Oracle takeover of Sun changes endpoint registration process

After Oracle's takeover of SUN MicroSystems, the registration process for Solaris OS has undergone a change as all SUN hosted sites are now linked with *.oracle.com.We need to register a Solaris endpoint with Oracle inorder to obtain updates (operating system and application patches) using the smpatch/updatemanager tool.

how to register a sun machine for patch update ?

Note : Previously registered machines now show: "No patches required"

Note : In case the registration fails with the following errors, one will need to properly register a new system :  Invalid subscription key , User access denied , Invalid Serial Number , InvalidEntitlementCodeException.

Registration process with Oracle is referenced as MOS - My Oracle Support.

So in future the new terminologies are :
Your Sun Service Plan = MOS CSI number
Sun User Name = MOS Single Sign On

Post  MOS migration, it will be important to know the system serial number when registering via Sun Update Manager (sconadm). The system serial number will also need to be associated to your service support plan.
Inorder to setup the environment for registering the Solaris Machine , following steps must be performed.

For Solaris 10 :

Run the command : "cacaoadm stop"

Install these patches on SPARC in the following order :

1. 124171-08 - SunOS 5.10: SCN Base cacao module patch
2. 121118-18 - SunOS 5.10: Update Connection System Client 1.0.18
3. 123005-09 - SunOS 5.10: Basic Registration Update
4. 123630-04 - SunOS 5.10: HTTP proxy settings patch



OR

Install these patches on x86 (Intel) in the following order :
1. 124187-08 - SunOS 5.10: SCN Base cacao module patch
2. 121119-18 - SunOS 5.10: Update Connection System Client 1.0.18
3. 123006-09 - SunOS 5.10: Basic Registration Update
4. 123631-04 - SunOS 5.10: HTTP proxy settings patch

Run the command : "cacaoadm start"

It is also recommended to install the latest cacao patch, 123893-25 (Sparc) / 123896-25 (X86)


For Solaris 9 :

Run the command : "cacaoadm stop"

Install patch 140476-01 (Sparc) / 140477-01 (X86) if not yet done.

Run the command : "cacaoadm start"

Once the above steps are done ,you need to reconfigure your smpatch setup to connect to the Oracle servers.The followings steps will setup your machine (both Solaris 9  and Solaris 10):

Importing the certificate:

1) Obtain the getupdates.pem file from your patch download automation page (https://support.oracle.com/CSP/main/article?cmd=show&type=ATT&id=1199543.1:WGET3)

The following assumes the file is put in /tmp you can substitute /path/to/getupdates.pem for /tmp/getupdates.pem

2) Import the cacerts into the keystore used by smpatch:

# keytool -import -trustcacerts -file /tmp/getupdates.pem -alias oraclecacerts -keystore
/usr/lib/patch/cacerts

Enter keystore password : changeit

NOTE : the default keystore password of "changeit" was entered into the prompt above.
NOTE : Say "yes" to Trust this certificate prompt.

3) Change the default smpatch/update manager patch source

# smpatch set patchpro.patch.source=https://getupdates.oracle.com/


Registering the Machine :

Now , You need to re-register your machine, please see instructions below to register your machine.

How to register/re-register a machine:

Please use sconadm or updatemanager to re-register. Please read the sconadm manpage for more information how to do it.
http://download.oracle.com/docs/cd/E19253-01/816-5166/6mbb1kqgj/index.html

You need a valid My Oracle support login/passwd, valid CSI, and valid system serial number. *Please note the serial number has to be used as subscription key in the RegistrationProfile.properties file.*
see http://www.oracle.com/us/support/044753.html#updatemanager

Below  is an example of a registration profile and what data you need to enter  (which can be found in /usr/lib/breg/data/RegistrationProfile.properties)

NOTE : In the RegistrationProfile.properties file subscriptionKey is mandatory parameter. If you don't have one contact your Manager/IT department to purchase one.