Disabilitare HTTPS su GRID 12 e 13
How to Unsecure the Enterprise Manager Cloud Control 12c Environment (Doc ID 1535886.1)
Click to remove from Favorites How to Unsecure the Enterprise Manager Cloud Control 12c Environment (Doc ID 1535886.1) To BottomTo Bottom
In this Document Goal Solution
APPLIES TO:
Enterprise Manager Base Platform - Version 12.1.0.1.0 and later Information in this document applies to any platform. GOAL
How to unsecure Enterprise Manager Cloud Control 12c environment?
By default the 12c OMS is secured so that only the https console port can be used to access the 12c Cloud Control Console and only the https upload port used by Agents to communicate to OMS. Check the below
<OMS_HOME>/bin/emctl status oms -details Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : Console Server Host : Evildead.idc.oracle.com HTTP Console Port : 7777 HTTPS Console Port : 7799 HTTP Upload Port : 4889 HTTPS Upload Port : 4899 EM Instance Home : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1 OMS Log Directory Location : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1/sysman/log OMS is not configured with SLB or virtual hostname Agent Upload is locked. -----> Agent upload is locked OMS Console is locked. -----> Console is locked
Note: By default the Agent upload communication and the Console access are locked; when you access the Console URL using http console port or the Upload URL using http upload port, the following message will be seen: 403 Forbidden You are not authorized to access the requested resource.
This articles shows
+ How to unsecure only Cloud Control console, so that the http console port can also be used to access the 12c Cloud Control console.
+ How to unsecure only Agent upload communication, so that http upload port can also be used by agents to communicate to OMS.
+ How to unsecure both Cloud Control console and Agent upload communication, so that the http console port can also be used to access the 12c Cloud Control console and http upload port can also be used by agents to communicate to OMS.
For a detailed description on the unsecure commands, read the following documentation:
Enterprise Manager Cloud Control Administrator's Guide 22 Administering Enterprise Manager Using EMCTL Commands 22.10 EMCTL Security Commands
SOLUTION
A.) To unsecure only Cloud Control console access, follow the below + Unlock the OMS, using the below <OMS_HOME>/bin/emctl secure unlock -console
+ Bounce the OMS, using the below <OMS_HOME>/bin/emctl stop oms -all <OMS_HOME>/bin/emctl start oms
+ Check the status of the OMS, using the below <OMS_HOME>/bin/emctl status oms -details Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : Console Server Host : Evildead.idc.oracle.com HTTP Console Port : 7777 HTTPS Console Port : 7799 HTTP Upload Port : 4889 HTTPS Upload Port : 4899 EM Instance Home : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1 OMS Log Directory Location : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1/sysman/log OMS is not configured with SLB or virtual hostname Agent Upload is locked. -----> Agent Upload is locked OMS Console is unlocked. -----> Console is unlocked
B.) To unsecure only Agent upload communication, follow the below + Unlock the OMS, using the below <OMS_HOME>/bin/emctl secure unlock -upload
+ Bounce the OMS, using the below <OMS_HOME>/bin/emctl stop oms -all <OMS_HOME>/bin/emctl start oms
+ Check the status of the OMS, using the below <OMS_HOME>/bin/emctl status oms -details Oracle Enterprise Manager Cloud Control 12c Release 2 Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved. Enter Enterprise Manager Root (SYSMAN) Password : Console Server Host : Evildead.idc.oracle.com HTTP Console Port : 7777 HTTPS Console Port : 7799 HTTP Upload Port : 4889 HTTPS Upload Port : 4899 EM Instance Home : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1 OMS Log Directory Location : /DATA/MW12CPS1/gc_inst/em/EMGC_OMS1/sysman/log OMS is not configured with SLB or virtual hostname Agent Upload is unlocked. -----> Agent Upload is unlocked OMS Console is locked. -----> Console is locked
