Wednesday, October 12, 2022

Upgrade/patch JDK 8 used by Oracle Enterprise Manager 13.5 OMS and Agent

This document is for upgrading JDK used by Enterprise Manager (EM) 13.5 in both OMS and Agent home on Linux, Solaris and Windows. 

By default, JDK 8 version 1.8.0_261 is shipped with EM 13.5, and can be upgraded to certified higher version of JDK 8 (e.g. 1.8.0_341)
Important notes:
1. Only certified version can be used by EM. Therefore, latest version may not be applicable. Never upgrade JDK to the version other than JDK 8 (e.g. JDK 9).
2. Different versions of JDK have different requirements of patch level in OMS and Agent home. Make sure all required patches are applied before JDK is upgraded.
3. Before Upgrading the JDK on Agents, Ensure that OMS's JDK has been Upgraded already
4. Starting from JDK 1.8 update 291, TLS 1.0 and TLS 1.1 are disabled and not supported. If any targets, LDAP or Load Balancer are still using TLS 1.0 or TLS 1.1, the communication will fail. They have to be configured with TLS 1.2 before upgrading to this JDK update.
5. If EM repository database is configured with TLS 1.2 for secure communication [Check for SSL_VERSION=1.2 in sqlnet.ora file] , then after the JDK is upgraded on OMS, re-import the repository database certificate into the Oracle Management Service JDK TrustStore as following
* Backup keystore "$ORACLE_HOME/oracle_common/jdk/jre/lib/security/cacerts"
* Import repository database certificate with command
  $ORACLE_HOME/oracle_common/jdk/bin/keytool -importcert -file trustCert.pem -alias emreprootca -keystore $ORACLE_HOME/oracle_common/jdk/jre/lib/security/cacerts -storepass changeit
Pre-requisites for JDK 1.8 Update 341 (1.8.0_341) in OMS home
1. Upgrade Opatch to version 13.9.4.2.10
2. Rollback Patch 32880070 if it is already applied on OMS home
3. Apply following patches on OMS home, all the patches are mandatory
   Patch 34003602 : EM 13.5 RU 07 or later
   Patch 34236279 WLS PATCH SET UPDATE 12.2.1.4.220602  [WLS - WebLogic Server]
   Patch 34341032 OWSM BUNDLE PATCH 12.2.1.4.220701 [OWSM - ORACLE WEB SERVICES MANAGER]
   Patch 34248976 Coherence 12.2.1.4 Cumulative Patch 14 (12.2.1.4.14)
   Patch 33639718 ADR FOR WEBLOGIC SERVER 12.2.1.4.0 CPU JUL 2022
   Patch 33093748 FMW PLATFORM 12.2.1.4.0 SPU FOR APRCPU2021
   Patch 34257860 OHS (NATIVE) BUNDLE PATCH 12.2.1.4.220608  [OHS - Oracle HTTP Server]
   Patch 33950717 OPSS BUNDLE PATCH 12.2.1.4.220311  [OPSS - Oracle Platform Security Services]
   Patch 33877829 OSS BUNDLE PATCH 12.2.1.4.220219  [OSS - Oracle Security Service]
   Patch 34247006 ADF BUNDLE PATCH 12.2.1.4.220606
   Patch 34287807 FMW Thirdparty Bundle Patch 12.2.1.4.220616
   Patch 33903365 OAM CONSOLE LOGIN FAILS AFTER APPLYING 1.80.331 JDK ( APRIL JAVA CPU )
   Patch 32720458 Fix for JDBC Bug
   Patch 34237409 WEBCENTER CORE BUNDLE PATCH 12.2.1.4.220601
Pre-requisites for JDK 1.8 Update 341 (1.8.0_341) in Agent home
1. Before Upgrading the JDK on Agents, Ensure that OMS's JDK has been Updated already.
2. Patch 34129921 : RU 07 or later is applied on Agent home
1. Check OPatch version with command

$ORACLE_HOME/OPatch/opatch version

For example,
$ $ORACLE_HOME/OPatch/opatch version
OPatch Version: 13.9.4.2.10
OPatch succeeded.
2. List/check patches applied on OMS/Agent home by running command

$ORACLE_HOME/OPatch/opatch lspatches

For example,
$ $ORACLE_HOME/OPatch/opatch lspatches
34237409;WebCenter Core Bundle Patch 12.2.1.4.220601
33903365;One-off
34287807;FMW Thirdparty Bundle Patch 12.2.1.4.220616
34247006;ADF BUNDLE PATCH 12.2.1.4.220606
33877829;OSS BUNDLE PATCH 12.2.1.4.220219
33950717;OPSS Bundle Patch 12.2.1.4.220311
34257860;OHS (NATIVE) BUNDLE PATCH 12.2.1.4.220608
34341032;OWSM BUNDLE PATCH 12.2.1.4.220701
34126771;Oracle Enterprise Manager for Siebel 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126767;Oracle Enterprise Manager for Cloud Framework 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126761;Oracle Enterprise Manager for Systems Infrastructure 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126751;Oracle Enterprise Manager for Cloud 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126747;Oracle Enterprise Manager for Exadata 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126738;Oracle Enterprise Manager for Chargeback and Capacity Planning 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126726;Oracle Enterprise Manager for Zero Data Loss Recovery Appliance 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126720;Oracle Enterprise Manager for Fusion Applications 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126716;Oracle Enterprise Manager for Oracle Database 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126711;Oracle Enterprise Manager for Fusion Middleware 13c Release 5 Plug-in Update 8 (13.5.1.8) for Oracle Management Service
34126708;Oracle Enterprise Manager 13c Release 5 Platform Update 8 (13.5.0.8) for Oracle Management Service
34373589;WLS STACK PATCH BUNDLE 12.2.1.4.220711 (Patch 34373563)
34236279;WLS PATCH SET UPDATE 12.2.1.4.220602
34212770;RDA release 22.3-20220719 for OFM 12.2.1.4 SPB
33639718;33639718 - ADR FOR WEBLOGIC SERVER 12.2.1.4.0 JUL CPU 2022
1221414;Bundle patch for Oracle Coherence Version 12.2.1.4.14
33093748;One-off
32720458;JDBC 19.3.0.0 FOR CPUJAN2022 (WLS 12.2.1.4, WLS 14.1.1)
34003672;Oracle Enterprise Manager for Virtualization 13c Release 5 Plug-in Update 7 (13.5.1.7) for Oracle Management Service
33873406;Oracle Enterprise Manager for Oracle Virtual Infrastructure 13c Release 5 Plug-in Update 6 (13.5.1.6) for Oracle Management Service
33873314;Oracle Enterprise Manager for Big Data Appliance 13c Release 5 Plug-in Update 6 (13.5.1.6) for Oracle Management Service
33424187;Oracle Enterprise Manager for Storage Management 13c Release 5 Plug-in Update 3 (13.5.1.3) for Oracle Management Service
30152128;One-off
26626168;One-off

OPatch succeeded.
3. Download required/wanted version of JDK 8 Update

The patch number of correct JDK update and its download URL can be found from My Oracle Support (MOS) document Supported Java SE Downloads on MOS (Doc ID 1439822.1)

For example, Patch 34170400 is Oracle JDK 8 Update 341. Following the URL, following file will be downloaded,

  p34170400_180341_Linux-x86-64.zip - For Linux x86-64
  p34170400_180341_MSWIN-x86-64.zip - For Windows x64
  p34170400_180341_SOLARIS64.zip    - For Solaris SPARC 64-bit

4. Upgrade JDK in OMS and Agent home

Note: $ORACLE_HOME refers to OMS or Agent home and <AGENT_INST_HOME> refers to Agent Instance home. All patch operations are only applicable on $ORACLE_HOME. <AGENT_INST_HOME> is only used to stop/start agent.

* Stop OMS/Agent

  For OMS:  $ORACLE_HOME/bin/emctl stop oms -all
  For Agent: <AGENT_INST_HOME>/bin/emctl stop agent

* Rename JDK directory $ORACLE_HOME/oracle_common/jdk 

  mv $ORACLE_HOME/oracle_common/jdk $ORACLE_HOME/oracle_common/jdk_bak

* Extract files from downloaded zip file to JDK directory $ORACLE_HOME/oracle_common/jdk

The extraction method may be different for different version of JDK Update on different platform. Following example is for JDK 8 Update 341 (1.8.0_341).

Unzip the downloaded zip file

  On Linux:   unzip p34170400_180341_Linux-x86-64.zip
  On Solaris: unzip p34170400_180341_SOLARIS64.zip
  On Windows: unzip p34170400_180341_MSWIN-x86-64.zip

It will create compressed/archive file

  On Linux:   jdk-8u341-linux-x64.tar.gz
  On Solaris: jdk-8u341-solaris-sparcv9.tar.gz
  On Windows: jdk-8u341-windows-x64.exe

Extract the file

  On Linux:
    cd $ORACLE_HOME/oracle_common
    tar xf jdk-8u341-linux-x64.tar.gz  - Directory jdk1.8.0_341 will be created
    mv jdk1.8.0_341 jdk

  On Solaris:
    cd $ORACLE_HOME/oracle_common
    tar xf jdk-8u341-solaris-sparcv9.tar.gz  - Directory jdk1.8.0_341 will be created
    mv jdk1.8.0_341 jdk

  On Windows:
     Launch file jdk-8u341-windows-x64.exe, enter the folder name as <ORACLE_HOME>/oracle_common/jdk/ and complete the JDK installation.

* Confirm the version of the JDK by running

  $ORACLE_HOME/oracle_common/jdk/bin/java -version

* Start OMS/Agent

  For OMS:  $ORACLE_HOME/bin/emctl start oms
  For Agent: <AGENT_INST_HOME>/bin/emctl start agent

No comments: