Visualizza wikitesto di Disabilitare HTTPS su GRID 12 e 13


How to Unsecure the Enterprise Manager Cloud Control 12c Environment (Doc ID 1535886.1)




Click to remove from Favorites		How to Unsecure the Enterprise Manager Cloud Control 12c Environment (Doc ID 1535886.1)	To BottomTo Bottom	

In this Document
Goal
Solution

APPLIES TO:

Enterprise Manager Base Platform - Version 12.1.0.1.0 and later
Information in this document applies to any platform.
GOAL

How to unsecure Enterprise Manager Cloud Control 12c environment?

By default the 12c OMS is secured so that only the https console port can be used to access the 12c Cloud Control Console and only the https upload port used by Agents to communicate to OMS. Check the below

<OMS_HOME>/bin/emctl status oms -details
Oracle Enterprise Manager Cloud Control 12c Release 2
Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host        : Evildead.idc.oracle.com
HTTP Console Port          : 7777
HTTPS Console Port         : 7799
HTTP Upload Port           : 4889
HTTPS Upload Port          : 4899
EM Instance Home           : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1/sysman/log
OMS is not configured with SLB or virtual hostname
Agent Upload is locked. -----> Agent upload is locked
OMS Console is locked.  -----> Console is locked

 

Note:
By default the Agent upload communication and the Console access are locked; when you access the Console URL using http console port or the Upload URL using http upload port, the following message will be seen:
403 Forbidden
You are not authorized to access the requested resource.

 

This articles shows 

+ How to unsecure only Cloud Control console, so that the http console port can also be used to access the 12c Cloud Control console.

+ How to unsecure only Agent upload communication, so that http upload port can also be used by agents to communicate to OMS.

+ How to unsecure both Cloud Control console and Agent upload communication, so that the http console port can also be used to access the 12c Cloud Control console and http upload port can also be used by agents to communicate to OMS.

For a detailed description on the unsecure commands, read the following documentation:

Enterprise Manager Cloud Control Administrator's Guide
22 Administering Enterprise Manager Using EMCTL Commands
22.10 EMCTL Security Commands

 

SOLUTION

A.) To unsecure only Cloud Control console access, follow the below
+ Unlock the OMS, using the below 
<OMS_HOME>/bin/emctl secure unlock -console

+ Bounce the OMS, using the below
<OMS_HOME>/bin/emctl stop oms -all
<OMS_HOME>/bin/emctl start oms

+ Check the status of the OMS, using the below
<OMS_HOME>/bin/emctl status oms -details
Oracle Enterprise Manager Cloud Control 12c Release 2
Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host        : Evildead.idc.oracle.com
HTTP Console Port          : 7777
HTTPS Console Port         : 7799
HTTP Upload Port           : 4889
HTTPS Upload Port          : 4899
EM Instance Home           : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1/sysman/log
OMS is not configured with SLB or virtual hostname
Agent Upload is locked.     -----> Agent Upload is locked
OMS Console is unlocked.   -----> Console is unlocked

B.) To unsecure only Agent upload communication, follow the below
+ Unlock the OMS, using the below 
<OMS_HOME>/bin/emctl secure unlock -upload

+ Bounce the OMS, using the below
<OMS_HOME>/bin/emctl stop oms -all
<OMS_HOME>/bin/emctl start oms

+ Check the status of the OMS, using the below
<OMS_HOME>/bin/emctl status oms -details
Oracle Enterprise Manager Cloud Control 12c Release 2
Copyright (c) 1996, 2012 Oracle Corporation.  All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host        : Evildead.idc.oracle.com
HTTP Console Port          : 7777
HTTPS Console Port         : 7799
HTTP Upload Port           : 4889
HTTPS Upload Port          : 4899
EM Instance Home           : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1/sysman/log
OMS is not configured with SLB or virtual hostname
Agent Upload is unlocked.     -----> Agent Upload is unlocked
OMS Console is locked.   -----> Console is locked