emctl set property \
   -name oracle.sysman.federation.masterEMAuthNProducerName \
   -value EMFederation
Oracle Enterprise Manager ...
Copyright (c) ...
Enter Enterprise Manager Root (SYSMAN) Password : *****
Property oracle.sysman.federation.masterEMAuthNProducerName has
been set to value EMFederation for all Management Servers
OMS restart is not required to reflect the new property value

emctl config apiauth \
  -create_provider \
  -name EMFederation \
  -useDefaults \
  -out EMFederation.json
Oracle Enterprise Manager ...
Copyright (c) ...
Enter Enterprise Manager Root (SYSMAN) Password : *****
Creating Provider named 'EMFederation' with Defaults ...
Successfully created a token provider named 'EMFederation'
The Contents of the provider are:
{"kty" : "oct" ,"kid" : "....-....", "k" : "W20_....."}
The provider details are in the file named 'EMFederation.json'
Commiting the changes ...
Done commiting the changes.
Provider created successfully.
Exit Code: SUCCESS

• Copy the generated JSON file from the primary site to each secondary site.

  This operation is designed to be performed out-of-band from Enterprise Manager.

  Typically, the file is copied using a secure copy command like the following:

  scp <generated_json_file> <em_secondary_site>

  Example:

  scp EMFederation.json em_site1.example.com:.

• Login to each secondary site and create an AuthN Asserter using the JSON file transferred to the respective secondary EM site by running the following:

  emctl config apiauth \
    -create_asserter  \
    -name EMFederation  \
    –in EMFederation.json
  Oracle Enterprise Manager...
  Copyright (c) ...
  Enter Enterprise Manager Root (SYSMAN) Password :  *****
  Registering Asserter Named 'EMFederation' using file 'EMFederation.json' ...
  Commiting the changes ...
  Done commiting the changes.
  Asserter named 'EMFederation' created successfully.
  Exit Code: SUCCESS 

curl -X POST <Primary_EM_host_URL>:<Primary_EM_host_port>/em/websvcs/restful/fed/emSites -u '<EM_user_from_Primary_EM_host>' -H 'content-type: application/json' -d '{"siteURL":
"<EM_site1_URL>:EM_site1_port>", "name": "host"}'

curl -X POST https://primary_em.sample.com:5416/em/websvcs/restful/fed/emSites -u 'user1' -H 'content-type: application/json' -d '{"siteURL":
"https://em_site1.sample.com:5416", "name": "host"}'

• Successful operation: It returns the newly generated EM Site GUID for a successful response. This value will be used in the following step. For example, it will return "422cf85c13354336874a1971c1d57a70" as the EM Site GUID for em_site1.sample.com site.

• Invalid input: It returns an error code and a message for a failed response.

curl -X POST https://primary_em.sample.com:5416/em/websvcs/restful/fed/emSites/422cf85c13354336874a1971c1d57a70/certificates -u 'user1' -H 'content-type: multipart/form-data' -F file=@em_site1.pem

• Successful operation: It returns the Certificate GUID and the PEM content of the file uploaded for a successful response.

• Invalid input: It returns an error code and a message for a failed response.

1. (Optional) Configure groups to view federated Enterprise Manager sites by groups

   Starting with Enterprise Manager 13 Release 5 Update 1 (13.5.0.0.1), group based filtering is supported by configuring groups to view information specific to selected group(s) across federated Enterprise Manager sites.

   Groups are used to logically organize, manage and monitor the targets in individual Enterprise Manager sites or federated Enterprise Manger sites. Creating a federation group in the primary Enterprise Manager enables the federation dashboard to get data specific to the configured groups from the federated Enterprise Manager sites. For example, the super administrator can create groups for specific applications or business units: One group for Customer Service applications and other group for Finance applications. The groups created by the super administrator user are available to all users.

   Requirement:

   • The Primary Enterprise Manager site must have installed Enterprise Manager 13c Release 5 Update 1 (13.5.0.0.1) or higher.
   • The federated Enterprise Manager sites must have installed Enterprise Manager 13c Release 4 Update 9 (13.4.0.0.9) or higher.

   To add a group, you can use the following cURL command:

   curl -X POST https://<Primary_EM_host_name>.<Primary_EM_host_domain>/em/websvcs/restful/fed/composites -u '<EM_user_from_Primary_EM_host>' -H 'content-type: application/json' -d '{ "targetName":"<Group_Name>", "targetType":"composite"}'

   For example, to add a group called "Finance DB", use the following command:

   curl -X POST https://primary_em.sample.com/em/websvcs/restful/fed/composites -u 'superadmin' -H 'content-type: application/json' -d '{ "targetName":"Finance DB", "targetType":"composite"}'

• By Sites

  It allows filtering down data to specific federated group across all federated Enterprise Manager.

  

• By Groups

  It consolidates data for all federated groups across all federated Enterprise Manager sites. This dashboard is useful for users interested to see data only related to the federated groups, and not the whole enterprise.

  

• Get certificate

  curl -X GET <Primary_EM_host_URL>:<Primary_EM_host_port>/em/websvcs/restful/fed/emSites/<EM-SITE_GUID>/certificates -u '<EM_user_from_Primary_EM_host>'

  For example:

  curl -X GET https://primary_em.sample.com/em/websvcs/restful/fed/emSites/422cf85c13354336874a1971c1d57a70/certificates -u ‘user1’

• Delete certificate

  curl -X DELETE <Primary_EM_host_URL>:<Primary_EM_host_port>/em/websvcs/restful/fed/emSites/<EM-SITE_GUID>/certificates -u '<EM_user_from_Primary_EM_host>'

  For example:

  curl -X DELETE https://primary_em.sample.com/em/websvcs/restful/fed/emSites/422cf85c13354336874a1971c1d57a70/certificates -u ‘user1’