Safe Harbor Statement - Oracle...Windows 7 Yes Yes Windows Server 2008 Yes Yes Windows Server 2008...

Copyright © 2017, Oracle and/or its affiliates. All rights reserved.

Safe Harbor Statement

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

2


Best Practices for Oracle Database Performance and Security on Windows

Christian ShayProduct ManagerOracle Database on Windows


Program Agenda

Overview

Architecture

Best Practices for Windows

Best Practices for RAC on Windows

Q+A: Ask the Experts

1

2

3

4

5


Slide deck for this session

• Within a week, slides will be linked to on OTN Windows page:

– http://otn.oracle.com/windows

• Should also be available from Openworld website

• Deck will include a few additional best practices

Copyright © 2017, Oracle and/or its affiliates. All rights reserved. |Copyright © 2017, Oracle and/or its affiliates. All rights reserved.

Overview

6


Windows Supported Editions

• Windows 8.1 Editions

– Pro and Enterprise

• Windows 10 editions

– Education, Enterprise, and Pro

• Windows Server 2012 R2 Editions– Essentials, Foundation, Standard and Datacenter

• Windows Server 2016 editions

– Datacenter, Essentials, and Standard Edition

7


Database Certification on 32-bit Windows

8

OS 11.2 DB and client1 12.1 client2

Windows 7 Yes Yes

Windows Server 2008 Yes Yes

Windows Server 2008 R2 Yes Yes

Windows 8 11.2.0.4 Yes

Windows 8.1 11.2.0.4 12.1.0.2

Windows Server 2012 11.2.0.4 Yes

Windows 10 No 12.1.0.2

#1

RAC 11.2 and higher does not support 32-bit Windows

#2

For 12.1 and higher, only DB Client supports 32-bit Windows

Note: Oracle Database Client 12.2 and higher will only support Windows x64.


Database Certification on 64-bit Windows

9

OS 11.2 12.1 12.2

Windows 71 Yes Yes Yes

Windows Server 2008 Yes Yes No

Windows Server 2008 R2 Yes Yes No

Windows 81 11.2.0.4 Yes Yes

Windows 8.11 11.2.0.4 12.1.0.2 Yes

Windows Server 2012 11.2.0.4 12.1.0.2 Yes

Windows Server 2012 R2 11.2.0.4 12.1.0.2 Yes

Windows 101 No 12.1.0.2 Yes

Windows Server 2016 No No Yes2

Note: 32-bit Oracle Client is supported on Windows x64

#1RAC and some server features not supported on Windows clients

#2

To be certified shortly post-release


Database Certification on Windows Hyper-V

10

Guest OS 11.2 12.1 12.2

Windows Server 2008 R2 11.2.0.4 (SI only) 12.1.0.2 (SI only) No

Windows Server 2012 11.2.0.4 (SI and RAC) 12.1.0.x (SI only) 12.2 (SI and RAC)

Windows Server 2012 R2 (Generation 1)

11.2.0.4 (SI and RAC) 12.1.0.2 (SI and RAC) 12.2 (SI and RAC)

Windows Server 2012 R2 (Generation 2)

No 12.1.0.2 (SI and RAC) 12.2 (SI and RAC)

• Microsoft Hyper-V Server 2012 and 2012 R2 are certified

• Microsoft Hyper-V Server 2016 will be certified


Architecture

11


Database on Windows Architecture

• Thread model, not a straight port of Oracle’s process architecture

• 128 TB maximum memory per database instance

• Runs as a Windows service process

• No limits on memory, connections, resources except those imposed by the operating system


File I/O

• Supports asynchronous I/O to all types of files

– Asynch IO support on Windows is very good for both file system and raw devices.

– No need to set INIT.ORA parameter “filesystemio_options”

– Default value of “asynch” is the recommended setting

• Logical and physical raw files and partitions are fully supported

– Faster than NTFS


Memory - Large Pages

• Large Page support

– For instances with large memory requirements, large page support can improve performance.

– To enable, set registry parameter ORA_LPENABLE

– x64 – 4kb default page size – will now be 2 MB

• In 12c, if Oracle Home User is a standard Windows account, the administrator must grant the "Lock pages in memory" privilege to Oracle Home User or Service SID of Oracle Database Service (NTAUTHORITY\OracleService<sid>)



• Windows Server may be slow to allocate a huge amount of memory when using large pages especially if memory is already fragmented. Start Oracle before other processes if this affects you.

• Oracle Database 12c introduces a new option to allow use of large pages but it will fall back to small pages if OS is not able to allocate large pages

• See ALERT log for informational messages about large page allocation.

Memory Fragmentation issues



• Under HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\KEY_HOMENAME

– Create ORA_LPENABLE or ORA_SID_LPENABLE

– Set the value to 1 for regular mode and 2 for mixed mode

–Mixed mode is a new 12c option to allow use of large pages but fall back to small pages if OS is not able to allocate large pages

–ORA_SID_LPMAXTIME is the optional time parameter for mixed mode

New in 12c: “Mixed Mode”


Memory - NUMA

• NUMA support for memory/scheduling

• Database intelligently allocates memory and schedules threads based on node configuration

• Test well before going into production. Work with your hardware vendor and Oracle support to enable NUMA.

Non Uniform Memory Access


Hyperthreading

• Circuitry added to Intel CPUs resulting in single CPU functioning as 2 CPUs

• All versions of Oracle are supported in Hyperthreaded environments.


Direct NFS Client on Windows

• Network Attached Storage (NAS) uses Network File System (NFS)

• As of 11g, Oracle Database allows direct Windows NFS v3 access

– NFS v4 is supported starting with 12.1

• Part of DB kernel in Oracle Disk Manager library



• Bypasses a lot of software layers in OS

• Tailored for the specific I/O patterns that Oracle uses



• Linear scalability of direct NFS can be achieved with inexpensive NICS

• Does not require expensive switches which support link aggregation

–Oracle does load balancing rather relying on a switch.

• Parallel network paths

–More NICS – more bandwidth

• Direct NFS is a good solution from low to high end database servers



• In Database 12c Release 1, dnfs_batch_size allows Windows systems that don't have enough bandwidth to throttle the number of IOs that can be queued by an Oracle process, which may improve overall performance.

– Start at 128 and increase or decrease it based on NFS server performance.

dnfs_batch_size


Best Practices for Windows

23


Diagnostic Tools - Enterprise Manager


Diagnostic Tools - Performance Monitor


Process Explorer


OS Tools

• tasklist, taskkill

• tlist (Shows command line args with -c)

• driverquery

• diskpart

• sc (sc query state= all)

• process monitor (regmon, filemon, procexp) tcpview

• Windows Services for Unix

• Powershell


Client Diagnosability

• OCI and Net tracing and logging uses ADR by default

• First Failure Capture–No need to reproduce a second time to get a dump

• Client and Server trace file correlation

• Reduce one-off diagnostic patches

• Structure Dump Facility–Dumps more than just a stack

• Client-Side Crash Handler–Generates error message & stack trace, and controls core dump location


12c Auto-Tuning

• Automatically tune client-side OCI Statement Cache size

• Low value will cause more soft parses on server, and higher network and CPU getting cursor meta-data to client repeatedly

• High value will cause more memory usage on client

• Auto tuning continuously monitors various parameters and adjusts size internally to optimal performance given memory constraints specified

• Enable during deployment via oraaccess.xml–Out-of-the-box solution that can be used by all OCI applications to improve

performance

– Frees OCI drivers and applications from custom implementations


ODP.NET Integration with Performance Monitor

• Monitor ODP.NET Connection Pools

• Enable in HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\ODP.NET\Assembly_Version\PerformanceCounters


ODP.NET Integration with Performance Monitor

Counters include (among many):

• HardConnectsPerSecond

• HardDisconnectsPerSecond

• SoftConnectsPerSecond

• SoftDisconnectsPerSecond

• NumberOfActiveConnection

• NumberOfFreeConnections


CPU Tuning

• ORACLE_AFFINITY registry value can be set to tell Oracle which threads to run on which processors (same setting for all instances)

• ORACLE_AFFINITY must be set if more than 64 CPUs


Support for Multiple Processor Groups

• Support a max of 10 processor groups with up to 64 CPUs in each group in 12.1.0.2 (12.1.0.1 supports 4 processor groups)

• ORACLE_AFFINITY enhanced to enable affinity of Oracle threads to CPUs in multiple processor groups

– processorgroup is an optional parameter designating (multiple) Windows CPU groups which enables Oracle to use more than 64 logical CPUs. By default, a process utilizes a single processor group with a max of 64 CPUs.

– Documentation link for ORACLE_AFFINITY: http://bit.ly/1WdbJWa (Oracle Database Platform Guide for Microsoft Windows)

http://bit.ly/1WdbJWa


CPU Tuning

• Use Database Resource Manager to set CPU usage for different classes of users–For example, one can configure the db to use 50% CPU for gold

customers, 30% for silver and 20% for rest

• Thread priorities can be set in the registry using the ORACLE_PRIORITY variable


CPU Tuning – Diagnosing High CPU

• Process Explorer: drill down to threads

• Get thread id of high CPU thread and then query–SELECT a.spid, b.username FROM v$process a, v$session b WHERE

a.addr= b.paddr AND a.spid = <thread number>


Networking Best Practices

• Download slides for Openworld 2017 session:–Oracle Net Services: Best Practices for Performance, Scalability, and

High Availability

–Speaker: Kant Patel



• Use one listener per system

• Listener Logon Storm Handler–Configurable on server side in LISTENER.ORA (RATE_LIMIT = <max

conn/sec>)

–Use only if you have logon storm issues



• Increase “DEFAULT_SDU_SIZE” in SQLNET.ORA or “SDU” in TNSNAMES.ORA–Controls SQL*Net packet size (Session Data Unit)

–Default SDU size in 11g, 12c is 8k. For bulk data transfer scenarios, increase DEFAULT_SDU_SIZE in sqlnet.ora or SDU in tnsnames.ora. It can be increased up to 2 MB in 12.1, 64K as of 11.2.0.2 and 32k for earlier versions.



–Any mix of 12c, 11g/10g will cause it to negotiate down to lower of the two peers (pre-11g default is 2K)• For 10g increase DEFAULT_SDU_SIZE to 8k or higher.

–Common misperception: Do not set to match MTU!


Networking Best Practices:Shared Server vs. Dedicated Server

• Dedicated server gives very best performance–Each client connection has it’s own thread

–Memory usage is 2-4 MB per server thread

–Oracle uses dedicated server for OLTP benchmarks

–Can hit scalability limits due to memory use

• Shared server saves a lot of memory!– Idle connections will not consume much memory

–Latency because dispatcher hands request to shared server

–Good for large number of connections with many idle


Networking Best Practices:Shared Server vs. Dedicated Server

• Recommendation: Use dedicated server if you have enough physical memory, otherwise use shared for all sessions that may be idle for some time.

• Continue to use dedicated server for a small number of high performance connections/queries.


Networking Best Practices:Using Shared Server

• Client connections share pre-spawned server threads

–No dedicated idle threads wasting resources

• Enable Shared Server on client in tnsnames.ora:(DESCRIPTION=

(ADDRESS=(PROTOCOL=tcp)

(HOST=sales-server)(PORT=1521))

(CONNECT_DATA= (SERVICE_NAME=sales.us.acme.com)

(SERVER=shared) ))


Networking Best Practices:Using Shared Server

• Modify init.ora parameters on server to enable shared servers

• Rough guidelines: 20 or 30 Shared Servers per 500 sessions, then tune from there

• Use 1 dispatcher for every 50-100 sessions

• See Net Admin Guide for more details


Networking Best Practices:Oracle Database Resident Connection Pool

–Pools Oracle Dedicated Servers

–Shares server side connection pool across mid tier systems and processes

–Co-exists in all server configurations• Dedicated Servers, Shared Servers, RAC

–Most useful when you have many thousands of client processes connecting to a database server and each process needs to hold on to the database server session for a short time


Networking Best Practices:Oracle Database Resident Connection Pool

– In test environment, we were able to support more than 20,000 connections to a 2 GB Database Server

–Pooling is optionally enabled by DBA on Server

–Client connect string also needs to have (SERVER=POOLED)


Networking Best Practices: Connection Timeouts

• Client Side connection timeouts: Achieve fast failover when you have multiple addresses in connect string–TCP.CONNECT_TIMEOUT – as of 11g – Constrains only time required to

go from client to listener (no db processing). It can be a few seconds. (60 Seconds default in 11.2). Tune down from there. Too low – false positives

–SQLNET.OUTBOUND_CONNECT_TIMEOUT – Constrains time required to go from client to database (including db processing) - from 10gR2 and later. Not set by default.

–These two timeouts can be used individually or at the same time


Networking Best Practices: Connection Timeouts

• Server Side connection timeouts:–SQLNET.INBOUND_CONNECT_TIMEOUT – available in 10gR1 and later -

default 60 secs for 10gR2 and later, not enabled by default for 10gR1; this can also be used along with the client side timeouts mentioned on the last slide.



• SQLNET.AUTHENTICATION_SERVICES=(NTS) –This is a default value in SQLNET.ORA, needed for OS authentication

(connect / as SYSDBA)

– It should be left at default on server side.

• Use SecureFile LOBs–NET stack optimizations provide very high throughput limited only by

the underlying hardware


File System Best Practices - ASM

• Use Oracle Automatic Storage Management (ASM) – whether single-instance or RAC – use most recent version

• Benefits–Don’t need to move datafiles around

–Don’t need to take tablespaces offline

–Add disks with no downtime

• If you don’t use ASM, but want to use raw devices:–Use volume mount points to mount raw devices onto directories

–Use this mount point as the file name for raw devices.


File System Best Practices - ASM

• ASM provides equivalent performance to RAW

– Database instance directly accesses data on disks

– ASM not in path between instance and storage

• Sun ASM vs RAW benchmark

– ASM supported 80% more throughput with 50% shorter response

• CERN testing on 11.2: “ACFS much faster than ext3 with comparable or less CPU usage”


Stores All DataASM Cluster File System (ACFS)

• General purpose scalable file system

• Accessible through NAS protocols (NFS, CIFS)

• Multi OS platform (Linuxand Windows at initial release)

• Dynamic Volume Management Supported

• Read Only Snapshots Supported

SiebelWeb

PSFT

DWODS

SOAIMDBOC4JAPACHE

EBS

DB

Datafiles

OCR &

Voting Files

Binaries

File

SystemA

SM C

lust

er F

ile S

yste

m


File System Best Practices - OPatch – File lock issues

• Opatch warns to stop all Oracle process and services–Mandatory to bring down all oracle processes for the Oracle Home

• Opatch renames OCI.DLL to prevent locking issues by running applications

• MSDTC and other Windows OS processes only lock OCI.dll–WMI scripts running in WMISERVER.EXE could lock anything

• Look for third party software locking files/directories other than OCI.DLL and causing the problem–Find them, stop them (possibly stop WMISERVER too), and retry OPatch


Memory - Best Practices

• If system has more than 4G of SGA use sga_target (and not memory_target).

• Use Large Pages: Having a fixed, non-pageable SGA with large pages (compared to dynamically growing SGA) has many benefits, in particular, stability.


Using ORASTACK

• Each thread within Oracle process is provided 3.5 MB reserved stack space

• When needed use orastack to increase stack size:C:\ orastack oracle.exe 8000000

• Some Oracle apps installations have required Oracle.exe stacks as large as 32mb


Using ORASTACK

• Stop processes before running Orastack

• If you apply a patch, you must re-run Orastack


Migration from 32-bit Windows

• 32-bit to 64-bit upgrade process is simple– 32-bit data files are compatible with 64-bit DB

–Only recreate control file if neccesary (eg file location changes)

• No need to recreate the database

• Full export and import not required

• Database Upgrade Assistant automates process

• Transparent migration for end-user applications

– No changes required to existing client applications when running against 64-bit database


Best Practices for RAC on Windows

57


Real Applications Clusters

• Use RAC for scalability and High Availability– Add instances against same database files providing more Oracle

processes and increasing number of users

– Provides unique scalability on Windows that no other vendor offers

• Clustered databases supported on Windows platforms since version 7.3.4


Real Applications Clusters

• Oracle provides platform independent Oracle Clusterware to handle failover of services to surviving nodes

• Uses Oracle’s own clustering software, it does not depend on MSCS


RAC Best Practices for Performance

• Read “RAC and Oracle Clusterware Best Practices and Starter Kit (Windows) (Doc ID 811271.1)”

• Installation and performance best practices

• Also contains excellent attached illustrated installation walkthrough.


Anti-Virus

• Disable anti-virus software running on cluster nodes before download and installation of Oracle on Windows (be mindful of manual reboots during this time).

• AV can silently damage contents of the zip file–Make sure AV is off before downloading


Anti-Virus

• After install, the following should be excluded from being scanned: –Oracle Software directories

–OCFS filesystems

–ACFS filesystems

–Network scanning of the private interconnect


Anti-Virus Symptoms

• Some examples of how AV issues can manifest:– Installation freezing

–Voting File Disk being locked

–Node eviction issues


Non-Interactive Desktop Heap Size

• Increase size of the default Non-Interactive Desktop Heap to 2MB to prevent instability due to Desktop Heap exhaustion. See Document 2056225.1 and KB947246.

• Consult with Microsoft for further tuning of the Non-Interactive Desktop Heap beyond 2MB.

https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=2056225.1

http://support.microsoft.com/?id=947246


Generate .BLG files

• Run Perfmon to monitor CPU, Memory, Network, Disk IO Rates - To aid in troubleshooting, configure Perfmon to monitor these OS statistics and to generate binary log files (.BLG). Instructions for implementing this change can be found on the Microsoft support website using the following link: http://support.microsoft.com/kb/146005

• Expensive – don’t run all the time

http://support.microsoft.com/kb/146005


Memory Allocation

• Keep memory allocation under 80%.

• Shoot for 75% allocated (eg more than 20-25% free)

• This will allow for ample memory needed for Windows OS operations (including collection of physical memory dumps if required).


Scalable Networking Pack

• Turn off default Scalable Networking Pack (SNP) features. On a computer that has a TCP/IP Offload-enabled network adapter, you may experience many network-related problems like network adapters consuming lots of nonpaged pool memory or adapters requesting large blocks of contiguous memory --causing interference with internode communication.

• See Document 988008.1 and KB Articles KB948496 and KB951037 for instructions on how to fix.

https://support.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=988008.1

http://support.microsoft.com/kb/948496/en-us

http://support.microsoft.com/?id=951037


Network Interface Card Metrics

• Metrics are used to determine priority order among the NICs

• Override the default of assigning automatic metrics to assign a HIGHER metric ID to the Private network card and a LOWER metric ID to the Public network card

• This ensures that queries for 'hostname' etc get the public name back instead of the private

• See document 1907834.1 for more details


ORAchk

• Health check tool

• Proactively scans for the most impactful problems across the various layers of your stack

• Supports Windows 2008 and 2012

• Requires Cygwin to be installed.


Oracle Database Security on Windows

70


Oracle Database Security on Windows

• Install Oracle DB using non-privileged account using Oracle Home User.

• Download and apply latest bundle patch for Oracle DB

• Enable network encryption

• Restrict operating system access

• OS Admin can grant DBA priveleges

• Consult Oracle Database Security Guide for additional guidelines


Oracle Home User Support

• Run Windows Services for Oracle using a standard Windows account

• Specify a standard (not an administrator) Windows User Account as Oracle Home User during install and upgrade


Oracle Home User

• Different from Oracle Installation User who must have OS administration privileges

• Services for the Oracle Home run with this user name

• Can be Windows Built-in Account or Virtual Account or a standard Windows User Account

• Can not be changed post install

• Have similarities with ‘oracle’ user on Linux, though you can not log in as the Oracle Home User on Windows and perform administration tasks (e.g. Create DB, Install, Upgrade)


Microsoft Windows User Types Overview

Built-in Account

LocalSystem(Full Administrator

Privileges)

LocalService(Minimum

privileges)

User Account

Administrator(Local or

Domain user)

Standard User(Local or

Domain User)

Managed Service Acct

(Domain User)

• Account needs to be associated with specific computer system (s)

• No password management needed on local hosts

• No need to provide passwords during Windows service configuration

Virtual Account(for Windows

Service)


New Windows User Account Types Supported

• Virtual Account

– Introduced by Microsoft in Windows 7 and Windows Server 2008 R2

– Each Windows Service has it’s own virtual account name

–No password management

– Can work in a workgroup or domain

– Ability to access the network with a computer identity in a domain environment

• Group Managed Service Account (gMSA) – Introduced by Microsoft in Windows Server 2012

– Single Group Managed Service Account (gMSA) can be used on multiple hosts

– No password management needed on local hosts

– No need to provide passwords during Windows service configuration


Oracle Database Server Install


Oracle Home User EnhancementsVirtual Account Support

• New default for Single Instance Oracle Database Server install

• Only supported for Single Instance Oracle Database Server install

• No need to manage user name or password for Oracle Home User

• Database files are owned by the virtual account for the Oracle Database Windows Service (e.g. NT Service\OracleServiceORCL)

• Note: DB Client, built-in account option, uses LocalService and Service SIDs for client side Windows services, and is very similar to how Virtual Account works


Oracle Home User EnhancementsGroup Managed Service Account support

• Supported for all Oracle Database installs (DB Client, Single Instance Oracle Database, RAC and Grid Infrastructure)

• Works like any other domain user but no need to create Oracle wallet and/or provide password for any database operation


Oracle RAC Database Install


Oracle Grid Infrastructure Install


Database Client Install• For Built-in Account

option, Windows Services run under LocalService (not LocalSystem) for Database Client


Install Windows Account option for Oracle Home User

Needs to be pre-created?

Password needed during DB operations?

DB Server (SI)

DB Client

DB Server (RAC)

Grid Infra-structure

Virtual Account N N Y N N N

Built-in Account (internally, use LocalSystem)

N N Y N Y Y

Built-in Account (internally, use LocalService)#2

N N N Y N N

Local User Account#2 N Y Y#1 Y N N

Managed Services Account Y N Y Y N N

Group Managed Services Account Y N Y Y Y Y

Domain Account Y Y Y Y Y Y#1 – Windows OS authentication can not be used across systems#2 – Windows Services can not access any secure shared network resource using its own Windows identity


`

Oracle Database Services on Windows

Oracle Listener Service

Databases

Oracle Database Service

ORACLE BASEORACLE HOME

Other Files

Windows Services

File System ACLs

• Services run as a Windows User (e.g. domain1\frank)

• Each service also has a unique Service SID (e.g. Database sid orcl has service SID: NTAUTHORITY\OracleServiceORCL)

• Either user name or Service SID can be used to grant privileges or set ACLs for file system access

• Oracle sets appropriate ACLs for Oracle Home and Oracle Base

• For customer specific files/directories in non-standard locations, ACLs may need to be changed to make them accessible to Oracle ServicesPlease check Oracle Database Platform Guide for Microsoft Windows for more information.


Database Creation • Database Configuration Assistant (DBCA) is used to create or modify

Oracle Database as a part of install or as post install action

• Administrator, invoking the tools, needs to be an OS Administrator and should have appropriate database privileges

• Use the icon Database Configuration Assistant (the icon is set up to “run as administrator”) to invoke DBCA

• As Windows Service creation requires both user id and password, DBCA will ask for the password of Oracle Home User (if needed) in order to create the Windows Service

• For Single Instance DB, password is needed for Windows Local User and Domain User

• For RAC, the customer has the option to store password in wallet; if not stored, the password needs to be input for Windows Domain User


Database 1 (12c)

Database 1 (11.2)

Oracle Database Upgrade

ORACLE_BASE

ORADATAORACLE_

HOME (11.2)

Database 2 (11.2)

ORACLE_BASE

ORADATAORACLE_

HOME (11.2)

Database 2 (11.2)

ORACLE_HOME (12c)


Oracle Home and Database Upgrade

• Database Upgrade Assistant (DBUA) is used for database upgrade across Oracle Homes as a part of install or as post install action

• Administrator, invoking the tools, needs to be an OS Administrator and should have appropriate database privileges

• Use the icon Database Upgrade Assistant (the icon is set up to “run as administrator”)

• Requirement to enter Oracle Home User and Password is similar to Database creation

• When a database is upgraded, it will ask for password of Oracle Home User (if needed)


Administration Tools

• All GUI tools (e.g. DBCA, NETCA) enhanced to support Oracle Home User and ask for password if needed

• All command line tools (e.g. ORADIM, LSNRCTL, CMCTL) enhanced to accept Oracle Home User name and password through stdin for service creation

• Silent Install and Cloning enhanced to support Oracle Home User

• CRSCTL can be used to create wallet for storing password of Oracle Home User (RAC environment)

• Enterprise Manager support of Oracle Home User for provisioning, patching, and service creation


Management of Oracle Home User

• As it is a standard Windows user, Windows tools can be used to manage the Windows account (e.g. add privileges, change password)

• For changing password of the Oracle Home User account

– Use Windows tools to change the password

–Windows also requires all Windows Services to be updated to use the new password

– For all Windows Services used by Oracle, you can use the icon Update Password for Oracle Home User to:• update password for all Windows services used by Oracle on a computer (Single Instance Database

or Client)

• change password in Oracle wallet and update password for all Windows services used by Oracle in a cluster (for RAC)

You can also use the tool Oracle Home User Control (orahomeuserctl) in command line (run as administrator)


Recommendations for Oracle Home User

• For DB server (SI)

– Use Virtual Account to avoid password management (12.2)

– For 12.1, specify a Windows user account during install

• For RAC DB and Grid Infrastructure install

– Use a domain user or group managed service account

– For a group managed service account (12.2), you do not need to provide the password for any database operation

• If you want to separate out administration domains (e.g. Production and Test databases) of different Oracle Homes for security reasons:

– Use Virtual Account and specify distinct Oracle Base directory for each administration domain

– Use distinct Oracle Home User account (and Oracle Base directory) for each administration domain

• For DB client install, use Built-in Account option


Upcoming Windows Sessions and Demogrounds

• Visit Windows experts at the Demogrounds:

• .NET Development and Windows Platform Integration for Oracle Database

– Today through Wednesday

– Moscone West Exhibition Hall, far left side

– Booth SOA-041


Additional Oracle on Windows Resources

OTN:http://otn.oracle.com/windows

[email protected]


Safe Harbor Statement

The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.

92

Safe Harbor Statement - Oracle...Windows 7 Yes Yes Windows Server 2008 Yes Yes Windows Server 2008...

Documents

Transcript of Safe Harbor Statement - Oracle...Windows 7 Yes Yes Windows Server 2008 Yes Yes Windows Server 2008...