NAC agent and configuration of NHPS with ISE 1.1.1

I try to get all the workstations (OSX and Windows) install the begging native NAC Agent and Assistant during the on-board process.

I currently use portal default comments to EHT.

The environment has been implemented using a design of dual SSID.

For the moment, devices can plug the SSID of provisioning and get the CWA. Recording device works, the portal is running the installer of NHPS that correctly implements the network card.

The problem is that the portal never tries to install the NAC Agent.

Has a political client provisioning policies for wired and wireless as well as BONES. Each strategy includes a PSN and Agent NAC configuration. It seems that portal comments only checks the configuration of PSN and not the NAC Agent config.

Any ideas?

Just if I understand correctly, you are using both a client provisioning portal and a native Portal begging provisoning related policies separate authz.

With that road you check to see if the customer is consistent in the political portal provisioning client.

Let me know if you have following configured (windows OS in the example), this implies that endpoint is statically assigned to RegisteredDevices after native pursueth provisioning.

Rule 0 (Group of endpoint = RegisteredDevice) AND (AD:Domain user and authentication method: x 509 and posturestatus: COMPATIBLE) = access allowed

Rule 1 (Group of endpoint = RegisteredDevice) AND (AD:domain user authentication method: x 509 [If you have deployed the certs to the State native supp] AND workstation NOT EQUAL: COMPLIANT) client provisioning RESULT portal.

Rule 2 (endpoint = Workstation group) AND RESULTS (AD:Domain user AND breed authentication using mschapv2) provisioning windows portal

Hope that helps,

Tarik Admani
* Please note the useful messages *.

Tags: Cisco Security

Similar Questions

  • difference between cisco NAC agent and cisco Clean Access Agent

    Hi all

    If anyone has the idea on different between cisco NAC agent and cisco Clean Access Agent, please let us know your ideas.

    Thank you

    In 4.6, the agent has been revised and is now called the NAC agent.  Previous versions were called the clean access Agent.  So roughly, 4.5 and 4.1.3.2 agent are own access agents, and agents 4.6.x and 4.7.x are called NAC agents.

    Some of the changes are moving a lot of the agent configuration in an XML file, redesign of the GUI, adding a service portion (of the sort that the agent of heel is no longer necessary) and the best journaling agent.

  • Question commissioning of the ISE NAC agent

    I downloaded the NAC agents and modules of conformity to the ISE and configured the client provisioning rules. The user guide is not really explain very good next steps.

    I guess because the identity of the user groups are used in politics, commissioning is used with webauth, is that correct?

    Jeppe,

    The commissioning customer is done with any authentication method. Whether via dot1x or webauth, it is the authorization policy that starts this process. You redirect your customers customer provisioning portal using the authorization policy. Then, you determine which agent (web agent, agent nac or no agent) through the client provisioning policy.

    Hope that helps,

    Tarik Admani
    * Please note the useful messages *.

  • ISE - profile of the NAC agent

    Dears

    I want to deploy via GPO NAC agent and I need to create the agent profile, I know how to create on ISE, but how to get the file in xml format which will be distributed?

    You can try to install only a single PC (whether by a manual installation or captive portal). If you have set up rules of posture while ISE then the NAC Agent automatically contacts the ISE server and downloads the last NACAgentcfg.xml.

    Then you can browse the following directory and find the NACAgentcfg.xml file in your PC.

    C:\Program Files (x 86) \Cisco\Cisco NAC Agent

    After that, you can deploy mass agent of the NAC as well as the xml file. Well that is not required to deploy the xml file as a I said, every time, there is a rule of posture the NAC agent will download the last available the ISE Server NACAgentcfg.xml.

    Please rate if this can help.

  • Wireless network adapter is not installed and configured

    I have recently re installed windows vista for my laptop dell inspiron 1545. I am not able to connect to wireless internet, it says that the wireless network adapter is not installed and configured. How do I install it and where can I get the wireless network adapter. I have a cd or anything for it. Thank you

    You can get in trouble with your device drivers, firmware and/or software.  Go to the Device Manager by going to start / find and type Device Manager and enter and then double-click on the program icon that appears.  Check each device to a red x, yellow! or white?  These identify devices with problems probably (drivers, but also of conflict or something else).  Click on each for more details and troubleshooting tips.  If you need to get drivers (and you shouldget from Dell for the wireless adapter at all you have time to do - they can help way beyond simply solve this problem), let the computer dealer or the manufacturer of the device (NOT of Microsoft Updates).  In fact, you must disable automatic updates in Windows Update driver as follows:http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/. Follow these steps to get the drivers: http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm.  Once you have the drivers, you can install them via the Manager device as follows:http://www.vistax64.com/tutorials/193584-device-manager-install-driver.html. > http://support.microsoft.com/kb/244617.

    The adapter is inside the laptop.  You don't need to do something with it to install it.  Install the drivers, firmware or software for it and your version of Vista from Dell (all that apply) "install".  You must then go to start / Control Panel / Network and sharing Center and configure the adapter with the appropriate parameters and to establish the appropriate network connections.  This will take place in settings required by your ISP, and maybe your router or modem (so you may need to contact them if you don't know the settings).

    Here are the procedures for Vista with Windows7 network layout that can help:http://www.windowsnetworking.com/articles_tutorials/Windows-7-Understanding-Network-Administration-Configuration.html.

    Here is another article on home networks (with several links to related articles which must all be considered - as well as others, you will find in the related articles) to help you better understand the home networks: http://windows.microsoft.com/en-US/windows-vista/Setting-up-a-home-network.  If it's for Vista, much of it applies to Windows7 (although there may be some differences that should be addressed in the previous article).

    Here is an article on the networking of the different versions of Windows:http://windows.microsoft.com/en-us/windows7/Networking-home-computers-running-different-versions-of-Windows.

    Here is a tutorial on how to set up a home network (including a wireless)-click on additional links for more information that may be helpful:http://windows.microsoft.com/en-US/windows-vista/Setting-up-a-home-network.

    Here is an article on troubleshooting network connections wireless (with links):http://windows.microsoft.com/en-US/windows-vista/Troubleshoot-network-connection-problems.

    Here's a long guide on wireless internet connections in Vista:http://www.techwarelabs.com/guides/misc_mod/vistaconnection/.

    Here is an article on how to set up wireless internet in Vista:http://www.clpgh.org/usingthelibrary/technology/wireless/WindowsVista.pdf.

    As I am unsure of your Setup, I've included several items that can help depending on how you are setup.

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • NAC Agent recognizes bad OS

    I have a laptop windows 7 where the NAC agent think it's windows XP. It fails the NAC checks because he wants to ServicePack 3 must be installed. Has anyone already this issue or know where the NAC agent provides for what operating system it is?

    Just getting worse, I reinstall windows 7 but I was wondering if anyone could provide any idea for me?

    Johnathan,

    We have encountered this problem before. Check the properties for the executables of the NAC Agent and make sure that compatibility mode is not set to Windows XP.

    Doug

  • NAC agent don't popup configure what ORGANIZATIONAL unit in Active Directory

    Hi expert,

    I need help problem on NAC L2OOB-VG, the NAC server and client version 4.7.2. My problem is:

    -Before I use NAC ADSSO with Windows Server 2003 Active Directory and everything work fine. Untrust popup of the NAC agent connection users, authenticate users and users of action switch for trust to Vlan.

    -Now my DC have a problem so I upgrate this DC to Windows Server 2008 SP2 and configure the OU, Active Directory, I create OUS and move users to OR for simple management, after that I configured ktpass and service ADSSO in the NAC has start.

    So now my problem is:

    -Agent NAC users connection not popup and does not authenticate users.

    -When I move this users in UO to the domain users, popup will for the Attorney to the NAC and authenticate the user.

    How can I configure NAC in consultation with users in UO?

    Thank you for any assistance.

    Hello

    You have defined LDAP search servers to use with your SSO AD? All maps are you doing?

    Faisal

  • ASA 5525 X Anyconnect configuration with ISE 2.1

    I have a new deployment of ISE 2.1 which is used only for the management of the devices at the moment.  The intention is that it will serve as radius for authentication of our VPN server.

    5525 x is a brand new ASA runs the 9.4 code.  I want to configure VPN on the SAA strategy so that each user is assigned a DAP based on their Department.

    I already have the designation of the Department for user accounts assigned in AD through a group membership.  I don't know how to get ISE to belonging to a group at the ASA so that she can associate the user based on this correct in RAP group membership.

    I succumbed to determine how this is supposed to work.  Thanks for any help.

    @Jonathan Harrison ,

    Normally we authenticate and authorize users and then push DACL or allow connection from ISE etc. of such conditions profiles that check results Posture or parts constituting the identity of the user (such as AD or another external identity store belonging to a group).

    There are a couple of good guides to do so, including detailed examples:

    https://communities.Cisco.com/docs/doc-68158

    http://www.Cisco.com/c/en/us/support/docs/security/Adaptive-Security-app...

    http://www.Cisco.com/c/en/us/support/docs/security/AnyConnect-secure-mob...

    While they focus on the case of use of Posture, they can be adapted to add other uses. For example, ISE registration condition may be the result of not only a Posture check also membership in a given group or another if you make it a State.

    I do not think we can specify to the ASA to call a given font of DAP like Hostscan module cannot be used at the same time that the module ISE Posture. However, you should be able to accomplish just about everything you used to depend on the DAP with ISE Posture Module AnyConnect (assuming you have AnyConnect 4.x Apex licenses).

    If you want to stick with the ASA DAP model, you can forgo using policies and module ISE Posture and instead create an authorization profile (result) to send the ASA, a pair of RAY - V based on a correspondence (in the authorization of the ISE policy) with the ad group. He is a "Cisco-VPN-3000" A - V called "PIX7x-members-from' that can be used in ASA dynamic access policies. You can see (and all other pairs A - v supported buy ISE) here:

    https://communities.Cisco.com/docs/doc-67894

  • ASA VPN with ISE and different backends WBS for authentication

    Hello

    I have an AAA-problem I hope to have a few problems help.

    The problem ultimately is: how the ASA via ISE send Radius Access requests to different given OTP backends provided a connection to a certain group of Tunnel.

    BACKGROUND:

    I'll try to give you a brief picture of the scenario, this is what I currently have.

    A VPN system (ASA 8.4 (4)) where I let my users to choose among 3 different methods of authentication being

    (1) certificate (on chip card)

    (2) token - token of the OTP (One Time Password provided via the smartphone application: using pledge of Nordic OTP-Edge transport server)

    (3) SMS - OTP token (Nordic OTP - Edge transport server SMS OTP)

    The choice corresponds to different groups of profiles/Tunnel connection.

    Today, all authentication requests go directly to the OTP server and authorization goes directly to the AD via LDAP.

    THE PROBLEM:

    The problem occurs when I try to put in the ISE in the mixture.

    What I obviously (?) would like to do is have all the network authentication/authorization to go through my ISE platform to take advantage of a centralized administration, monitoring etc.

    Again I would need to use data bases different backend such as AD and Nordic OTP - Edge server, but then mandated by ISE.

    For me to be able to know what back-end AAA to the proxy system, to somehow be able to distinguish the incoming Radius Access-requests.

    WHAT WE CALL:

    At the time of the ASA 8.4.3 Radius access request contains 2 new attributes, the name of Group of Tunnel and the Type of customer, when a VPN user connects.

    http://www.Cisco.com/en/us/docs/security/ASA/asa84/configuration/guide/ref_extserver.html#wp1802187

    QUESTION:

    The seams, that I can achieve what I want by looking at the access request attribute Radius "Tunnel Group Name" and forward my request to different backends OTP for the authentication part therefore in theory. But, how do I actually go ahead and set that up in ISE?

    I don't see this attribute when I look at the details of Radius Authentication for an authentication AAA of the ASA at the ISE.

    Best regards

    / Mattias

    I think you can hit the following problem:

    CSCtz49846: ISE does not match the condition with VPN 146 Tunnel-Group-Name attribute

    This issue is not specific to this attribute, as shown in the solution shown in the accompanying note

    Workaround

    Ensure that the attribute name does not include a '.' character. This also applies to some of the existing attributes in the dictionary of Cisco-VPN300. Attribute names should be changed so that they do not include a "." character.

  • How to configure a VM with multiple network cards to see Agent?

    How to configure a VM with multiple network cards to see Agent?

    We can archive this requirement by configuring the subnet used view Agent.

    The subnet determines which view address of Network Agent provides the server instance to connect to view for the client protocol connections. The view on VM officer has more than one NIC

    Follow the procedure below:

    on a display Agent installed VM,

    * Recording of VM session.

    * RUN--> type regedit or type regedit.exe at the command prompt

    * Create a registry entry to configure the subnet.

    For example: is HKLM\Software\VMware, Inc. \VMware VDM\Node Manager\subnet = n.n.n.n/m type - REG_SZ.

    In this example, n.n.n.n is the TCP/IP subnet, and m is the number of bits in the subnet mask.

  • Deploy and configure Agent 12 c has failed

    Hi all

    We are trying to install 12 management agent using the method to push the current WHO 11.1 agent
    so far, we have applied the patch to upgrade console pre and don't have not upgraded to 12 c SGD again.
    We use 1 uproach system upgrade. and use the push agent of our current 11g SGD method to deploy and configure the agent of 12 c.
    I'm confused with the user name and password in the credentials section root, we do not have password oracle as we use power broker. and we either root password.
    When I try to run the task, it fails
    I asked the unix guy to help out me, they said that they can not install sudo as we don't use it.
    Please help am I missing something here.

    on the other hand, I installed the agent 12 c on 5 hosts of the 59 that we have since I got the root password it went smoothly.

    Thank you
    SJ

    Youe query is not clear to me. 12 c agent is not supported with EM 11 g SGD.

    When you use 1 system upgrade, you must use the pre-upgrade console to deploy agents and go through the process of upgrading the agent. In this console pre-upgrade, born to provide to the agent you install user to install the agent 12 c and switch.

    If this installation agent user has no root privilliges or if you have any credentials to the root, and then enter the credentials for the agent. In this case, the root.sh script is not run, but the deployment is successful. Make sure that you run this script after deployment of the Management Agent, before manually to use the new Enterprise Manager 12 c cloud control system. Otherwise, you will not be able to perform tasks on the Management Agent. If the root.sh script is not executed, passage of the Management Agent is not affected.

    Oracle 12 c, the existing connectivity between the former Agent of management and WHO is used to deploy and configure the Management Agent; SSH is not used.

    Refer to the upgrade guide:
    http://docs.Oracle.com/CD/E24628_01/upgrade.121/e22625/TOC.htm

  • How to install and configure the virtual machine with XP as an operating system on a Machine running Vista

    How to install and configure the virtual machine and XP operating system inside, with vista as my work machine.

    * original title - how to install and configure the computer virtual and XP operating system inside, with vista as my work machine.*

    How to install and configure the virtual machine and XP operating system inside, with vista as my work machine.

    Hey Preethi23

    It comes to the installation of vista operating system instance

    read the links below

    http://www.Microsoft.com/Windows/Virtual-PC/support/Virtual-PC-2007.aspx

    http://www.Microsoft.com/Windows/Virtual-PC/support/FAQ.aspx

    http://www.Microsoft.com/downloads/en/details.aspx?FamilyId=04d26402-3199-48A3-afa2-2dc0b40a73b6&displaylang=en

    Walter, the time zone traveller

  • Guest access with ISE and WLC LWA

    Hi guys,.

    Our company try to implement access as guest with dan ISE WLC with the local Web authentication method. But there is problem that comes with the certificate. This is the scenario:

    1. the clients are trying to connect wifi with guest SSID

    2. once it connects, you can open the browser and try to open a Web page (example: cisco.com)

    3, because guests didn't connect, so this link redirect to "ISE Guest Login Page" (become): url

    https://ISE-hostname:8443/guestportal/login.action?switch_url= https://1.1.1.1/login.html&wlan=Guest&redirect=www.cisco.com/

    )

    4. If there is no Login to ISE not installed comments Page, no reliable connection of message message, but it will be fine is they "Add Exception and install the certificate".

    5. once the Guest Login Page will appear and you can enter their username and password.

    6 connection success and they will be redirected to www.cisco.com and there pop-up 1.1.1.1 (IP of the Virtual Interface WLC) with the logout button.

    The problem occur in scenario 6, after the success of the opening session, the Web page with the address and the error of certificate ISE IP to 1.1.1.1 is appear.

    I know that it happened when you can has no Page of Login of WLC certificate...

    My Question is, is there a way of tunneling WLC certificate to EHT? Or what we can do for ISE validate certificate WLC, invited didn't need to install the certificate WLC / root certificate before you connect to the Wifi?

    THX 4 your answer and sorry for my bad English...

    Do not mix WLC with ISE comments Portal local Web authentication. Choose one or the other. I suggest the portal + WLC CWA.

  • What will happen with my agent and active Windows 8, I will have bought with the laptop after I swap HDD with SSD?

    Original title: replacement disk and windows.

    Hello guys.

    I am considering buying a new laptop. The model that I found and I like has a HARD drive if I want to replace it with the SSD to the format of my previous laptop. (Due to the low energy consumption, greater speed, etc.). So I have a 256 gb SSD in my previous loan of laptop replace new one HARD disk, yet what will happen with my agent and active Windows 8, I will have bought with the laptop?

    I can reinstall windows 8 on the SSD, but I don't have a key to activate their... How will I be able to get the key from previous series if the laptops will only work with a recovery partition these days here? I asked a guy in the store, I buy my laptop since and he told me that he does not know and I have to ask for help. However, to create a message of support I need a serial number of the model I did not because I have not yet bought a laptop, so I don't know what to do... I really don't want to stick with the HARD drive, but also I can't afford another model.

    Is it possible to do a recovery with my laptop disk when I get it, then replace the drive with my SSD and run the recovery disc I made?

    The laptop I want to buy is an Asus if that helps...

    Thanks in advance...

    The 'Raw' State is not necessary, it is the State of any drive (SSD drive or hard drive) would be in if you just remove a disk new in box and will need to be "initialized", since you have already used the player already initialized sound.

    Do not format the drive, rather than delete all existing partitions, (the SSD shows then as being "unallocated"). Now you are ready to restore the backup Image you created. During the restore process Acronis will recreate the partitions that were on the hard drive on your SSD.

    J W Stuart: http://www.pagestart.com

  • doubt Doc ID 1618305.1 how to install and configure the user interface for content with WebCenter content 11.1.1.8.0

    doubt Doc-ID 1618305.1 How to install and configure the user interface with WebCenter content 11.1.1.8.0 content

    The portal_domain field contains;

    AdminServer (admin) and Enterprise Manager, (port 7001)

    IBR_server1, (port 16250)

    UCM_server1, (port 16200)

    WC_Spaces1, (port 8888).

    On the same machine, I have another weblogic, admin and for the ITS.

    The case is that continued to develop for the upgrade to the new skin WebCenter content.

    That's my goal.

    Then I did some research and came to the following notes in support.

    1 - how to install and configure the UI content with WebCenter content 11.1.1.8.0 and 11.1.1.9.0 (Doc ID 1618305.1()

    https://support.Oracle.com/epmos/faces/DocContentDisplay?_afrLoop=290841671406625 & ID = 1618305.1 & _afrWindowMode = 0 & _adf. CTRL-State = c7eq7vwdt_216

    and

    2 - update of the 11.1.1.8.0 UI content after you apply the Patch of Bundle WebCenter content 3 (MLR 3) or higher (Doc ID 1617477.1()

    https://support.Oracle.com/epmos/faces/DocContentDisplay?_afrLoop=291485823387355 & ID = 1617477.1 & _afrWindowMode = 0 & _adf. CTRL-State = c7eq7vwdt_245

    The UCM_server1 has the following House / app / oracle / Middleware / Oracle_ECM1 /.

    And the list of patches;

    ===================================================================================================

    Installed products of higher level (1):

    Oracle WebCenter content management install 11.1.1.8.0

    There are 1 products in this House of Oracle.

    Installed products (40):

    Cloning of the 11g Application Server 11.1.1.8.0 component

    Enterprise Manager Application Server Integrator Plugin - Management Service Support11.1.1.7.0

    FMW Control Plugin for Oracle inbound refinery 11.1.1.8.0

    FMW Control Plugin for Oracle WebCenter Capture 11.1.1.8.0

    Component install SDK 11.1.0.9.0

    Oracle Application Server Configuration 11.1.1.7.0

    Part of Oracle 11.1.1.7.0 Bali

    Oracle 11.1.1.8.0 capture

    Common files Oracle WebCenter content management 11.1.1.8.0

    Oracle Content Server 11.1.1.8.0

    Content of Oracle 11.1.1.8.0 Server component

    Content access Content Server Oracle 11.1.1.8.0

    Access to the contents of the Oracle Content Server 11.1.1.8.0 files

    Oracle Content Server Core 11.1.1.8.0

    Oracle 11.1.1.8.0 server content distribution

    Oracle extended Windowing Toolkit 11.1.1.7.0

    Oracle Fusion Middleware Admin Config 11.1.1.6.0

    Oracle Help for Java 11.1.1.7.0

    Oracle Help for the Web - UIX 11.1.1.7.0

    Oracle Help for the Web Shared Library 11.1.1.7.0

    Oracle Help share library 11.1.1.7.0

    Ice browser Oracle 11.1.1.7.0

    Oracle IRM                                                           11.1.1.6.0

    Oracle extended JFC Windowing Toolkit 11.1.1.7.0

    One-time correction of Oracle 11.1.0.9.9 installer

    Oracle outside in technology 8.4.0.0.0

    Oracle Remote Client of Intradoc 11.1.1.8.0

    Component of Oracle 11.1.1.7.0 rules

    Oracle SOA 11.1.1.7.0 workflow

    Universal Oracle install 11.1.0.9.0

    Oracle Upgrade Wizard 11.1.1.8.0

    Oracle Upgrade Wizard 11.1.1.8.0

    Upgrade Oracle WebCenter content management 11.1.1.8.0 Assistant

    Oracle WebCenter Capture 11.1.1.8.0

    Oracle Webcenter content - rights 11.1.1.7.0 documentalist

    Oracle WebCenter content - Universal Content Manager 11.1.1.8.0

    Oracle WebCenter content management install 11.1.1.8.0

    Oracle WebCenter content 11.1.1.8.0 management product suite

    Oracle WebCenter content: Imaging 11.1.1.8.0

    OracleAS Documentation 11.1.1.8.0

    There are 40 products installed in this House of Oracle.

    Interim plates (2):

    Patch 18188143: applied the sea Mar 19 17:37:32 BRT 2014

    Patch ID: 17263162

    Created February 5, 2014, 12:56:41 pm

    Bugs fixed:

    15872313, 17184457, 17515691, 16633496, 14317920, 15991141, 16892410

    14071471, 17929776, 13414481, 16042293, 17018964, 17627211, 16768600

    16037162, 14521663, 17768056, 14738077, 16460053, 17567819, 17806416

    15905591, 16080297, 17569908, 17043756, 18139768, 17211093, 17805499

    16418434, 16828356, 16671687, 17039391, 16698130, 17943394, 17632731

    17560900, 14246603, 15941347, 16045712

    Location of patch in the inventory:

    / app/Oracle/middleware/Oracle_ECM1/Inventory/oneoffs/18188143

    Patch location in the storage area:

    /app/Oracle/middleware/Oracle_ECM1/.patch_storage/18188143_Feb_5_2014_12_56_41

    Patch 18088049: applied the sea Mar 19 17:35:58 BRT 2014

    Patch ID: 17182855

    Created February 16, 2014 20:35:48 hrs PST8PDT

    Bugs fixed:

    17919101, 17894065, 17884570, 17883868, 17883112, 17854549, 17835742

    17832305, 17819213, 17812338, 17789722, 17783376, 17778867, 17761746

    17740542, 17733871, 17698852, 17658821, 17642431, 17636186, 17622384

    17616664, 17616611, 17616489, 17613656, 17608703, 17589960, 17581458

    17574153, 17567413, 17565564, 17558210, 17558068, 17546505, 17545841

    17540480, 17528590, 17514070, 17511368, 17511271, 17511089, 17501678

    17500375, 17475733, 17449617, 17421368, 17417817, 17416821, 17416807

    17416771, 17416377, 17416343, 17402732, 17401071, 17401052, 17397875

    17393920, 17393892, 17369286, 17368525, 17368096, 17362858, 17362130

    17354877, 17353764, 17352746, 17335303, 17335290, 17330493, 17324707

    17323595, 17323038, 17317268, 17314494, 17313064, 17313052, 17313000

    17312990, 17312933, 17312863, 17312366, 17298386, 17295962, 17290804

    17285105, 17270986, 17261952, 17255019, 17219134, 17216119, 17206903

    17201035, 17200854, 17199763, 17187804, 17185539, 17171852, 17171818

    17164502, 17160600, 17153780, 17074852, 17050451, 17049175, 17026301

    17008220, 17007746, 17007534, 17006378, 16999307, 16999291, 16991380

    16980256, 16980207, 16980196, 16979042, 16961904, 16958142, 16954858

    16941623, 16936055, 16936048, 16936036, 16936020, 16936006, 16935987

    16935976, 16921682, 16908287, 16858148, 16815976, 16796213, 13931337

    17424037, 17006115, 17171834

    OPatch succeeded.

    ==============================================================================================

    And contains the following configurations in config.cfg

    ==============================================================================================

    SocketAddressHostSecurityFilter = 127.0.0.1 | 0:0:0:0:0:0:0:1 | 192.168.1. * | 10.62.1.79

    xPortalSecurityPropagate = true

    Web server = javaAppServer

    AllowUpdateForGenwww = 1

    SearchIndexerEngineName = OracleTextSearch

    IndexerDatabaseProviderName = SystemDatabase

    AdditionalEscapeChars = -: #.

    FileEncoding = UTF8

    MaxQueryRows = 2000

    DisableAuthorizationTokenCheck = true

    IntradocServerPort = 4444

    SchemaPublishInterval = 604800

    SSAllowDelayedProjectWrites = true

    IdcServerThreadQueryTimeout = 120

    DisableQueryTimeoutSupport = false

    MaxSearchConnections = 20

    #Cache

    UseSearchCache = false

    #

    #AdditionalEscapeChars = _: #, -: {-}, has: A, GOLD: GOLD, CAN: CAN, AND: AND at the END:

    # Accesing a content item on a mapped Web URL (WebUrlMap) fails with the error: "unable to retrieve the content. Security access denied» (Doc ID 1639028.1()

    MaxAccountsInSecurityClause = 300

    # end (Doc ID 1639028.1()

    #Search fails for external users in WCC after upgrade to 11.1.1.8.0 (Doc ID 1676468.1()

    DoCaseInsensitiveAcctSearch = false

    # end (Doc ID 1676468.1()

    #MigrationFormatForfApplicationGUID = dCollectionName:dCollectionGUID

    ==============================================================================================

    To my UCM_Server1 content WebCenter.

    As I already have a WebCenter content I have to follow the second part of the note

    How to install and configure the UI content with WebCenter content 11.1.1.8.0 and 11.1.1.9.0 (Doc ID 1618305.1).

    Install and configure content WebCenter ADF WebUI against WebCenter Content Server

    Step 1) install the MDS schema

    (Step 2), install the Weblogic Server

    11 GR 1 material step 3) DOWNLOAD and install Oracle Application Development Framework (11.1.1.6.0) in the new WebUI WLS Middleware House, found here

    Step 4) Download and apply Patch 16, 546 129.

    Step 5) Download and apply Patch 16, 546 157.

    Step 6) download and apply the Patch and then 19,469,801, 18,102,108 Patch

    Step 7) copy the wccadf files in the field of user interface

    Step 8) Oracle on demand services (MDS) metadata registry

    Step 9) Place the WebCenter content domain user interface model

    Step 10) run the Setup Wizard on the new home of Middleware WebUI to create the new domain

    Step 11) updated the Oracle ADF of shared libraries

    Step 12) start the domain WebUI administration server

    Step 13) Save target Managed Server with the MDS repository and create the metadata partition

    Step 14) start the server managed WebUI.

    Step 15) associate UI WebCenter content to Content Server.

    Step 16) reboot the WebUI ADF server managed.

    Step 17 access the WebUI

    Step 18) complete the Configuration of the workflow

    Step 19) apply the latest Patch Bundle content UI of WebCenter

    MY DOUBT IS:

    To read the steps that I understood, to 19, with success, in the end, I will have an another WebLogic with a domain name and its respective EM.

    I have two servers weblogic?

    portal_domain (explained above) and a new wccui_domain wls and domain.

    This fix it?

    Two WLS to keep WebCenter portal and content, and other elements.

    Because I'm not able to do with the WLS even where I UCM_server1 today?

    Thanks for all suggestions and criticism.

    To read the steps that I understood, to 19, with success, in the end, I will have an another WebLogic with a domain name and its respective EM.

    I have two servers weblogic?

    portal_domain (explained above) and a new wccui_domain wls and domain.

    This fix it?

    Two WLS to keep WebCenter portal and content, and other elements.

    Because I could not do with the WLS even where I UCM_server1 today?

    Yes, up to 11.1.1.9.0, you will need to install a new wls House (new wls server admin) and then configure WCC ui there. User interface and COE will not work in the same field. You can have the portal and content under the same House of wls and install a new one for the user interface.

    This is due to a problem with ADF and WCC libraries.

    With 12 c, this dependence is not there, and you can install / configure all 3 (Portal, content and adf ui) applications on the same domain.

Maybe you are looking for