13 Administering Oracle ACFS with Oracle Enterprise Manager
Oracle Enterprise Manager Cloud Control provides tools for administering Oracle Automatic Storage Management Cluster File System (Oracle ACFS).
This chapter describes how to administer Oracle Automatic Storage Management Cluster File System (Oracle ACFS) with Oracle Enterprise Manager Cloud Control.
All Oracle ASM administration tasks begin with the Oracle Automatic Storage Management home page in Oracle Enterprise Manager Cloud Control.
Note:
To manage or monitor Oracle ACFS file systems or volumes that are located on nodes in an Oracle Flex ASM configuration, you must connect to the Oracle ASM proxy instance instead of the local Oracle ASM instance.
This chapter contains the following topics:
-
Managing Oracle ACFS File Systems and Volumes with Oracle Enterprise Manager
-
Managing Oracle ACFS Snapshots with Oracle Enterprise Manager
See Also:
-
Accessing the Oracle Automatic Storage Management Home Page for information about the Oracle ASM home page and how to access that page
-
Managing Oracle ACFS with Command-Line Tools for information about using command-line tools to administer Oracle ACFS file systems
-
Basic Steps to Manage Oracle ACFS Systems for information about the basic steps for creating Oracle ACFS file systems
-
Managing Oracle Flex ASM for information about Oracle Flex ASM
Managing Oracle ACFS File Systems and Volumes with Oracle Enterprise Manager
This section discusses how to manage Oracle ACFS file systems and volumes systems with Oracle Enterprise Manager Cloud Control.
This section contains the following topics:
For more information about Oracle ACFS file systems and volumes, refer to "About Oracle ACFS".
Creating Oracle ACFS File Systems and Volumes
To create an Oracle ACFS volume, perform the following steps.
-
Access the Disk Groups page from the Oracle ASM home page.
-
Click the Volumes link in the General tab of the Disk Group page.
-
Click Create in the Volumes tab of the Disk Group page.
The Create ASM Volume page displays.
Enter the volume name, disk group name that contains the volume, and the initial size of the volume.
You can also select the redundancy setting for the volume and the region settings for primary and mirror extents.
To create an Oracle ACFS file system on a volume in a disk group, perform the following steps.
-
Access the Volumes tab of the Disk Group page.
-
Select an existing volume in the disk group and click Create ASM Cluster File System.
The compatibility parameters
COMPATIBLE.ASM
andCOMPATIBLE.ADVM
must be set to11.2
or higher for the disk group.. -
On the Create ASM Cluster File System page, enter the information to create a file system. You can optionally register and mount the file system.
You must enter the volume name. You can enter an optional volume label.
You can optionally choose to register and mount the file system when it is created. Select a mount point from available directories.
Enter the host credentials needed to run the command when prompted. To register or mount a file system, you need root or administrator privileges.
After a directory has been selected, click Show Command to have Oracle Enterprise Manager generate the commands that you can run at an operating system prompt. Examples of commands on a Linux system are:
/sbin/mkfs -t acfs -b 4k /dev/asm/volume1-361 /sbin/acfsutil registry -f -a /dev/asm/volume1-361 /oracle/acfsmounts/acfs2 /bin/mount -t acfs -rw /dev/asm/volume1-361 /oracle/acfsmounts/acfs2
You can also generate the commands to register or mount an Oracle ACFS file system on the ASM Cluster File System tab.
See Also:
- Accessing the Oracle Automatic Storage Management Home Page for information about the Oracle ASM home page and how to access that page
-
Mirroring, Redundancy, and Failure Group Options for information about redundancy settings
-
ASMCMD Volume Management Commands for information about creating a volume with the ASMCMD
volcreate
command -
Disk Group Compatibility Attributes for information about disk group compatibility
-
About the Oracle ACFS Mount Registry for information about the registry process
Viewing and Modifying Oracle ACFS Volumes and File Systems
To view and modify information about Oracle ACFS file systems, click the ASM Cluster File System link in the Oracle ASM home page.
The ASM Cluster File System tab in Oracle Enterprise Manager lists all of the Oracle ACFS associated with the Oracle ASM instance.
On this page, you can choose to mount, dismount, delete, create snapshot, view content, register, and deregister a selected file system. In addition, you can create a file system, mount all file systems, or dismount all file systems.
For each Oracle ACFS, the columns provide information for Mount Point, Availability, State, Snapshots, Used (%), Used (GB), Size (GB), Allocated Space, Redundancy, Volume, and Disk Group. Redundancy, Volume, and Disk Group columns are on the far right of the page and are not shown in the illustration. The mount point, snapshots, volume, and disk group are provided as links to further information.
To view information about a specific volume, click the volume name in the Volume column on the ASM Cluster File System page to display the General tab of the ASM Volumes page.
To view information about a file system, click the link in the Mount Point column on the ASM Cluster File System page.
To view information about a disk group for an Oracle ACFS, click the disk group name in the Disk Group column on the ASM Cluster File System page. The General tab of the Disk Group page displays.
To view information about volumes in a disk group, click the Volumes tab at the top of the Disk Group page.
Managing Oracle ACFS Snapshots with Oracle Enterprise Manager
This section describes how to manage snapshots with Oracle Enterprise Manager.
For more information about Oracle ACFS snapshots, refer to "About Oracle ACFS Snapshots".
Creating, Modifying, and Viewing Snapshots
To view and modify information about existing snapshots or create snapshots for a file system, perform the following steps.
-
Click the ASM Cluster File System tab on the Oracle ASM home page
-
Click a mount point link in the Mount Point column.
-
Click the Snapshots tab.
Optionally, you can click a number link for existing snapshots in the Snapshots column on the ASM Cluster File System page to display the Snapshots page.
On the Snapshots page, you can create snapshots or search for and display specific snapshots. To search for a snapshot, enter a name with optional wildcard characters in the search field then click Search.
To create a snapshot, perform the following steps.
-
Click Create in the Snapshots page.
-
Complete the information on the Create Snapshot page.
Accept the default snapshot name, or provide a name. Optionally, you can choose to delete the oldest snapshot.
-
When you have completed the screen, you can click OK to run the command, or click Show Command to view the generated command.
For example, the following is a generated command for creating a snapshot:
/sbin/acfsutil snap create "snapshot_20090702_142135" /oracle/acfsmounts/acfs1
To run the generated command, you need the appropriate privileges on the host computer. Oracle Enterprise Manager prompts you to enter host credentials if they have not been set up.
You can also open a Telnet session from the Create Snapshot page to manually enter the generated operating system command.
To drill down in a snapshot directory, click the snapshot name in the Snapshots page to display the Search and List Directory page.
Converting Snapshots Between Read-Only and Read-Write
You can use edit snapshot to convert the snapshot attribute between Read Only and Read Write. To edit a snapshot, follow these steps:
Creating Child Snapshots from Existing Snapshots
Use the Create Child snapshot operation to create a point-in-time copy of an existing Oracle ACFS snapshot. Future changes to the parent snapshot are not inherited by the child snapshot. To create a child snapshot of an existing snapshot, follow these steps:
Managing Security Features with Oracle Enterprise Manager
This section describes how to manage security with Oracle Enterprise Manager.
For more information about Oracle ACFS security, refer to "Oracle ACFS Security".
Initializing Oracle ACFS Security
Oracle ACFS security provides a unified security infrastructure that allows users to define security policies and groups for accessing file system objects. Oracle ACFS encryption allows users to store data on disk in an encrypted format. To initialize Oracle ACFS security, follow these steps:
-
From the Oracle ASM home page, select the ASM Cluster File System tab to display the mount points in the cluster file system.
For information about the Oracle ASM home page and how to access that page, see "Accessing the Oracle Automatic Storage Management Home Page".
-
Click a mount point in the list.
-
Click the Security/Encryption to display the Security and Encryption section.
-
In the Security Configuration section, you can click Configuration, Rules, Rulesets, and Realms under Security to display various options.
-
If Oracle ACFS security is not initialized in the cluster, the Initialize Security button displays on the page. Click the button to initialize Oracle ACFS security. This operation needs to be performed only once in the cluster. On this page, you can also prepare security for the file system.
Adding an Oracle ACFS Security Administrator
To add an Oracle ACFS security administrator, follow these steps:
Changing an Oracle ACFS Security Administrator Password
To change an Oracle ACFS security administrator password, follow these steps:
Deleting an Oracle ACFS Security Administrator
To delete an Oracle ACFS security administrator, follow these steps:
Viewing Oracle ACFS Security Administrators
To view Oracle ACFS security administrators, follow these steps:
Creating a Rule
Rules are created in a file system and can be added to one or more rulesets, which can then be applied on an Oracle ACFS realm. Rules can also be cloned within the same file system or across file systems.
To create a rule, follow these steps:
Cloning a Rule
Rules can be cloned within the same mount point or across mount points. To clone a rule, follow these steps:
Editing a Rule
You can modify values and options for an existing rules. Rule types cannot be changed. To edit a rule, follow these steps:
Deleting a Rule
You can delete a rule so it no longer is used to enforce security on realms. To delete a rule, follow these steps:
Searching For and Viewing Rules
You can view or search the list of rules on a mount point, including the details of each rule. To search for and view rules, follow these steps:
-
From the Oracle ASM home page, select the ASM Cluster File System tab to display the mount points in the cluster file system.
For information about the Oracle ASM home page and how to access that page, see "Accessing the Oracle Automatic Storage Management Home Page".
-
Click a Mount Point. The Oracle ACFS home page is displayed for this mount point.
-
Click the Security/Encryption tab.
-
In the Security section, click Rules.
The list of rules in the file system is displayed.
Creating a Ruleset
You can create a ruleset which is a collection of one or more rules that you can associate with a command rule for realm authorization. A ruleset evaluates to true or false based on the evaluation of each rule it contains and the evaluation type (All True or Any True). Rulesets cannot be applied on an Oracle ACFS security realm directly; they are always associated with a Command Rule, which are then applied on a realm to enforce security. To create a ruleset, follow these steps:
Cloning a Ruleset
Rulesets can be cloned within the same mount point or across mount points. To clone a ruleset, follow these steps:
Editing a Ruleset
You can add or delete rules to or from a Ruleset. You can also edit the Ruleset options. To edit a ruleset, follow these steps:
Deleting a Ruleset
Deleted rulesets are no longer used to enforce security on realms. To delete a ruleset, follow these steps:
Searching For and Viewing Rulesets
A ruleset is a collection of one or more rules that you can associate with a command rule for realm authorization. A ruleset evaluates to true or false based on the evaluation of each rule it contains and the evaluation type (All True or Any True). Enterprise Manager enables you to view and search the list of rulesets applied on an Oracle ACFS mount point, including the details of each ruleset. To search for and view rulesets, follow these steps:
-
From the Oracle ASM home page, select the ASM Cluster File System tab to display the mount points in the cluster file system.
For information about the Oracle ASM home page and how to access that page, see "Accessing the Oracle Automatic Storage Management Home Page".
-
Click a Mount Point. The Oracle ACFS home page is displayed for this mount point.
-
Click the Security/Encryption tab.
-
In the Security section, click Rulesets.
The list of rulesets in the file system is displayed.
Creating a Realm
Oracle ACFS Security realms provide the capability to classify file system objects into functional groups to provide fine-grained access control to data stored in these objects.
Realms are created at the file system level. To enforce security on the file objects in a realm, a ruleset is associated with a command rule which is then applied on the realm.
To create a realm, follow these steps:
Cloning a Realm
Cloning a realm creates a new realm with all the objects of which the cloned realm consists. To clone a realm, follow these steps:
Adding Objects to a Realm
Once a realm is created, you can add objects to a realm. To add objects to a realm, follow these steps:
Deleting Objects from a Realm
You can delete various objects from a realm. If a file or directory is removed from a realm, it is not subjected to security or encryption that is enforced on the realm. If a command rule is deleted from a realm, it is not evaluated while enforcing security on the realm. The command rule still continues to exist for use in other realms. If an encryption object is removed, it disables encryption on the realm and results in decryption of all encrypted files in the realm.
To delete an object from a realm, follow these steps:
Deleting a Realm
You can delete a realm from an Oracle ACFS file system. After a realm is deleted, access to all objects that were part of the realm is reverted to the state prior to their addition to the realm. These objects are not subjected to security and encryption that were enabled on the realm.
To delete a realm, follow these steps:
Viewing Realms
To view realms, follow these steps:
-
From the Oracle ASM home page, select the ASM Cluster File System tab to display the mount points in the cluster file system.
For information about the Oracle ASM home page and how to access that page, see "Accessing the Oracle Automatic Storage Management Home Page".
-
Click the Mount Point that contains the realms you want to view. The Oracle ACFS home page is displayed for this mount point.
-
Click the Security/Encryption tab.
-
In the Security section, click Realms. The list of realms in the file system is displayed.
Managing Encryption Features with Oracle Enterprise Manager
This section describes how to manage encryption with Oracle Enterprise Manager.
For more information about Oracle ACFS encryption, refer to "Oracle ACFS Encryption".
Initializing Oracle ACFS Encryption
To initialize Oracle ACFS encryption, follow these steps:
-
From the Oracle ASM home page, select the ASM Cluster File System tab to display the mount points in the cluster file system.
For information about the Oracle ASM home page and how to access that page, see "Accessing the Oracle Automatic Storage Management Home Page".
-
Click a mount point in the list.
-
Click the Security/Encryption tab to display the Security and Encryption section.
-
In the Encryption Configuration section, you can specify various options, such as Unset Encryption Parameters.
-
If Oracle ACFS encryption is not initialized in the cluster, the Initialize Encryption button displays. Click the button to initialize Oracle ACFS encryption. This operation needs to be performed only once in the cluster.
Enabling, Disabling, and Setting Parameters for Encryption On an Oracle ACFS
To enable, disable, or set parameters for Oracle ACFS encryption, follow these steps:
- From the Oracle ASM home page, select the ASM Cluster File System tab to display the mount points in the cluster file system.
- Click the Mount Point that contains the realms you want to view. The Oracle ACFS home page is displayed for this mount point.
- Click the Security/Encryption tab.
- Click Encryption Configuration link to display the Encryption configuration section.
Managing Tagging Features with Oracle Enterprise Manager
This section describes how to manage tagging with Oracle Enterprise Manager.
For more information about Oracle ACFS tagging, refer to "Oracle ACFS Tagging".
Adding a Tag in Oracle ACFS
You can add tags to directories and files that reside in a single Oracle ACFS file system or across multiple Oracle ACFS file systems. With the tag names, you can organize your files or perform operations, such as search and replication.
To add tags for specific files or directories from the ASM Cluster File System Page, follow these steps:
Removing a Tag in Oracle ACFS
You can remove tags for specific files or directories in an Oracle ACFS file system. Optionally, you can recursively apply the remove operation to all subdirectories and files.
To remove tags, follow these steps:
Searching for Tags in Oracle ACFS
You can search for tags from selected files and directories in an Oracle ACFS file system. Optionally, you can recursively apply this operation to all subdirectories and files. To search for tags for specific files or directories in an Oracle ACFS file system, follow these steps: