My Oracle Support Banner

Oracle Identity Management 10g (10.1.4) Support Status and Alerts (Doc ID 961735.1)

Last updated on OCTOBER 15, 2021

Applies to:

Oracle Fusion Middleware - Version 10.1.4.0.1 to 10.1.4.3.0 [Release AS10gR2 to AS10gR3]
Information in this document applies to any platform.
Oracle Identity Management 10g - Version: 10.1.4.0.1 to 10.1.4.3.0


Details

Getting Started With Oracle Identity Management 10g (10.1.4)

Refer to this article when requiring updated information for Oracle Identity Management 10g (10.1.4). Below are important points to understand about Oracle Identity Management 10g (10.1.4):

Documentation

If you are initially installing Oracle Identity Management 10g, the best place to begin is with the Release Notes and Installation Guide for the platform and version you are installing. The Documentation Library will also provide information about administering Oracle Identity Management 10g. Since there are Oracle Appliccation Server 10g Release 2 (10.1.2) components installed, their respective Guides are in their Library. This documentation is available on Oracle Technology Network (OTN):


Oracle Identity Management 10g (10.1.4.0.1) Documentation Library
[ http://download.oracle.com/docs/cd/B28196_01/getstart.htm ]

Oracle Application Server 10g (10.1.2.0.2) Online Documentation Library
[ http://download.oracle.com/docs/cd/B14099_19/index.htm ]

For installing on platforms not mentioned in the Installation Guide, but are certified, see the following:

<Note 465847.1> - Oracle Identity Management 10g (10.1.4.0.1) Release Notes Addendum

 

Download

<Note 433061.1> How to Obtain Application Server 10g Media, Patchsets, and Patches
  • "Oracle Identity Management Infrastructure and Oracle Identity Federation" for primary 10.1.4.0.1 media
  • "Metadata Repository Creation Assistant" 10.1.4.0.1 is required to install required objects into remote database

Oracle Identity Management 10g (10.1.4.0.1) Release Notes and Installation Guides

Certification

Before performing any installation, it is recommended to review the Certification Guides for your desired combination. The below page is the Certification Guide for Oracle Identity Management 10g (10.1.4):

Oracle Identity Management (10.1.4.0.1) Certification Information
[http://www.oracle.com/technology/software/products/ias/files/idm_certification_101401.html]


Below are documents which are referenced from the above location for their respective certifications:

<Note 465847.1> Oracle Identity Management 10g (10.1.4.0.1) Release Notes Addendum
- Includes detailed Microsoft Windows Vista and SuSE Linux 10 platform information

<Note 421371.1> Identity Management 10.1.4.0.1 Pre-Install OS Checks Fail For OEL4 and RHEL4

 

Note:
The following document now provides all methods of retrieving certification and compatibility information, including a cumulative list of known My Oracle Support Notes:

<Note 431578.1> How to Find Certification Details for Oracle Application Server 10g and Oracle Fusion Middleware 11g

Use the above document to obtain more platform specific installation material that was not available at time of product release. (e.g., newer Operating System versions released, and requiring certification).

Actions

Maintain Oracle Identity Management 10g (10.1.4)

Confirm the full version of the Oracle Identity Management 10g instance by following any of the methods given in the following document, noting that there are several components installed with 10.1.4, 10.1.2, and 10.1.0.5 versions:

<Note 416489.1> How to Find Out the Full Current Version of OracleAS 10g Instance Residing on a Machine

 

Initial Post Installation Requirements

The installation of Identity Management 10g (10.1.4.0.1) includes the installation of several separate one-off patches, which are applied by a "One Off Patch Configuration Assistant". This Configuration Assistant may succeed without the background processing performed. The OPatch Utility is supposed to apply several patches, but it may fail for various or unknown reasons, returning control back to the original OUI installation. After the installation is finished, follow the below steps to ensure you have the required one-off patches applied:


Note:
Because of an issue with the 10.1.2.3 Patch Set rolling these back, it will be required to re-apply these after 10.1.2.3 patch Set is applied. If planning to apply 10.1.2.3 Patch Set (in next section of this document), you can disregard the below steps EXCEPT for the existence of the patch_locked file. See next section for one-off patches to apply after the 10.1.2.3 Patch Set. Only after both Patch Sets are applied can you then update the OPatch version.


If NOT applying the 10.1.2.3 and 10.1.4.3 Patch Sets:

1. Issue the ORACLE_HOME/OPatch/opatch lsinventory command to see if there are any one-off interim patches applied. Take note of the numbers stated.

2. Go to the ORACLE_HOME/.patch_storage directory

3. If there is a file named "patch_locked", you can safely rename or delete it, unless you actually have another session in the middle of patching. This is what caused some one-off patches from applying during initial installation. This will prevent future updating which you will perform in the next steps.

4. Under ORACLE_HOME/.patch_storage directory, there may be several numbered directories. These are the one-off patches which should be applied. For the ones not applied (referring to the lsinventory list), download each one separately from My Oracle Support.

5. Download <Patch 6880880>, choosing the 10.1.0.0.0 version for your platform. Extract this into your ORACLE_HOME.

6. Stop all processes running under this ORACLE_HOME using "opmnctl stopall" and "emctl stop iasconsole" and apply each of the downloaded one-off patches with "opatch apply" or as per their readme file.

7. Start all processes again with "opmnctl startall" and "emctl start iasconsole".

Oracle Identity Management 10g Patch Sets

This section gives a summary of the Patchsets available for Oracle Identity Management 10g (10.1.4).  All Patchsets are cumulative. Note the there is a separate Oracle Application Server Patchset 10.1.2.3, which needs to be applied separately in order to update the installed 10.1.2.x components. Applying BOTH of these is a requirement of any future patching, including the Critical Patch Updates.

 

Patch Release Action Needed More Information
Patchset 3 (10.1.2.3) <Patch:5983622>

  • Since the 10.1.4.3 Patchset does not update all 10.1.2 components, the 10.1.2.3 "Software Update" needs to be applied to update installed 10.1.2 components to version 10.1.2.3.0. The ordering of the 10.1.4.3 and 10.1.2.3 Patch Set does not matter, as they patch separate components. Components will be skipped if they are already updated by the other Patch Set.
  • Before updating with the 10.1.2.3 Patch Set, go to the ORACLE_HOME/.patch_storage directory. If there is a file named "patch_locked", you can safely rename or delete it, unless you actually have another session in the middle of patching. The existence of this file will prevent Patch Sets from automatically installing one-off patches.
  • If Oracle Portal is installed as a connecting middle-tier, then the 10.1.2.3 "Metadata Repository Update" would be run from the Oracle Portal middle-tier.
  • If installing 10.1.2.3 after 10.1.4.3, check the ORACLE_HOME/config/ias.properties for the Version. You may need to set this to a lower value (e.g. 10.1.2.0.2). If it is a higher version, the Installer may say the patch is not applicable. When finished, manually update "Version=10.1.4.3.0" to be the final version. (Bug 86751820 / <Note:861912.1>).
  • On UNIX, the 10.1.2.3 Application Server Patch Set can improperly install (depending on platform) the libldapclnt10.a file into the $ORACLE_HOME/ldap/lib directory. This library is not compatible with an OID 10.1.4.x installation and it's existence will cause "make -f ins_ldap.mk" relink failure and 'symbol' errors when you install the 10.1.4.3 Patch Set or any other one-off patches for OID 10.1.4. The correct libldapclnt10.a library for an IM 10.1.4.x installation exists in $ORACLE_HOME/lib and $ORACLE_HOME/lib32. You should check for and remove/rename the file in $ORACLE_HOME/ldap/lib directory so that the intended file is used for your platform.
  • After 10.1.2.3 and 10.1.4.3 are applied, download <Patch 6880880>, choosing the 10.1.0.0.0 version for your platform. Extract this into your ORACLE_HOME for the latest OPatch utility.
  • The IM 10.1.4.0.1 installation installs 10.1.0.5-based one-off patches which are then rolled back by the 10.1.2.3 Patch Set installation. You should download and install them to be at the intended level:

    <Patch 4764518> SASL FIXES NEEDED FOR LDAP WITH ZT AND NLS
    <Patch 5055442> RECEIVING ERROR ENABLING FIPS MODE ON THE APP SERVER NZ-29162
    <Patch 5261796> BUNDLED PATCH FOR RDBMS AND CORE FIXES FOR 10.1.4IM
    <Patch 5257709> BUNDLED PATCH FOR XDK FIXES ON TOP OF 10.1.0.5
Patchset 2 (10.1.4.3) <Patch:7215628>
  • 10.1.4.3 supersedes 10.1.4.2, but same concepts apply. See <Note.743141.1>, "Oracle Identity Management 10g (10.1.4.3) Patch Set Notes Addendum" for extra post-release errata information.
  • 10.1.4.3 will also update some 10.1.2.x components to 10.1.2.3. (For example, Oracle HTTP Server its slightly higher, 10.1.2.3.1/10.1.2.4). The full 10.1.2.3 Patchset will also need to be applied to update any remaining 10.1.2 components to the 10.1.2.3.0 level. The ordering of the 10.1.4.3 and 10.1.2.3 Patch Set does not matter, as they patch separate components. Components will be skipped if they are already updated by the other Patch Set.
  • Before updating with the 10.1.4.3 Patch Set, go to the ORACLE_HOME/.patch_storage directory. If there is a file named "patch_locked", you can safely rename or delete it, unless you actually have another session in the middle of patching. The existence of this file will prevent Patch Sets from automatically installing one-off patches.
  • Before updating with the 10.1.4.3 Patch Set in UNIX, go to the $ORACLE_HOME/ldap/lib directory and check for an libldapclnt10.a file. The 10.1.2.3 Application Server Patch Set may improperly install (depending on platform) the libldapclnt10.a file into the $ORACLE_HOME/ldap/lib directory. This library is not compatible with an OID 10.1.4.x installation and it's existence will cause "make -f ins_ldap.mk" relink failure and 'symbol' errors when you install the 10.1.4.3 Patch Set (or any other one-off patches for OID 10.1.4). The correct libldapclnt10.a library for an IM 10.1.4.x installation exists in $ORACLE_HOME/lib and $ORACLE_HOME/lib32. You should rename the file in $ORACLE_HOME/ldap/lib directory so that the intended file is used for your platform. (The 10.1.4.3 Patch Set will replace the correct one and issue subsequent make commands).
  • After 10.1.4.3 is applied, download <Patch 6880880>, choosing the 10.1.0.0.0 version for your platform. Extract this into your ORACLE_HOME for the latest OPatch utility.
Patchset 1 (10.1.4.2) <Patch:5983637> This Patchset is superseded by 10.1.4.3
  • Oracle Identity Management Patch Set 10.1.4.2.0 must be applied on top of Oracle Identity Management 10g (10.1.4.0.1) following the instructions included in the README file.
  • Oracle Identity Management Patch Set 10.1.4.2.0 only updates Identity Management components. The installed core Application Server components are not updated with 10.1.4.2.
  • Oracle Identity Management 10g 10.1.4.0.1 is installed with core Application Server 10.1.2.0.2 components that may be updated with any 10.1.2.x Patchset available, as listed in <Note 329361.1>. The ordering of 10.1.4.2 and 10.1.2.x Patchset does not matter, as they patch separate components.

 
See also:

<Note 795143.1> Understanding How AS 10g Patch Sets Update the AS Metadata Repository


Oracle Database Networking Patches

Oracle Identity Management 10g (10.1.4) can be installed as a full co-located Infrastructure and include an Oracle Database Server 10g. Or, as distributed option, the Identity Management home(s) are installed with some Oracle Database 10.1.0.5.0 components, for client-side networking functionality. At this time, there are no certified 10.1.0.x Patchsets to apply to a 10.1.4.x home. However, there may be one-off patches made available under the 10.1.0.5 label, which can be applied to the 10.1.4.x home to fix client-side networking issues, including some SSL related issues. Note that the Oracle Identity Management 10g Patchsets may or may not contain these fixes. Below is a list of SSL related patches you should ensure are installed:

<Patch 4700543>
<Patch 6370967>
<Patch 4601861>

References:
<Note 739725.1> IE Browser Cannot Display Page after SSL Certificate is Configured in Web Cache
<Note 470123.1> TLS 1.0 Handshake Fails When Using Internet Explorer On Windows Vista
<Note 457557.1> Oracle HTTP Server Startup Fails With nzos_SetIOSemantics referenced symbol not found

 


Note:
Critical Patch Updates for version 10.1.4.x will require a patch for 10.1.2.3, and this will have a combination of 10.1.2.3 and 10.1.0.5 fixes included.

Windows Only:
There may be a requirement to update the installed 10.1.0.5.0 components. On Windows, this is a cumulative patch referred to as '10.1.0.5 Patch x'. Note that these will conflict with Critical Patch Updates (CPU). You should always apply the latest CPU, which will include the previous '10.1.0.5 Patch x' fixes. Ignore any OPatch "conflict" message in this case.

Reference:
<Note 161549.1> Oracle Database Server and Networking Patches for Microsoft Platforms
<Note 276548.1> 10.1.0.x Oracle Database and Networking Patches for Microsoft Platforms

 

Known Issues

The following are known issues or other important documents which apply to Oracle Identity Management 10g (10.1.4) homes:

<Note 841065.1> OID and OC4J_SECURITY Does Not Start After Patching OID

 

 

Patching With OPatch Utility

OPatch is a required patching utility for all one-off patches, which are not part of a Patch Set. The latest OPatch utility should be downloaded as before applying any patch that is applied using OPatch. This includes the Critical Patch Updates.

<Patch:6880880> is used to deliver the latest OPatch Utility. When downloading, choose your actual platform in use and the correct OPatch version for your Oracle home. For Oracle Identity Management 10g, select the version as "10.1.0.0.0" for your specific version.

<Note 283367.1> OPatch for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4)

Security Alerts / Critical Patch Updates

Oracle currently delivers the latest Critical Patch Updates on a quarterly basis: January, April, July, and October of each year. You should continually install these updates to secure your installation. Look for the latest update, and an associated Oracle Fusion Middleware Patch Availability Document, which will contain the latest patches to apply to your Oracle Identity Management 10g (10.1.4) homes:

Critical Patch Updates (CPU) and Security Alerts
[ http://www.oracle.com/technology/deploy/security/alerts.htm ]
  • Check for latest Advisory and within are links to obtain patches
  • An Advisory documents the vulnerabilities for a CPU release.
  • A Patch Availability Document provides the cumulative patches for each product version within Lifetime Support as defined by Error Correction policies.
  • The below document can be used to provide more information on the patching process and examples in a step-by-step format:

    <Note 405972.1> Oracle Application Server 10g Examples for Critical Patch Updates - Plus FMW11g

See Also:
<Note 360870.1> Impact of Java Security Vulnerabilities on Oracle Products
<Note 1074055.1>Security Vulnerability FAQ for Oracle Application Server (Fusion Middleware)

 

Desupport and Error Correction Policy


Desupport has been replaced by the Lifetime Support Policy with an important "End of Premier Support" date and the Error Correction Policy. Details about these policies for Oracle Identity Management 10g (10.1.4) are in the following location:

<Note 944866.1> Error Correction Support Timelines for Oracle Application Server (Fusion Middleware)

          <Note 209768.1> Database, FMW, and OCS Software Error Correction Support Policy

All Lifetime Support Policies:
[ http://www.oracle.com/support/lifetime-support-policy.html ]

Oracle Fusion Middleware Lifetime Support Policy:
[ http://www.oracle.com/support/library/brochure/lifetime-support-middleware.pdf ]

<Note 952075.1> Java SE (J2SE) End of Life and Oracle Fusion Middleware Policy

ALERT: Premier Support Ends Dec 31 2011 for Oracle Fusion Middleware 10g 10.1.2 & 10.1.4


<Note 1290974.1> ALERT: Premier Support Ends Dec 31 2011 for Oracle Fusion Middleware 10g 10.1.2 & 10.1.4

It is recommended to upgrade to Oracle Fusion Middleware 11g Release 1 (11.1.1) before the End of Premier Support in order to continue a level of support desired. After Premier Support period ends, error correction support will no longer be provided for this release.

Oracle Database Server Desupport

Desupport has been replaced by the Lifetime Support Policy with an important "End of Premier Support" date and the Error Correction Policy. Below is information on various Oracle Database Server version you may be using with Oracle Identity Management 10g (10.1.4)

Below is information about each Oracle Database Server version you may have in use. If performing this upgrade with a plan to upgrade to Oracle Fusion Middleware 11g, see the following documentation:

Oracle Fusion Middleware Upgrade Planning Guide 11g Release 1 (11.1.1)
6 Upgrading and Preparing Your Databases
[ http://docs.oracle.com/cd/E23943_01/upgrade.1111/e10125/db_upgrade.htm ]


Oracle Database Server 9.2:


As per the Lifetime Support Policy, Oracle Database Server version 9.2 went to Extended Support status. Customers using a remote Oracle Database Server 9.2 for the Metadata Repository will be required to purchase Extended Support or upgrade to a newer Oracle Database Server version. Refer to the Oracle Database Server Upgrade Guide for detailed instructions.

At this time, there are no additional requirements specific to the Metadata Repository when upgrading from Oracle Database Server version 9.2 to 10.2. If Oracle Database Server 10.1 or 11g is desired, see below.


Oracle Database Server 10.1:


As per the Lifetime Support Policy, Oracle Database Server version 10.1 went to Extended Support status. There are two situations here:

Customers using a separate Oracle Database Server 10.1 installed by Database 10.1 media will be required to purchase Extended Support or upgrade to a newer Oracle Database Server version..

Customers using a co-located or distributed Infrastructure with Oracle Database Server 10.1 installed by Oracle Identity Management 10g (10.1.4) media will NOT be required to purchase Extended Support. Support will be provided as it applies to the Application Server requirements. Note this means that new bugs may not be fixed for the Database Server, though the client/networking side may have new fixes made available until the End of Premier Support for the Oracle Identity Management 10g (10.1.4) release. For this reason, it is recommended to upgrade to a newer Oracle Database Server version.

See the following document when upgrading from Oracle Database Server version 10.1 to 10.2:

<Note 376689.1> Upgrading the Application Server 10g (10.1.2|10.1.4) Seeded Database from 10.1 to 10.2



Oracle Database Server 11g:

If Oracle Database Server 11g is desired, refer to the Certification Guide to confirm this is certified on your platform and refer to the below documents:

<Note 740417.1> Oracle Database 11g Release 1 (11.1) Certification for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4)
<Note 887365.1> Oracle Database 11g Release 2 (11.2) Certification for Oracle Application Server 10g

Other Oracle Application Server 10g Versions

The following are equivalent documents for previous versions:

<Note 397022.1> Oracle Application Server 10g Release 3 (10.1.3) Support Status and Alerts
<Note 329361.1> Oracle Application Server 10g Release 2 (10.1.2) Support Status and Alerts
<Note 248904.1> Oracle Application Server 10g Release 1 (9.0.4) Support Status and Alerts





Additional keywords:


upgrade, patchset, latest, "most recent", maintain

Contacts

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Details
 Getting Started With Oracle Identity Management 10g (10.1.4)
 Documentation
 Download
 Certification
Actions
 Maintain Oracle Identity Management 10g (10.1.4)
 Initial Post Installation Requirements
 Oracle Identity Management 10g Patch Sets
 Oracle Database Networking Patches
 Known Issues
 Patching With OPatch Utility
 Security Alerts / Critical Patch Updates
 Desupport and Error Correction Policy
 ALERT: Premier Support Ends Dec 31 2011 for Oracle Fusion Middleware 10g 10.1.2 & 10.1.4
 Oracle Database Server Desupport
 Other Oracle Application Server 10g Versions
Contacts
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.