1. EM 12c Cloud Control
Architecture

2. About Me… {Deepak Sharma}
ORACLE DBA for 4+ years.
Worked on technologies like
Oracle 11g Grid Control,
Oracle 12c Could Control,
Oracle Configuration Manager
PeopleSoft..
Oracle Certified Professional 9i.
Oracle Certified Professional 10g.
Active Speaker of
OEM 12c Cloud Control New Features

3. EM12c Series Topics… EM12c Cloud Control Architecture
Installation & Configuration
OMS & Repository Management
EM12c console, S/L, patching & provisioning
Best Practices of Monitoring
Plug-ins & Metrics Extensions
Creating & Managing Jobs in EM12c
Incident Management
Backup, Recovery & High Availability.

4. Introduction
EM12c Cloud Control is end-to-end management tool for both Oracle and non-Oracle technology.
Before this release it was known as Oracle Enterprise Manager or Oracle Enterprise Manager Grid Control.
EM12c has enhanced functionality from only being just Database Administrator’s Monitoring to Monitor Complete Data Center.

5. Features of EM Cloud Control
Enterprise Monitoring: Monitor Database, Middleware & Applications. Provide way of notifying you when issue arise, resolving them and reporting on them.
Framework & Infrastructure: provides security, scalability, rich user interface & self update.
Lifecycle Management: Automates processes like Discovery, Provisioning & Patching, Change Management & Configuration Management

6. Features of EM Cloud Control Cont..
Database Management: Patching, Upgrading, Provisioning, Performance Tuning, Data Masking, Subsetting, Configuration & Change management.
Middleware Management: Web logic Server, SOA Suite, Identity Management, Web center & Coherence. IBM’s WebSphere.
Application Management: Monitoring and Management for all Oracle-provided applications (EBS, PeopleSoft, Siebel, JD Edwards etc) and third-party applications.

7. Features of EM Cloud Control Cont..
Application Performance Management: End to End monitoring of applications including Real-user monitoring via RUEI (beacons)
Hardware & Virtualization Management: Monitor both physical & Virtual environment including provisioning, patching, configuration management etc. Manage system running on Linux, Unix, Windows, Oracle VM Server etc.

8. Architecture Overview
Cloud Control Console
Oracle management Agent
Oracle Management Service
Oracle Management Repository
Plug-in

9. Architecture Overview

10. Cloud Control Console
User interface to access, monitor and administer environment.
Access via Web Browser from any location
EM12c console can be customized:
Choose your Homepage
Move regions on target Homepage
Add regions
Delete regions
GUI provides history, pages can be marked as favorites.

11. Oracle Management Agent
Installed on each host that needs to be monitored.
Can be installed from Console or Command line.
Auto discovery of target on the host.
Can be used to Control Blackout, execute jobs collect metrics
EM12c agents are re-written to provide greater performance.
Only disadvantage - 12c Agent can only talk with 12c OMS.

12. Oracle Management Service
Web-based application
Communicate with agents & OMR to collect & store information respectively.
Installed into Middleware Home
Oracle WebLogic Server
Oracle Management Agent for middleware tier
OMS instance base directory
Java Development Kit
Other configuration files

13. Oracle Management Repository
Also known as OMR is Oracle Database.
Stores info collected by Various Agents
Composed of – Users, Tablespaces, tables, views etc.
Installation of OMR requires already existing database.

14. Plug-ins
System-monitoring Utilities used to monitor and manage non-Oracle Software.
Plug-ins have been expanded to include every target type like:
Oracle Database plug-in
Fusion Middleware plug-in
Fusion Application plug-in
Can be downloaded, applied & deployed using self-update functionality.
Agents are no longer configured to be able to monitor any target.
Agent will only download plug-in.
Agents are smaller & simpler leading biggest improvement in Architecture.

15. High-Availability EM12c Configuration
Simple Basic Installation [Level 1]

16. Level 2

17. Software Library
Storage area used to store patches, self update downloads and gold images.
To create software library:
Setup Provisioning & Patching Software Library Menu
Location should be accessible from each OMS

18. New Features related to Software Library
SL is single location for most of the entities (self-updatable) making SL integrated with Self-Update.
Expanded support for storage-type (NFS being shared b/w OMS and any other).
Referenced location supported for S/L (Centralized location).
Support notes or Readme files can be attached to S/L entities.

19. Cloud Control Database Control Fusion Middleware Control
Management Tools
Oracle management tools
How to differentiate b/w them
Which one to use and when
Cloud Control Database Control Fusion Middleware Control
Architecture
Manage entire Data Center
Can connect to single env. at a time
Single Oracle DB
If you want to use DB control for some other DB, have to disconnect

20. Management Tools
Create Database: using DBCA will ask whether to manage database centrally via EM12c or database control
Imp note: If database pointed at time of installation is configured DBCA to be locally managed it will give you error.

21. Command Line Tools Enterprise Manager Command Line Interface (EMCLI)
used for repeated scripting operations
can be installed on any computer simply by downloading tool via Cloud Control setup menu
Limited Functionality
Enterprise Manager Control (EMCTL)
Tasks like starting, stopping, status for agent
Manage/control OMS
To secure/unsecure agents and OMS
Starting and stopping Blackouts

22. Repository Users SYSMAN user - most important in an EM12c.
SYSMAN - owner of database schema containing repository.
Other users created during repository creation:
CLOUD_ENGINE_USER
CLOUD_SWLIB_USER
MGMT_VIEW is used for report generation
Specific for Cloud Operations

23. Repository Users SYSMAN_APM SYSMAN_MDS SYSMAN_OPSS
SYSMAN_BIP {Business Intelligence Integration}
SYSMAN_RO {read-only user for general purpose}
metadata schema for Fusion Middleware

24. Repository Views
Store information about administrator, targets, metric blackout etc.
Can be used by developer or admin to generate report.
Common Views
EM_CURRENT_VIOLATION
EM_EVENT_BUS_QUEUES
EM_EVENT_CLASS_ATTRS
EM_EVENT_MSGS
EM_RULES
EM_VIOLATIONS

25. Communication Flow
Lets see communication flow among all parts of this product.
Areas involved are :
Protocols
Ports involved
Firewall

26. Protocols Three main protocols involved in communication
HTTP or HTTPS: to communicate b/w OMA, OMS & OMR
Java Database Connectivity (JDBC): used by OMS to communicate with the repository as well as to communicate with any database targets.
ICMP: used by the OMS to communicate with a host

27. Ports A list of ports for entities to communicate
A default list is provided on the Port Configuration Details page
First port number listed in this column is the default port
Post installation, you can also find the port numbers that were used in the staticports.ini file, located on the OMS host.

28. Ports

29. Firewalls
A business will require firewalls to be used to control both outgoing and incoming network traffic.
This involves restricting either the availability of ports or the type of traffic that can pass through configuration

30. Protocols, Ports & Firewalls

31. Authentication in EM12c New pluggable framework
Accepts a range of pluggable authentication schemes
Any authentication method that WLS supports can be used to authenticate to EM12c.

32. Authentication Methods
Repository-based authentication
Default authentication option
Standard password options-such as password lifetime, password grace, number of failed attempts, and password complexity
Single sign-on authentication
If you use sign-on (SSO) authentication in your enterprise, you can register those SSO credentials as an administrator in EM12c.

33. Authentication Methods
Oracle Access Manager SSO authentication
SSO solution supplied with Oracle’s Fusion Middleware product
If you are using OAM SSO, you can register those credentials as an administrator in EM12c and use them to access the console.
Enterprise User Security authentication
Allows you to create & store enterprise users and roles as directory objects in a directory server compliant with the Lightweight Directory Access Protocol (LDAP)
Use EMCTL to set some properties to allow you to drill into those databases without displaying the standard logon pages.

34. Authentication Methods
LDAP authentication
In previous releases, restricted to Oracle Internet Directory (OID).
Microsoft’s Active Directory product in addition to OID.

35. Thank You…