Oracle Database Lifecycle Management

Agenda Key Challenges and Solutions Oracle Database Lifecycle Management Capabilities Customer Case Studies Best Practices and Conclusion 2

Key Challenges and Solutions Configuration Pollution Unmanaged asset sprawl 28% have an annual database instance growth of more than 20% Less than 50% have consolidated Consolidation Too many versions, patch levels and sizes 1400 variants across 3 major releases for a large telecom customer Slow time to delivery Days to Weeks to provision database services for key projects Weeks to clone a complete middleware stack, such as SOA Standardization Automation *IOUG Survey, 2013

EM Database Lifecycle Management can.. Aid Consolidation Track assets across data centers and automatically migrate instances to container databases Enforce Standardization Detect configuration pollution and help build a fleet of database services front-ended by a Service Catalog Manage Drift and Compliance Deploy Automation Automate time-consuming and error prone operations like provisioning, patching, upgrade

Complete Lifecycle Management Automatic Discovery Mass Provisioning/Cloning Patch Management Upgrades Change Activity Planner Schema Changes Inventory Tracking Configuration Drift Mgmt Topology Visualization Enterprise Data Governance Compliance Reporting

Databases Cloning using Oracle Enterprise Manager 12c Provisioning Database Provisioning Mass Deployment of Oracle Software (Database, Real Application Clusters) Supports all versions up to 12.1 including Pluggable Databases Gold Image cloning and standardized software deployment via Profiles Lock down access for controlled and error free deployments Save Gold image (and optionally data) from source systems to EM software library Deploy saved Image and data to target systems with customizations Software Library Storage Source DB systems Target DB Systems 7

Multitenant Database Provisioning Oracle Enterprise Manager Enables Fast, Flexible Copy and Snapshot of Pluggable Databases Create CDBs with multiple PDBs Unplug and plug full data and application Useful for Upgrade Testing Functional Testing Agile development Storage efficient snapshots within a container database

Cloning Options Oracle Database Lifecycle Management Pack Full Clones Snap (Thin) Clones Database Native [Storage Agnostic] RMAN Restore RMAN Duplicate Cloud Management Pack for Oracle Database Software Solution [Vendor Agnostic] Data Pump Leverage your existing investments Cater to both functional and stress testing needs Maximize for best performance ACFS Hardware Solution [Vendor Specific] NAS Use Snap Clone whenever you need >1 clones! SAN

Oracle Enterprise Manager 12c Manage assets deployed on Oracle Cloud PaaS just like on-premises assets Onboard new cloud services and clone workloads from a single solution No significant change in customer s Single Pane of Glass for managing services on-premises and on Oracle Cloud infrastructure or operational practices

Lift n Shift Databases across clouds Clone Database to Cloud Pricing Pricing Cloud Retail On-Premises Container Database Pricing (Dev1) Pricing (Dev2) Cloud-Based Container Database Customer Datacenter ORACLE Cloud 11

Lift n Shift Databases across clouds Clone Database from Cloud Pricing Retail CRM On-Premises Container Database CRM HR Hiring Cloud-Based Container Database ORACLE Cloud Customer Datacenter 12

Typical Database Patch Management Process Complex Manual Error Prone Time consuming Based on a large customer s experience with 1000+ databases)

EM12c Patch Management Solution End to End Patch Automation Solution for Oracle Databases Patches, Upgrades complete Database product family including Data Guard, DBs on ODA and Exadata Provides proactive Oracle recommendations (CPU/SPUs, PSUs, OJVM..) Simplified patching flow using Patch Plans Comprehensive pre-flight checks and conflict resolution Support Out of Place, Rolling options for reduced/zero downtime and rollback/switch back Mass automation - multiple targets with multiple patches in a single downtime Extensible framework, Patch Reports and EMCLI scripting option Oracle Confidential 15

Out-of-Place Patching Minimum Downtime Database remains available while patch applied to cloned home. Rapid Recovery Switchback to original Oracle Home in case of issue Complete Support Single Instance RAC Clusters Includes Data Guard configurations

Mass Automated Database Upgrades Automation in Scale Upgrade Standalone, RAC, and Data guard (Primary-Standby) Databases from older versions to higher versions (supports DB12c) RAC Database Upgrades: Full stack upgrade covering Grid Infrastructure and RAC DBs Flexibly upgrade to suit the operational and testing needs (GI only, Few RAC DBs or All RAC DBs) Minimize downtime by upgrading software and Database separately Comprehensive pre-requisite checks including RAC checks, cluster verify (CVU) checks, can be updated directly from MOS Oracle Data Guard Integrated back up and restore policies Rolling Upgrade using Transient logical standby for Data Guard based Primary and Standby Databases Support upgrading multiple standby environments

Database Lifecycle Management EM12c Support Matrix Patching and Upgrade Automation DB Products Versions Patching Upgrades In place Out of Place Multi tenant DB (CDB+PDB) 12.1.0.1/2 Yes Yes Yes Standalone DB 10.2 and onwards Yes Yes Yes RAC DB with GI 10.2 and onwards Yes Yes Yes Restart (SIHA) 11.2 and onwards Yes Partial* Yes RAC One Node (RON) 11.2 and onwards Yes No No Data guard standby 10.2 and onwards Yes Yes Yes Databases on Exadata and Database Appliance (ODA) 11.2 and onwards Yes Yes Yes * Support will be available Q2 FY16

Schema and Data Comparison Baselines : Capture database and schema definitions Baseline Versioning History of changes Comparison Baseline with database Database with database Schema with schema Data Comparison Automated Propagation Propagate desired changes Change Plans

Asset Tracking Inventory Reporting and Trending Display distribution of: Operating Systems Databases Middleware Fusion Applications Population Trend Configuration Details Trend report Growth of assets Indicates possible sprawl Supporting upgrade and migrations Version Distribution

Configuration Drift Management Finding the Needle in the Hay Stack 1-1 and 1-n comparison across Dev, test, Prod, DR environments Comparison of entire stack, e.g.: Exadata database machine (database, grid infrastructure, compute node, storage) Comparison Templates to control what s compared and how Automatic drift detection and notification

Data Governance and Compliance Challenges Data centers have thousands of databases containing sensitive data which may be unprotected Protected Application 3 Protected Application 2 Unprotected Application 1 Enterprises lack enterprise-wide tools to scan databases Limited visibility into compliance status (encryption, masking, database vault) of sensitive data Hard to remediate non-compliance 23

Enterprise Data Governance Meta-Data Discovery Sensitive Databases TEST Scan Results App Data Model Sensitive Columns DEV User Review Data Discovery Oracle Enterprise Manager Repository Automatically discover, scan and ID sensitive data across the enterprise Shallow Scan: Meta data discovery Deep Scan: Sensitive data discovery QA PROD

Enterprise Data Governance Configure, Discover, Classify Protect Data Masking Configure Discover Classify Redaction Encryption Sensitive type Application signature Out of the box data protection Metadata Discovery Data Discovery Classify sensitive column types, data protection & application signatures Associate an application data model

Oracle Enterprise Manager Compliance Framework Overview Continuous Configuration Auditing Real-Time File Integrity Monitoring Cloud Scale Ready to use Standards 26

Compliance Framework Reusable Hierarchy Gauges - Current and Lowest in Last Week Target and Violations Details per Standard Newly Discovered Unmanaged hosts may be risk Least Compliant Target shows where to start

Oracle Provided DB Compliance Content Cluster Database Compliance Standards Pluggable Database ( NEW ) Storage Best Practices for Pluggable Database Configuration Best Practices for Pluggable Database Basic Security Configuration for Pluggable Database Single Instance Database Instance ( and RAC Instance ) DISA Security Technical Implementation Guide (STIG) V1.8 Certification for Oracle Database Storage Best Practices for Oracle Database Configuration Best Practices for Oracle Database Basic Security Configuration for Oracle Database High Security Configuration for Oracle Database Patchable Configuration for Oracle Database Storage Best Practices for Oracle Database Support Policy for Oracle Database DISA Security Technical Implementation Guide (STIG) V1.8 Basic Security Configuration for Oracle Cluster Database Instance High Security Configuration for Oracle Cluster Database Instance Certification for RAC Database Configuration Best Practices for Oracle RAC Database Patchable Configuration for RAC Database Storage Best Practices for Oracle RAC Database Support Policy for RAC Database Listener Basic Security Configuration for Oracle Listener High Security Configuration for Oracle Listener 500+ Individual Compliance Rules

Database Lifecycle Management How Do All These Come Together Real-Time Monitoring Who/When Compliance Score Best Practices Oracle Recommendations Regulatory (STIG) Report Inventory &Trend Automatic Change Reconciliation Authorized vs Unauthorized Patch/Upgrade database and GI Mass deployment/provisioning Cloning/migration of binaries and database (incl pluggable) Schema Synchronization Settings, Drift & Policy Actions Configuration Changes Patch Advisories via MOS Audit Advise Discovery & Collection Act Analyze Upgrade Advisories from MOS Configuration Policy Violations Topology guided Impact Analysis Config Comparison for Drift Analysis To Gold & Baseline 1 to 1, 1 to N Target and System DB Change Management Data Comparison Data Governance Patch Plans: Conflict & PreReq Analysis

Case Study FOCUS ON Largest drug retailing chain in the United States. Operates 8,300 stores in all 50 US states, the District of Columbia, Puerto Rico, and Guam DBLM Business Drivers Standardization of Oracle Database on ODA and other hardware via Provisioning 400:1 DBA ratio hard to achieve with existing processes PCI mandates current patch levels within 120 days BENEFITS Monitoring, Provisioning, Patch Management, Security and Compliance Solution Database Provisioning using gold images Cloning using EM and RMAN Complete Patch Automation Enterprise Manager for PCI Compliance 90% improvement in database deployment time 60% increase in infrastructure utilization Reduced errors with trusted repeatability

Case Study FOCUS ON $11.5 Billion in Net License Revenue 66,000 Employees 2,004 Managed Targets Monitoring, Provisioning, Patch Management, Security and Compliance Challenge: Solution: Mandatory corporate and industry regulations meant strict auditing requirements Provisioning and Patching was manual and resource intensive Needed to patch 1,200 production and non-production databases every quarter Leverage the comprehensive integration between My Oracle Support and Enterprise Manager for end-to-end patch automation and provisioning Increased admin productivity by removing manual error-prone tasks Adherence to security and compliance requirements BENEFITS Cut total DBA efforts from 3,600 hours down to 540 hours per year Using EM, Cisco lowered their downtime for maintenance by 50% Reduced human error and incidents during patching and upgrades Systems are now highly scalable and automated Saved over $200K per year in IT operational costs with provisioning and patching automation

Nationwide deploys databases 600% faster using Oracle Enterprise Manager Heath Carfrey, Manager Database Infrastructure, Nationwide Nationwide Testimonial Video (2:14) Oracle Confidential 32

Best Practices to Maximum ROI Standardize on Database Configurations Naming Conventions, Paths, OS Users/Groups, DB Options, Patch level, Hardware, OS, etc Gold Image Provisioning with minimal customization options Leverage use of different Roles and Responsibilities Designers to defining standards, Operations team roll out deployment and changes Maximize use of Automation Guarantee consistency and avoids human error Regular and Controlled roll out of change with verification and reporting Patches, Configuration, Objects, Data Minimize Downtime with advanced techniques Analyze, Rolling Patching, Out of Place Patching Proactive enforcement of Standards Compliance

Benefits of Lifecycle Management Complements Exadata Value Proposition Consolidation Automated Discovery Asset and inventory tracking Complete visualization of stack topology Standardization and Compliance Ongoing Drift tracking across the stack Exadata specific Compliance evaluation Efficiency & Automation Ongoing Database Provisioning Patch Automation

Benefits of Lifecycle Management Maximizes Benefits of Multitenant Databases Consolidation Automated Discovery Migration from non-pdb to PDB Complete visualization of CDB-PDB relationships Standardization and Compliance Managing PDB sprawl Ongoing Compliance evaluation for CDB and PDBs Efficiency & Automation Ongoing Database Provisioning and Cloning Patch Automation

Database Lifecycle Management Benefits Standardization Consolidation Track assets across data centers and integrating with Consolidation Workbench for migrating the instances Admin Detect configuration pollution and help build a fleet of database services front-ended by a Service Catalog Manage Drift and Compliance End Users Automation at Scale Optimization Automate time-consuming and error prone operations like provisioning, cloning, patching, upgrade Leverage resource optimization techniques like storage snapshotting to save on CAPEX and OPEX wherever applicable Oracle Restricted 36

Database Lifecycle Management Simplified Database management across clouds Consolidate Standardize Automate Optimize 37

Resources Lifecycle Management on OTN http://tinyurl.com/em12lcm