Saturday, December 21, 2019

Installing EPM 11.2: Things Waiting to Trip You Up

Christmas 2019 came early this year, and just about every EPM gear-head I know is trying to install EPM 11.2.0.0 so it may be taken for a spin.

Not so fast!  There's a few things to take care of first!

Christmas Eve 2019 update: Stay tuned!  New information has come in from Oracle and I will update this post after I finish a few plates of Christmas Day ham.  First and foremost, Windows Server 2016  is NOT certified by Oracle for EPM 11.2 at this time.  Please upgrade your sandboxes to Windows Server 2019.  Use Oracle 12 or SQL Server 2016 as your RDBMS until further guidance.

January 2020 update: Oracle's feedback is posted here: EPM 11.2 Certification Matrix post
Look for the text in red font.

EPM 11.1.2.4 only worked up through MS Windows Server 2012 R2.  EPM 11.2 works on 2016 and 2019.  (My previous post about the 11.2 Certification Matrix mentions 2016 as a potential omission)

MS Windows Server 2012 R2 imposed some new changes that weren't a problem for us in 2008 R2.  Server 2016 and 2019 present the same challenges, plus newer ones.

Before doing anything, change this Windows Registry key from 1 to 0 and reboot.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"EnableLUA"=dword:00000000

You will thank me later.  If you find a few days later that the key's value reverted from 0 back to 1, contact your IT department and get an exception to Group Policy Update so your EPM servers are excluded from the change to this key.

Here's the classic symptoms this key is wrong:
  • Pop-up message asking for permission to change something within a directory.
  • You try to pick a folder for the Oracle eDelivery download helper, and it says your access is denied.
  • You manage to try a deployment and notice a folder named "Oracle EPM System" in the root of your Hyperion/EPM drive.
 Now for the fun ones:  Windows Defender and Windows Firewall

Windows Firewall.  Don't stop the service.  Your Remote Desktop session will immediately be terminated and you'll need someone with console access to turn the service back on.  Instead, go into the Windows Firewall settings and turn off notifications and blocking for Domain and Local network.  Leave it turned on for Public network.  Otherwise you will have to deal with a mess of individual port exceptions.

Windows Defender.  Go into the Windows Defender panel and add on-access scanning exceptions for where you're downloading the software to, and where you're installing it to.  Otherwise, look forward to a 20-30% performance degradation.  Unlike 2012 and prior, you can't disable or stop this Windows service.  There are also firewall settings in this service and you'll need to inspect and modify them.

Finally, was the install/config so bad that you need to blow away either user_projects or EPMSystem11R1?  You may hit the "path too long" error Microsoft helpfully introduced.  The poor man's solution is to install freely available 7-zip.  Launch 7-zip, do File->Open and pick the parent folder.  Then left-click the child folder to be deleted, and click Shift-Delete.  This will blow it away without encountering the Microsoft error.

4 comments:

  1. so, I haven't installed on prem in years. I think it was win 2013, but I would like to get a vm setup. I installed win19, download everything, and going through the installation. I am using SQL since I am more familiar with it. Every component configures but fails to deploy. There must be something I am missing for them all to fail. I am doing one at a time, each with a different DB on the relational side, any thoughts on what to look at?

    ReplyDelete
  2. Yes! Something new was introduced in 11.2. An upcoming blog post will guide you through the process, step by step with screenshots. For now, ALL of your web deployments will fail. Delete user_projects\domains\EPMSystem as you will need to recreate the WebLogic domain from scratch and then the deployments will work after following my instructions. I hope to get this post up in the next 8 hours or so.

    ReplyDelete
  3. It soudns like you're talking about the RCU curveball. The RCU was an interesting feature they added.

    Also for people who are using Oracle Databases you need the sys account and put it in the RCU config file.

    ReplyDelete
    Replies
    1. Ding! Ding! Ding! Yes, that's exactly what I was referring to.

      Delete