id_ecert oracle,折腾oracle的em1

最近安装oracle，em总是不顺利，决定好好搞搞它。

首先发现10。2.0.4开始使用https了，关键是一个证书在2011年过期，基本只要打了10.2.0.4的补丁的数据库，em就会报错。不用管它。都安装完成后，在打一个补丁就可以了。这个补丁oracle提供了所有平台的一个版本。安装步骤参照网上现成的：

单机版步骤：

Recovering from Configuration Errors on a Single Instance Database

1. Ignore any errors and continue with the installation or upgrade. The database will be created without errors.

2. Apply Patch 8350262 to your Oracle Home installation using OPatch.

opatch apply

Invoking OPatch 10.2.0.4.2

Oracle Interim Patch Installer version 10.2.0.4.2

Copyright (c) 2007, Oracle Corporation. All rights reserved.

Oracle Home : /myhost

Central Inventory : /scratch/pchebrol/oraInventory

from : /etc/oraInst.loc

OPatch version : 10.2.0.4.2

OUI version : 10.2.0.4.0

OUI location : /myhost/oui

Log file location : /myhost/cfgtoollogs/opatch/opatch2011-01-02_11-00-00AM.log

ApplySession applying interim patch '8350262' to OH '/myhost'

Running prerequisite checks...

OPatch detected non-cluster Oracle Home from the inventory and will patch the local system only.

Backing up files and inventory (not for auto-rollback) for the Oracle Home

Backing up files affected by the patch '8350262' for restore. This might take a while...

Backing up files affected by the patch '8350262' for rollback. This might take a while...

Patching component oracle.sysman.agent.core, 10.2.0.4.0a...

Updating jar file "/myhost/sysman/jlib/emCORE.jar" with

"/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/fsc/FSWalletUtil.class"

Updating jar file "/myhost/sysman/jlib/emCORE.jar" with

"/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/rep/RepWalletUtil.class"

Updating jar file "/myhost/sysman/jlib/emCORE.jar" with

"/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/util/RootCert.class"

Updating jar file "/myhost/sysman/jlib/emCORE.jar" with

"/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/util/SecConstants.class"

Updating jar file "/myhost/sysman/jlib/emd_java.jar" with "/sysman/jlib/emd_

java.jar/oracle/sysman/eml/sec/fsc/FSWalletUtil.class"

Updating jar file "/myhost/sysman/jlib/emd_java.jar" with "/sysman/jlib/emd_

java.jar/oracle/sysman/eml/sec/rep/RepWalletUtil.class"

Updating jar file "/myhost/sysman/jlib/emd_java.jar" with "/sysman/jlib/emd_

java.jar/oracle/sysman/eml/sec/util/RootCert.class"

Updating jar file "/myhost/sysman/jlib/emd_java.jar" with "/sysman/jlib/emd_

java.jar/oracle/sysman/eml/sec/util/SecConstants.class"

ApplySession adding interim patch '8350262' to inventory

Verifying the update...

Inventory check OK: Patch ID 8350262 is registered in Oracle Home inventory with proper meta-data.

Files check OK: Files from Patch ID 8350262 are present in Oracle Home.

OPatch succeeded.

3. After applying the patch, force stop the Database Control (dbconsole) process using the killDBConsole script. bundled with the patch. Note that the dbconsole process cannot be stopped using the emctl stop dbconsole command, as EMCTL is unable to connect to the process.

To execute the killDBConsole script.:

Set the ORACLE_HOME and ORACLE_SID environment variables.

Execute /killDBConsole.

Note for Windows Platform. Only:

It is not necessary to force stop the dbconsole process on the Windows platform, because the process will

already be in a stopped state at the end of the failed configuration attempt.

The killDBConsole script. output is shown below:

$ /killDBConsole

ORACLE_HOME=/myhost/db_1

ORACLE_SID=caem31

State directory = /myhost/db_1/staxd10_caem31

WatchDog PID = 802932

DBconsole PID = 577716

EMAgent PID = 512156

Killing WatchDog (pid=802932) ...

Successfully killed process 802932

Killing DBConsole (pid=577716) ...

Successfully killed process 577716

Killing EMAgent (pid=512156) ...

Successfully killed process 512156

4. Re-secure Database Control with the following command:

/bin/emctl secure dbconsole -reset

You will be prompted twice to confirm that the Root key must be overwritten. In both cases, enter upper-case "Y" as the response. Any other response (including lower-case "y") will cause the command to terminate without completing. If this happens, the command can be re-invoked.

$ ./emctl secure dbconsole -reset

Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0

Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.

Enter Enterprise Manager Root Password :

DBCONSOLE already stopped... Done.

Agent is already stopped... Done.

Securing dbconsole... Started.

Checking Repository... Done.

Checking Em Key... Done.

Checking Repository for an existing Enterprise Manager Root Key...

WARNING! An Enterprise Manager Root Key already exists in

the Repository. This operation will replace your Enterprise

Manager Root Key.

All existing Agents that use HTTPS will need to be

reconfigured if you proceed. Do you wish to continue and

overwrite your Root Key

(Y/N) ?

Y

Are you sure ? Reset of the Enterprise Manager Root Key

will mean that you will need to reconfigure each Agent

that is associated with this OMS before they will be

able to upload any data to it. Monitoring of Targets

associated with these Agents will be unavailable until

after they are reconfigured.

(Y/N) ?

Y

Generating Enterprise Manager Root Key (this takes a minute)... Done.Fetching Root Certificate from

the Repository... Done.

Updating HTTPS port in emoms.properties file... Done.

Generating Java Keystore... Done.

Securing OMS ... Done.

Generating Oracle Wallet Password for Agent.... Done.

Generating wallet for Agent ... Done.

Copying the wallet for agent use... Done.

Storing agent key in repository... Done.

Storing agent key for agent ... Done.

Configuring Agent...

Configuring Agent for HTTPS in DBCONSOLE mode... Done.

EMD_URL set in /myhost/myhost/sysman/config/emd.properties

Done.

Configuring Key store.. Done.

Securing dbconsole... Sucessful.

5. Re-start Database Control with the following command:

/bin/emctl start dbconsole