OIM 11G R2 PS3 Lab 11: Three ways to export OIM Metadata (MDS)

We can export complete OIM MDS in 3 different ways.

1) MDS Export  from Weblogic EM Console

2) MDS Export  from wlst.sh script

3) MDS Export  from weblogicExportMetadata.sh

---------------------------------------------------------------------------------------------------------------

1) MDS Export  from Weblogic EM Console

* Login to Weblogic EM console > Expand Identity and Access > OIM > oim

* Expand  Application Defined Mbean > oracle.mds.lcm > server :oim_server1

* Expand Application : OIMAPPMetadata > MDSAppRuntime > MDSAppRuntime  on right hand      side click on Operations tab >> Click on exportMetadata

* In to Location give path where you want to export (No need to create directory manually, It will automatically create the directory) > Click on docs

* Click on Add

* In this lab we are exporting complete MDS that we enter /**. If you want to export any specific file you can do that. Ex -/file/User.xml ( For export User.xml)

* After setting the to location and docs, click on Invoke

* Check the status after clicking Invoke. It should be operation executed successfully.

* Check the export in to location.

2) MDS Export  from wlst.sh script

 * Go to /app/oracle/middleware/oracle_common/common/bin/ location and run wlst.sh conmand
     Enter the below Parameters manually.

•  connect()
•  Weblogic 
•  Weblogic user password
• t3://localhost:7001 (Server URL with admin port)
• exportMetadata(application='OIMMetadata', server='oim_server1', toLocation='/tmp/mds1') (If you want to export the MDS in specific location you can set that in toLocation)   
• If you want to export any specific file run below command
• exportMetadata(application='OIMAppMetadata',server='oim_server1',toLocation='/tmp/export',docs='/db/oim-config.xml',applicationVersion='*')

* Check the successfully transferred messages at the end.

*  Check the export in to location.

3) MDS Export  from weblogicExportMetadata.sh

* Go to /app/oracle/middleware/Oracle_IDM1/server/bin location and edit weblogic.properties

* Enter below Parameter

application_name=OIMMetadata

metadata_to_loc=/tmp/mds2 

metadata_files=/**  

* From the same location set the OIM_ORACLE_HOME ,run weblogicExportMetadata.sh command and enter below parameters manually.

     export OIM_ORACLE_HOME=/app/oracle/middleware/Oracle_IDM1

•  connect()
•  Weblogic 
•  Weblogic user password
• t3://localhost:7001 (Server URL with admin port)

* Check the export in to location.

Regards,
Arihant Baid

Java Keytool Commands

A) Key Store Generation

1) Generate a Java keystore and key pair

    keytool -genkey -alias demo -keyalg RSA -keystore keystore.jks -storepass password

2) Generate a certificate signing request (CSR) for an existing Java keystore

    keytool -certreq -alias demo -keystore keystore.jks -storepass password -file demo.csr

3) Generate a keystore and self-signed certificate

    keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore.jks -storepass password -validity 360

B) Import Certificates

1) Import a root or intermediate CA certificate to an existing Java keystore

    keytool -import -trustcacerts -alias root -file test.crt -keystore keystore.jks -storepass password

2) Import a signed primary certificate to an existing Java keystore

    keytool -import -trustcacerts -alias demo -file demo.crt -keystore keystore.jks -storepass password

3) Import New CA into Trusted Certs

    keytool -import -trustcacerts -file demo.pem -alias CA_ALIAS -keystore $JAVA_HOME/jre/lib/security/cacerts

C) Export Certificates

1) Export a certificate from a keystore

    keytool -export -alias demo -file demo.crt -keystore keystore.jks -storepass password

D) Check/List/View

1) Check a stand-alone certificate

    keytool -printcert -v -file demo.crt

2) Check which certificates are in a Java keystore

    keytool -list -v -keystore keystore.jks -storepass password

3) Check a particular keystore entry using an alias

    keytool -list -v -keystore keystore.jks -storepass password -alias demo

E) List Trusted CA Certs
1) keytool -list -v -keystore $JAVA_HOME/jre/lib/security/cacerts

D) Delete Certificates

1) Delete a certificate from a Java Keytool keystore

    keytool -delete -alias demo -keystore keystore.jks -storepass password

F) Change Passwords

1) Change a Java keystore password

    keytool -storepasswd -new new_storepass -keystore keystore.jks -storepass password

2) Change a private key password

    keytool -keypasswd -alias client -keypass old_password -new new_password -keystore client.jks -storepass password

OIM 11g R2 , PS1 and PS2 Connector Export Order for Migration steps

Export the Connector as per the below order by using Deployment Manager in OIM

   1.Resource objects

   2.Event handlers (If you have custom handlers then only export otherwise Optional)

   3.Process forms

   4.IT resources

   5.Data object definitions

   6.Prepopulate adapters

   7.Processes

   8.IT resource type definitions

   9.Task adapters

   10.Lookups

   11.Scheduled tasks

   12.Request Data set (If you need to latest process form then only export otherwise Optional)

   13.Organization (If you have custom organizations then only export otherwise Optional)

   14.Access Policy (If you have custom organizations then only export otherwise Optional)

   15.Password Policy (If you have custom policy other than default then only export otherwise Optional) 

   16. Role (If you have custom Roles then only export otherwise Optional)

Regards,
Arihant