How to Secure and Unsecure the AS Control 10g Console and Agent

I would like to share some methods secure and unsecure Oracle Application server control,,,

Securing Oracle AS control is very easy task...

So lets discuss, How to Secure and Unsecure the AS Control 10g Console and Agent Securing the AS Control Application

To secure the AS Control, follow these steps:

Step 1. Stop the AS Control

$ emctl stop iasconsole

Step 2. Secure the AS Control

$ emctl secure iasconsole

Step 3. Start AS Console again

$ emctl start iasconsole

Unsecuring the AS Control Application

To unsecure the AS Control, follow these steps:

Step 1. Stop the AS Control $ emctl stop iasconsole

Step 2. Update AS Control's standalone OC4J container to support unsecure port in

$ORACLE_HOME/sysman/j2ee/config/emd-web-site.xml

Change the following line:

" display-name="Oracle Enterprise
Manager iAS Console Website" secure="true">

Into:

" display-name="Oracle Enterprise
Manager iAS Console Website" secure="false">

Step 3. In the same file (emd-web-site.xml), you also need to modify the ssl-config
section at the bottom of the file

Change the following line:

keystore-password="%EMD_KEYSTORE_PASSWORD%" />

Into:

keystore-password="%EMD_KEYSTORE_PASSWORD%" />

Step 4. Update AS Control Local Management Agent to support the unsecure HTTP protocol.

The EMD_URL property in $ORACLE_HOME/sysman/config/emd.properties needs to
get switched back to the HTTP (non-secure) protocol.

Change:

EMD_URL=https://:/emd/main

Into:

EMD_URL=http://:/emd/main

Step 5. Update the standAloneConsoleURL property of oracle_ias target.

Edit the file $ORACLE_HOME/sysman/emd/targets.xml to change the
StandaloneConsoleURL property of oracle_ias target to switch back to the
HTTP (non-secure) protocol.

Change the following lines:

" ...> ...
VALUE="https://:/emd/console"/>

Into:

" ...> ...
VALUE="http://:/emd/console"/>

Step 6. Start the AS Control Application: $ emctl start iasconsole



I hope this help you in securing and unsecuring em console...

This activity comes very rarely.. but you can do it on test for R & D as i did :D

Regards,
Ajinkya