Reflection of my thoughts and technical expriences: September 2020

To get, Oracle Certified Professional Oracle Database Security Expert Certification

Step-1: Complete this prior certification

Candidate must have one of the following certifications.
Oracle Database 12c Administrator Certified Professional (OR)
Database 12cR2 Administration Certified Professional (Retired) (OR)
Oracle Database Administration 2019 Certified Professional

Step-2: Oracle Database Security Administration 1Z0-116
Duration: 150 Minutes
Number of Questions: 90
Passing Score: 59%
Validated Against: This exam is validated against 12c and higher versions.

Exam Topics

Overview
Assess security needs (risk reduction, regulatory compliance)
Assess the typical attack points for a database
Deploy the Maximum Security Architecture

Manage and Secure passwords
Secure Passwords in scripts and applications
Change a user's password securely
Administer a secure external password store to secure passwords
Administer the Database Password File
Control the use of a password file

Manage Authorization
Administer System and Object Privileges
Assign Administrative Privileges
Configure Secure Application Roles
Configure Global Roles (EUS/CMU)
Perform Privilege Analysis

Configure and Manage Database Vault
Describe the Default Separation of Duties with Database Vault
Configure Database Vault Factors, Rules, and Rule Sets
Configure Database Vault Mandatory and non-Mandatory Realms
Configure Database Vault Command Rules
Configure Realms, Command Rules, and Application Context to enforce trusted path access
Perform Database Vault Operations Control

Configure Network Security
Assess the need for Network access control (ACL)
Manage Network ACLs in relation to microservice deployments
Configure ACLs to access passwords in a wallet
Configure Network Service Profiles
Configure and use Listener Valid-Node Checking
Enhance Database Communication Security with SEC_ parameters

Implement Data Masking and Data Redaction
Implement Data Redaction
Implement Enterprise Manager Data Masking Pack
Configure and use the Application Data Model
Perform Sensitive Data Discovery
Deploy Data Masking Formats
Compare In-Database -vs- At-Source execution
Automate Masking operations with EMCLI
Configure Transparent Sensitive Data Protection (TSDP)

Patch Databases
Assess the need for of a CVE
Decode CVSS Risk Scoring

Manage Database Users
Administer OS Authentication
Administer Kerberos Authentication
Administer PKI Certificate Authentication
Administer Enterprise User Security
Administer Centrally Managed Users
Identify Inactive accounts

Configure and Use Contexts
Understand and use USERENV variables
Understand and Use Client Identifiers
Extend Unified Auditing with Context information
Use context information with Secure Application Roles

Configure Fine Grained Access Control
Configure Fine Grained Access Control (FGAC)
Configure FGAC with Real Application Security
Configure FGAC withVirtual Private Database
Configure FGAC with Oracle Label Security

Configure and Use Auditing
Perform Privileged User Audit
Configure Standard Audit
Configure Fine Grained Auditing
Configure and use Unified Audit

Configure and Implement Encryption
Encrypt data in motion
Configure Native Network Encryption
Configure TLS Encryption
Encrypt data at rest with Transparent Database Encryption
Configure Column level and Tablespace level Encryption
Encrypt the Data Dictionary
Migrate unencrypted to encrypted data
Manage Encryption Keys
Administer and use the SYSKM Administrative Privilege
Administer Encryption Wallets

Invoke the Database Security Assessment Tool
Run the Database Security Assessment Tool

Manage Database Security in the Cloud
Assess the Shared Responsibility Model
Manage hybrid cloud scenarios
Assess Autonomous Database Self Securing

Error Description: Oracle 19c (19.3.0) - While Executing Root.sh on Remote Nodes HIT UNEXPECTED "Error 4 opening dom ASM/Self in 0x69fecc0

Domain name to open is ASM/Self
Error 4 opening dom ASM/Self in 0x69fecc0"

Introduction:

During Oracle 19c (19.3.0) GI Installation executing root.sh on the remote nodes shows the following error in rac2-19c (Second Node) and rac3-19c (Third Node). There is no error in rac1-19c (First Node).

Cause:

This behavior is the result of a software defect that Oracle Development has identified as BUG 28308320 - LNX-191-INST:REMOTE ROOT.SH HIT UNEXPECTED "ERROR 4 OPENING DOM ASM/SELF IN 0XA9

Solution:

This message itself occurs when executing root.sh on nodes other than Node 1 . There is no impact on installation and operation. This bug is fixed in the Oracle 20c release

Environment:

[root@rac1-19c ~]# uname -r

4.1.12-124.41.5.el7uek.x86_64

Oracle GI: Oracle 19c (19.3.0)

OS: Oracle Linux 7.8

RAC: Three Node (rac1-19c, rac2-19c and rac3-19c)

[oracle@rac1-19c ~]$ cat /etc/os-release

NAME="Oracle Linux Server"

VERSION="7.8"

ID="ol"

ID_LIKE="fedora"

VARIANT="Server"

VARIANT_ID="server"

VERSION_ID="7.8"

PRETTY_NAME="Oracle Linux Server 7.8"

ANSI_COLOR="0;31"

CPE_NAME="cpe:/o:oracle:linux:7:8:server"

HOME_URL="https://linux.oracle.com/"

BUG_REPORT_URL="https://bugzilla.oracle.com/"

ORACLE_BUGZILLA_PRODUCT="Oracle Linux 7"

ORACLE_BUGZILLA_PRODUCT_VERSION=7.8

ORACLE_SUPPORT_PRODUCT="Oracle Linux"

ORACLE_SUPPORT_PRODUCT_VERSION=7.8

[oracle@rac1-19c ~]$

Node-1: rac1-19c (root.sh)

[root@rac1-19c ~]# /u01/app/19.3.0/grid/root.sh

Performing root user operation.

The following environment variables are set as:

ORACLE_OWNER= oracle

ORACLE_HOME= /u01/app/19.3.0/grid

Enter the full pathname of the local bin directory: [/usr/local/bin]:

Copying dbhome to /usr/local/bin ...

Copying oraenv to /usr/local/bin ...

Copying coraenv to /usr/local/bin ...

Creating /etc/oratab file...

Entries will be added to the /etc/oratab file as needed by

Database Configuration Assistant when a database is created

Finished running generic part of root script.

Now product-specific root actions will be performed.

Relinking oracle with rac_on option

Using configuration parameter file: /u01/app/19.3.0/grid/crs/install/crsconfig_params

The log of current session can be found at:

/u01/app/oracle/crsdata/rac1-19c/crsconfig/rootcrs_rac1-19c_2020-09-03_02-57-30PM.log

2020/09/03 14:57:47 CLSRSC-594: Executing installation step 1 of 19: 'SetupTFA'.

2020/09/03 14:57:47 CLSRSC-594: Executing installation step 2 of 19: 'ValidateEnv'.

2020/09/03 14:57:47 CLSRSC-363: User ignored prerequisites during installation

2020/09/03 14:57:47 CLSRSC-594: Executing installation step 3 of 19: 'CheckFirstNode'.

2020/09/03 14:57:49 CLSRSC-594: Executing installation step 4 of 19: 'GenSiteGUIDs'.

2020/09/03 14:57:51 CLSRSC-594: Executing installation step 5 of 19: 'SetupOSD'.

2020/09/03 14:57:51 CLSRSC-594: Executing installation step 6 of 19: 'CheckCRSConfig'.

2020/09/03 14:57:51 CLSRSC-594: Executing installation step 7 of 19: 'SetupLocalGPNP'.

2020/09/03 14:58:12 CLSRSC-594: Executing installation step 8 of 19: 'CreateRootCert'.

2020/09/03 14:58:15 CLSRSC-4002: Successfully installed Oracle Trace File Analyzer (TFA) Collector.

2020/09/03 14:58:20 CLSRSC-594: Executing installation step 9 of 19: 'ConfigOLR'.

2020/09/03 14:58:39 CLSRSC-594: Executing installation step 10 of 19: 'ConfigCHMOS'.

2020/09/03 14:58:39 CLSRSC-594: Executing installation step 11 of 19: 'CreateOHASD'.

2020/09/03 14:58:48 CLSRSC-594: Executing installation step 12 of 19: 'ConfigOHASD'.

2020/09/03 14:58:48 CLSRSC-330: Adding Clusterware entries to file 'oracle-ohasd.service'

2020/09/03 14:59:25 CLSRSC-594: Executing installation step 13 of 19: 'InstallAFD'.

2020/09/03 15:00:06 CLSRSC-594: Executing installation step 14 of 19: 'InstallACFS'.

2020/09/03 15:00:34 CLSRSC-594: Executing installation step 15 of 19: 'InstallKA'.

2020/09/03 15:00:42 CLSRSC-594: Executing installation step 16 of 19: 'InitConfig'.

[INFO] [DBT-30161] Disk label(s) created successfully. Check /u01/app/oracle/cfgtoollogs/asmca/asmca-200903PM030118.log for details.

2020/09/03 15:02:55 CLSRSC-482: Running command: '/u01/app/19.3.0/grid/bin/ocrconfig -upgrade oracle oinstall'

CRS-4256: Updating the profile

Successful addition of voting disk e685f0d087ab4ff9bf8586a97f89678d.

Successfully replaced voting disk group with +DATADG.

CRS-4256: Updating the profile

CRS-4266: Voting file(s) successfully replaced

## STATE File Universal Id File Name Disk group

-- ----- ----------------- --------- ---------

1. ONLINE e685f0d087ab4ff9bf8586a97f89678d (AFD:DATADG01) [DATADG]

Located 1 voting disk(s).

2020/09/03 15:04:37 CLSRSC-594: Executing installation step 17 of 19: 'StartCluster'.

2020/09/03 15:05:47 CLSRSC-343: Successfully started Oracle Clusterware stack

2020/09/03 15:05:47 CLSRSC-594: Executing installation step 18 of 19: 'ConfigNode'.

2020/09/03 15:07:29 CLSRSC-594: Executing installation step 19 of 19: 'PostConfig'.

2020/09/03 15:08:46 CLSRSC-325: Configure Oracle Grid Infrastructure for a Cluster ... succeeded

[root@rac1-19c ~]#

[root@rac1-19c ~]# ps -ef | grep pmon

oracle 17904 1 0 15:05 ? 00:00:00 asm_pmon_+ASM1

oracle 19564 1 0 15:25 ? 00:00:00 mdb_pmon_-MGMTDB

root 24103 2965 0 15:30 pts/0 00:00:00 grep --color=auto pmon

[root@rac1-19c ~]#

Node-2: rac2-19c (root.sh)

[root@rac2-19c ~]# /u01/app/19.3.0/grid/root.sh

Performing root user operation.

The following environment variables are set as:

ORACLE_OWNER= oracle

ORACLE_HOME= /u01/app/19.3.0/grid

Enter the full pathname of the local bin directory: [/usr/local/bin]:

Copying dbhome to /usr/local/bin ...

Copying oraenv to /usr/local/bin ...

Copying coraenv to /usr/local/bin ...

Creating /etc/oratab file...

Entries will be added to the /etc/oratab file as needed by

Database Configuration Assistant when a database is created

Finished running generic part of root script.

Now product-specific root actions will be performed.

Relinking oracle with rac_on option

Using configuration parameter file: /u01/app/19.3.0/grid/crs/install/crsconfig_params

The log of current session can be found at:

/u01/app/oracle/crsdata/rac2-19c/crsconfig/rootcrs_rac2-19c_2020-09-03_03-09-34PM.log

2020/09/03 15:09:45 CLSRSC-594: Executing installation step 1 of 19: 'SetupTFA'.

2020/09/03 15:09:45 CLSRSC-594: Executing installation step 2 of 19: 'ValidateEnv'.

2020/09/03 15:09:45 CLSRSC-363: User ignored prerequisites during installation

2020/09/03 15:09:45 CLSRSC-594: Executing installation step 3 of 19: 'CheckFirstNode'.

2020/09/03 15:09:47 CLSRSC-594: Executing installation step 4 of 19: 'GenSiteGUIDs'.

2020/09/03 15:09:47 CLSRSC-594: Executing installation step 5 of 19: 'SetupOSD'.

2020/09/03 15:09:47 CLSRSC-594: Executing installation step 6 of 19: 'CheckCRSConfig'.

2020/09/03 15:09:50 CLSRSC-594: Executing installation step 7 of 19: 'SetupLocalGPNP'.

2020/09/03 15:09:53 CLSRSC-594: Executing installation step 8 of 19: 'CreateRootCert'.

2020/09/03 15:09:53 CLSRSC-594: Executing installation step 9 of 19: 'ConfigOLR'.

2020/09/03 15:10:06 CLSRSC-594: Executing installation step 10 of 19: 'ConfigCHMOS'.

2020/09/03 15:10:06 CLSRSC-594: Executing installation step 11 of 19: 'CreateOHASD'.

2020/09/03 15:10:08 CLSRSC-594: Executing installation step 12 of 19: 'ConfigOHASD'.

2020/09/03 15:10:09 CLSRSC-330: Adding Clusterware entries to file 'oracle-ohasd.service'

2020/09/03 15:10:27 CLSRSC-4002: Successfully installed Oracle Trace File Analyzer (TFA) Collector.

2020/09/03 15:10:51 CLSRSC-594: Executing installation step 13 of 19: 'InstallAFD'.

2020/09/03 15:11:15 CLSRSC-594: Executing installation step 14 of 19: 'InstallACFS'.

2020/09/03 15:11:35 CLSRSC-594: Executing installation step 15 of 19: 'InstallKA'.

2020/09/03 15:11:36 CLSRSC-594: Executing installation step 16 of 19: 'InitConfig'.

2020/09/03 15:11:52 CLSRSC-594: Executing installation step 17 of 19: 'StartCluster'.

2020/09/03 15:12:49 CLSRSC-343: Successfully started Oracle Clusterware stack

2020/09/03 15:12:49 CLSRSC-594: Executing installation step 18 of 19: 'ConfigNode'.

2020/09/03 15:13:18 CLSRSC-594: Executing installation step 19 of 19: 'PostConfig'.

2020/09/03 15:13:43 CLSRSC-325: Configure Oracle Grid Infrastructure for a Cluster ... succeeded

Error 4 opening dom ASM/Self in 0x69fecc0

Domain name to open is ASM/Self

Error 4 opening dom ASM/Self in 0x69fecc0

[root@rac2-19c ~]#

[root@rac2-19c ~]# ps -ef |grep pmon

oracle 17954 1 0 15:13 ? 00:00:00 asm_pmon_+ASM2

root 18362 22368 0 15:14 pts/0 00:00:00 grep --color=auto pmon

[root@rac2-19c ~]#

Node-3: rac3-19c (root.sh)

[root@rac3-19c ~]# /u01/app/19.3.0/grid/root.sh

Performing root user operation.

The following environment variables are set as:

ORACLE_OWNER= oracle

ORACLE_HOME= /u01/app/19.3.0/grid

Enter the full pathname of the local bin directory: [/usr/local/bin]:

Copying dbhome to /usr/local/bin ...

Copying oraenv to /usr/local/bin ...

Copying coraenv to /usr/local/bin ...

Creating /etc/oratab file...

Entries will be added to the /etc/oratab file as needed by

Database Configuration Assistant when a database is created

Finished running generic part of root script.

Now product-specific root actions will be performed.

Relinking oracle with rac_on option

Using configuration parameter file: /u01/app/19.3.0/grid/crs/install/crsconfig_params

The log of current session can be found at:

/u01/app/oracle/crsdata/rac3-19c/crsconfig/rootcrs_rac3-19c_2020-09-03_03-14-29PM.log

2020/09/03 15:14:39 CLSRSC-594: Executing installation step 1 of 19: 'SetupTFA'.

2020/09/03 15:14:39 CLSRSC-594: Executing installation step 2 of 19: 'ValidateEnv'.

2020/09/03 15:14:39 CLSRSC-363: User ignored prerequisites during installation

2020/09/03 15:14:39 CLSRSC-594: Executing installation step 3 of 19: 'CheckFirstNode'.

2020/09/03 15:14:41 CLSRSC-594: Executing installation step 4 of 19: 'GenSiteGUIDs'.

2020/09/03 15:14:41 CLSRSC-594: Executing installation step 5 of 19: 'SetupOSD'.

2020/09/03 15:14:42 CLSRSC-594: Executing installation step 6 of 19: 'CheckCRSConfig'.

2020/09/03 15:14:44 CLSRSC-594: Executing installation step 7 of 19: 'SetupLocalGPNP'.

2020/09/03 15:14:48 CLSRSC-594: Executing installation step 8 of 19: 'CreateRootCert'.

2020/09/03 15:14:48 CLSRSC-594: Executing installation step 9 of 19: 'ConfigOLR'.

2020/09/03 15:15:02 CLSRSC-594: Executing installation step 10 of 19: 'ConfigCHMOS'.

2020/09/03 15:15:03 CLSRSC-594: Executing installation step 11 of 19: 'CreateOHASD'.

2020/09/03 15:15:07 CLSRSC-594: Executing installation step 12 of 19: 'ConfigOHASD'.

2020/09/03 15:15:08 CLSRSC-330: Adding Clusterware entries to file 'oracle-ohasd.service'

2020/09/03 15:15:21 CLSRSC-4002: Successfully installed Oracle Trace File Analyzer (TFA) Collector.

2020/09/03 15:15:50 CLSRSC-594: Executing installation step 13 of 19: 'InstallAFD'.

2020/09/03 15:16:33 CLSRSC-594: Executing installation step 14 of 19: 'InstallACFS'.

2020/09/03 15:16:55 CLSRSC-594: Executing installation step 15 of 19: 'InstallKA'.

2020/09/03 15:16:56 CLSRSC-594: Executing installation step 16 of 19: 'InitConfig'.

2020/09/03 15:17:07 CLSRSC-594: Executing installation step 17 of 19: 'StartCluster'.

2020/09/03 15:18:09 CLSRSC-343: Successfully started Oracle Clusterware stack

2020/09/03 15:18:09 CLSRSC-594: Executing installation step 18 of 19: 'ConfigNode'.

2020/09/03 15:18:40 CLSRSC-594: Executing installation step 19 of 19: 'PostConfig'.

2020/09/03 15:19:05 CLSRSC-325: Configure Oracle Grid Infrastructure for a Cluster ... succeeded

Error 4 opening dom ASM/Self in 0x60a2370

Domain name to open is ASM/Self

Error 4 opening dom ASM/Self in 0x60a2370

[root@rac3-19c ~]#

[root@rac3-19c ~]# ps -ef | grep pmon

oracle 11449 1 0 15:18 ? 00:00:00 asm_pmon_+ASM3

root 21322 20696 0 15:29 pts/0 00:00:00 grep --color=auto pmon

[root@rac3-19c ~]#

Please refer for more details:

19C: While Executing Root.sh on Remote Nodes HIT UNEXPECTED "ERROR 4 OPENING DOM ASM/SELF IN 0x57f7d60" (Doc ID 2571719.1)

Hope it helps.

Thank You.

Reflection of my thoughts and technical expriences

Tuesday, September 15, 2020

Oracle Database 12c Maximum Availability Certified Expert (MAA)

Oracle Database Security Specialist (1z0-116)

Thursday, September 3, 2020

Oracle 19c (19.3.0) - While Executing Root.sh on Remote Nodes HIT UNEXPECTED "Error 4 opening dom ASM/Self in 0x69fecc0"