On the Custom SP Engines tab, click Add to create a new Authentication Engine,

7-16 Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management However, if the keystores are stored in any other location, then you must perform the following tasks: 1. Copy the identify and trust keystores to a subdirectory inside the following directory: WLS_HOME user_projectsdomainsdomain_nameserversserver_namestageOIF 2. Configure Oracle WebLogic Server to point to the new keystore location, as follows: a. Log in to the Oracle WebLogic Server Administration Console and select Environment , then Servers. b. Select the server for which you want to set up SSL.

c. In the Keystores section, select Custom Identity and Custom Trust.

d. In the Identity section, fill in the properties as follows: Custom Identity Keystore: location_of_keystore_containing_SSL_private key_ and_certificate Custom Identity Keystore type: jks Custom Identity Keystore Passphrase: storepassword e. In the Trust section, fill in properties as follows: Custom Identity Keystore: location_of_keystore_containing_the_trusted certificate_entries Custom Identity Keystore type: jks Custom Identity Keystore Passphrase: storepassword

7.5.6 Setting Oracle Identity Federation System Properties After Upgrade

If you configured Oracle Identity Federation 10g by setting system properties, then you will have to manually configure those properties in the upgraded Oracle Identity Federation 11g instance. The Upgrade Assistant does not apply these settings to your 11g instance. Table 7–4 lists the system properties that are not upgraded and explains how to set the equivalent properties in Oracle Identity Federation 11g. In many cases, the instructions refer to Oracle Enterprise Manager Fusion Middleware Control, the Oracle WebLogic Server Administration Console, or the WebLogic Scripting Tool WLST, which are used to manage Oracle Fusion Middleware11g components. For more information, see Overview of Oracle Fusion Middleware Administration Tools in the Oracle Fusion Middleware Administrators Guide. Note that these properties are documented in Section 9.3, Managing Oracle Identity Federation Performance, in the Oracle Identity Federation Administrators Guide for 10g 10.1.4.0.1. This document can be found in the Oracle Application Server 10g 10.1.4.0.1 documentation library on the Oracle Technology Network OTN: http:www.oracle.comtechnologydocumentation Upgrading Your Oracle Identity Federation Environment 7-17

7.5.7 Updating the Configuration File

To update the configuration files, complete the following steps: 1. Set up the WLST Environment by executing the following commands: On UNIX: bash export DOMAIN_HOME=PATH_TO_DOMAIN_HOME source ORACLE_HOMEfedscriptssetOIFEnv.sh Replace ORACLE_HOME with the correct path for your environment. On Windows: set DOMAIN_HOME=PATH_TO_DOMAIN_HOME ORACLE_HOME\fed\scripts\setOIFEnv.cmd 2. Run the following command: Table 7–4 Setting Oracle Identity Federation 10g System Properties in Oracle Identity Federation 11g Oracle Identity Federation 10g System Property How to Set the Property in Oracle Identity Federation 11g -Dhttp.fed.host=VALUE In Fusion Middleware Control, you can set this property as follows: 1. Navigate to the Oracle Identity Federation Home page. 2. From the Oracle Identity Federation menu, select Administration, then Server Properties . 3. Enter a value in the Maximum SOAP Connection per Server field. -Dhttp.fed.max.conn=VALUE In Fusion Middleware Control, you can set this property as follows: 1. Navigate to the Oracle Identity Federation Home page. 2. From the Oracle Identity Federation menu, select Administration, then Server Properties . 3. Enter a value in the Maximum SOAP Connection field. -Dfed.ldap.ha=[true | false] In Oracle Identity Federation 10g, you used this system property to set one flag for all datastores. In 11g you can set this flag seperately for the LDAP user datastore, LDAP federation datastore, and LDAP authentication engine. Enter the WLST script environment for the Oracle Identity Federation instance, and set the ldaphaenabled, userldaphaenabled, or fedldaphaenabled property to TRUE as follows: To enable this property for the LDAP authentication engine: setConfigPropertyauthnengines, ldaphaenabled, true, boolean To enable this for the LDAP user datastore: setConfigPropertydatastore, userldaphaenabled, true, boolean For enabling this for LDAP federation datastore: setConfigPropertydatastore, fedldaphaenabled, true, boolean -Dfed.jdbc.min.conn=VALUE -Dfed.jdbc.max.conn=VALUE -Dfed.jdbc.max.usage=VALUE Use the Oracle WebLogic Server Administration Console to set the appropriate values on the JDBC data source that you are using for your Oracle Identity Federation 11g datastores or authentication engines.