' to OH '/u01/oracle/ebs1227/fs1/fmw_home/oracle_common' Patch successfully Patching component applied oracle.jrf.thirdparty.jee, Log file location: Verifying the update... /u01/oracle/ebs1227/fs1/fmw_home/oracle_common/cfgtoollogs/opatch/ _jun_03_2018_09_43_23/apply _09- Applying interim patch ' ' to OH '/u01/oracle/ebs1227/fs1/fmw_home/oracle_common' 43-22AM_1.log Patching component oracle.jrf.thirdparty.jee, Verifying the update... OPatch succeeded. Patches , , , successfully applied. Log file location: /u01/oracle/ebs1227/fs1/fmw_home/oracle_common/cfgtoollogs/opatch/opatch _ PM_1.log OPatch succeeded. 28

29 Q&A Thanks!!

30 Thanks!!

E-Business Suite 12.2 Configuration Management II

E-Business Suite 12.2 Configuration Management II Sumeet Kabra Agenda E-Business Suite 12.2 Applications Architecture [ Recap ] Techstack Configurations [ Recap ] Applications Configuration Management