5 Domain Configuration
Use WebLogic Remote Console to make configuration changes to your WebLogic Server domain through its Administration Server.
Connect to an Administration Server
You can connect to a running WebLogic Server domain through its Administration Server and then manage its configurations using WebLogic Remote Console.
After you connect successfully, you can begin managing your WebLogic Server domain. To understand how WebLogic Remote Console presents a domain structure, see Perspectives in the Administration Server Provider.
You can view and update the connection details for an Administration Server provider in the Providers drawer.
Connect using SSL/TLS
If you want to connect to a WebLogic Server domain using SSL/TLS, you may need to perform some additional configuration steps in WebLogic Remote Console.
If you specified HTTPS for the domain URL when you connected to the Administration Server, then WebLogic Remote Console uses SSL/TLS to communicate with the domain.
The SSL/TLS connection requires trust in the WebLogic Server domain, where the trust configuration is handled by the underlying JDK JSSE support. By default, the JDK uses the cacerts
truststore provided with the JDK. If the domain requires additional trust, separate trust, or is using the WebLogic Server demo trust, then you’ll need to configure SSL/TLS trust.
You can either use WebLogic Remote Console to specify the type and location of the trust store (as described below), or use the keytool
utility to import the required trust certificates into the cacerts
truststore supplied with the JDK. See The keytool Command in Java Development Kit Version 17 Tool Specifications.
Configure Web Authentication
You can delegate authentication of users from WebLogic Remote Console to an external authentication service.
By default, WebLogic Remote Console uses the Basic HTTP authentication scheme to authenticate users. If you want to replace Basic authentication with another authentication scheme, perhaps to support a single sign-on flow, you can enable the Use Web Authentication option to send users through an alternative login process, using the browser.
Note:
This functionality is only available on domains running WebLogic Server 14.1.2.0.0 or later.
When web authentication is enabled, the default Basic authentication HTTP header is replaced by using a WebLogic Server token for REST communications. Users are sent to a login endpoint that is generated by taking the domain URL of the connected Administration Server and then adding the Remote Console Helper Context Path (the default is console
), and then login
. For example, the full URL might look like: https://administrationServer:7002/console/login
.
In the URL, notice that the protocol is https
and the port number is 7002
(the default port number for the SSL/TLS listen port). To use web authentication, you must configure SSL/TLS.
Web authentication in WebLogic Remote Console is facilitated by the WebLogic Remote Console Helper, an application included with WebLogic Server. If necessary, you can customize settings for this application to fit your web authentication process.
For user accounts that are authenticated through the embedded LDAP server (WebLogic Authentication provider) or another supported LDAP or RDBMS authentication provider, you do not need to perform any further configuration.
However, if you want to authenticate virtual users, you must make these users known to WebLogic Server by adding them to an LDAP or RDBMS authentication provider as the REST communication from WebLogic Remote Console does not directly support the use of virtual users.
The general process for setting up web authentication is as follows:
Enable SAML 2.0 SSO for WebLogic Remote Console
If you configure WebLogic Server as a SAML 2.0 Service Provider site, you can use it to implement single sign-on (SSO) functionality for WebLogic Remote Console.
For an overview of the steps required to set up web authentication in WebLogic Remote Console, see Configure Web Authentication.
Note:
As this functionality relies on web authentication, it is only supported on domains running WebLogic Server 14.1.2.0.0 or later.
Connect using a Proxy Server
You may need to configure settings for a proxy server to facilitate communication between WebLogic Remote Console and a WebLogic Server domain that resides in a different network.
You can configure a global proxy server that applies to all Administration Server connections or you can assign proxy server settings individually to each Administration Server connection.
You can also configure a combination of global and individual settings; the individual proxy server settings will override the global proxy server settings.
Change Network Timeout Settings
You can change the default settings for the connection and read timeout limits used with a WebLogic Server domain from WebLogic Remote Console.
- Go to File, then Settings. (On macOS, go to WebLogic Remote Console, then Settings.)
- Under the Networking section, in the Administration Server Connection Timeout field, specify an interval (in milliseconds) to determine how long the WebLogic Remote Console should wait for a successful connection to a domain. The default is 10 seconds (10 000 milliseconds).
- In the Administration Server Read Timeout field, specify an interval (in milliseconds) to determine how long the WebLogic Remote Console should wait for a response from the server. The default is 20 seconds (20 000 milliseconds).
- Click Save to apply your changes.
When changing network timeout settings, the primary impact will be to the response time for Console threads, while the application will show no data when a timeout occurs. Timeouts are more likely to occur during requests where WebLogic Server experiences longer initialization or execution times, such as during runtime monitoring actions of servers.
Disable Host Name Verification in Connections to the Domain
When using WebLogic demo trust to connect to a domain, it may be necessary to disable host name verification.
When host name verification is disabled, WebLogic Remote Console does not verify that the host name in the URL to which a connection is made matches the host name in the digital certificate that the server sends back as part of the SSL connection.
- Go to File, then Settings. (On macOS, go to WebLogic Remote Console, then Settings.)
- Under the Networking section, under Disable Host Name Verification, select Yes to disable host name verification or No to enable host name verification.
- Click Save to apply your changes.
Using Java System Properties
WebLogic Remote Console supports the use of Java system properties to customize the console if a specific setting is not available.
Note:
If the equivalent setting already exists in the Settings dialog box, we recommend using that configuration option instead of a Java system property. For example, use the Proxy Address option under Networking rather thanhttps.proxyHost
and https.proxyPort
.
To add a Java system property to WebLogic Remote Console:
- Go to File, then Settings. (On macOS, go to WebLogic Remote Console, then Settings.)
- Under the Other Java System Properties section, click + to add a new row and enter the Java system property as a name-value pair, separated by
=
. For example,server.port=8092
.
To delete a property, select the row and click -.
Examples
Usage | Syntax |
---|---|
To set the When WebLogic Remote Console establishes a connection with the WebLogic Server domain, a HTTP cookie is established with the Web Browser session. For security reasons, the |
Set both properties:
|
To specify an alternative location for the JDK. |
javaPath=pathToJDK |
To specify a custom logging configuration file so you can control the logging information that WebLogic Remote Console collects. The custom logging configuration file must follow the Java format for configuration files. You can see an example of a Java logging configuration file at If a problem occurs with your custom logging configuration file, WebLogic Remote Console will fallback to use its default logging configuration file. |
java.util.logging.config.file=<path-to-logging.properties> |
Configuring a WebLogic Server Domain
After you connect to an Administration Server with WebLogic Remote Console, you are ready to make configuration changes to your domain.
For a comprehensive explanation of domain configuration in WebLogic Server, see Understanding Oracle WebLogic Server Domains in Understanding Domain Configuration for Oracle WebLogic Server.
In WebLogic Remote Console, it is a generally two step process to apply configuration changes to your domain.
Step One: Edit
When you make changes to your domain, they are saved in a Pending state. They are not active in the domain but you can make changes in other areas without losing them and even if you log out of WebLogic Remote Console, the domain will retain those changes.
You can see your pending changes in the Shopping Cart. In the Shopping Cart, click View Changes. If you cannot see specific changes in the Shopping Cart, Install the WebLogic Remote Console Extension.
WebLogic Remote Console protects your edits from being overwritten by other users by enforcing a configuration lock that prevents other users from making changes to the domain during your editing session. You will retain this lock until you commit (or discard) your changes.
Note:
The configuration lock only prevents conflicts from other users. If you use the same user account to log in to another WebLogic Server system administration tool such as the WebLogic Scripting Tool (WLST), then WebLogic Server considers both sessions as the same edit session.
Avoid using making changes using multiple tools simultaneously. When one session commits its changes, it releases the configuration lock and discards changes from the other session.
Step Two: Commit
When you are satisfied with your changes, you must commit them for the changes to apply to the domain. Open the Shopping Cart and then click Commit Changes.
Some configuration changes apply to the domain immediately - these are called dynamic changes. Other configuration changes require a server restart to take effect and are called non-dynamic changes. A server restart required icon appears beside any attribute that is non-dynamic.
Note:
If your set of changes contains both dynamic and non-dynamic changes, then none of the changes will take effect until after a server restart. This ensures that the configuration changes are not partially, and potentially imperfectly, implemented.WebLogic Remote Console releases the configuration lock after your changes are committed.
You may not need to restart all servers to apply non-dynamic changes. In the Monitoring Tree, go to Environment, then Servers to see which servers require a restart.
Note:
Any actions are performed within the Monitoring Tree or Security Data tree perspectives do not require a commit step. They are active immediately after the changes are saved.Back Up Configuration Files
You can set WebLogic Server to save a domain's existing configuration state before pending changes are committed. If you ever need to reverse a change, then WebLogic Server has the previous set of configuration files (including the central configuration file, config.xml
) available as a back up.
Backups of the previous configuration files are saved in the DOMAIN_HOME/configArchive
directory, in JAR files named config-1.jar
, config-2.jar
, and so on. The archived files are rotated so that the newest file has a suffix with the highest number. For more information, see configArchive in Understanding Domain Configuration for Oracle WebLogic Server.
Perspectives in the Administration Server Provider
The Administration Server provider is split into multiple perspectives, each of which focuses on a different management area for a WebLogic Server domain.
- Edit Tree: an editable view of the WebLogic Server domain. Use this perspective when you want to make changes and commit them to the domain.
- Configuration View Tree: a read-only view of the WebLogic Server domain. Enter this perspective if you want to see the current settings of the domain, without making any changes.
- Monitoring Tree: an overview of the runtime statistics for the running domain. You can view statistics per server or aggregated across all servers in the domain. For example, compare applications running on Server1 vs. applications running on one or more servers. The Monitoring Tree also provides some control operations such as starting and stopping servers or applications.
- Security Data Tree: an editable view of the security providers' data in the security realm. This includes users, groups, policies, and so on.
Note:
Although the Edit Tree and the Configuration View Tree perspectives look similar, they are generated from two separate collections of configuration MBeans, which results in important and distinct nuances between the two perspectives:- Changes made in the Edit Tree perspective do not appear in the Configuration View Tree perspective until you commit them, or, for non-dynamic changes, until you restart the server.
- Certain dynamically computed domain contents do not appear in
the Edit Tree. For example,
- Dynamic clusters (and their servers)
- Situational configurations
- Changes made from the command line using system properties
- Changes to some production mode-related settings
For more information on the differences between editable Configuration MBeans and read-only Configuration MBeans, see Managing Configuration Changes in Understanding Domain Configuration for Oracle WebLogic Server.
Where do I?
The majority of domain configuration is performed within the Edit Tree perspective. However, there are some tasks that are performed in the Monitoring Tree or the Security Data Tree perspectives. These tasks do not require a commit step and become active immediately after your changes are saved.
Note:
The Configuration View Tree perspective is read-only and no management tasks are performed within it. Therefore, it's not included in this table.Table 5-1 Tasks in Each Perspective
Task | Edit Tree | Monitoring Tree | Security Data Tree |
---|---|---|---|
Start or stop a server | ✔ | ||
Deploy an application | ✔ | ||
Start or stop an application | ✔ | ||
Configure servers, clusters, and machines | ✔ | ||
Manage access control | ✔ | ||
Manage users, groups, roles, policies | ✔ | ||
Configure security providers | ✔ | ||
Configure database connectivity | ✔ | ||
Configure messaging | ✔ | ||
Diagnose domain issues | ✔ | ||
Configure SSL/TLS | ✔ | ||
Create dashboards | ✔ |
Access Limitations
To prevent unauthorized changes to your WebLogic Server domains, WebLogic Remote Console limits its functionality based on a user's role.
If you log in as a user whose role has limited permissions, WebLogic Remote Console automatically adjusts its user interface to conceal the areas to which you do not have access. Users with the administrator role have full access to WebLogic Remote Console.
If you want to see the full user interface of WebLogic Remote Console, regardless of your current role, then open File then Settings. (On macOS, go to WebLogic Remote Console, then Settings.) Under the Role Checking section, set Restrict Content Based On Role to No and click Save. A user with limited permissions can now see everything but they are still blocked from performing any actions beyond the scope of their role.
Note:
These restrictions are based on the default security policies assigned to each role. If you customize the policies to add or remove access beyond the default policies, those changed permissions will not be reflected in WebLogic Remote Console. It will continue to hide or show functionality based on the default security policies.
For more information, see Users, Groups, And Security Roles in Securing Resources Using Roles and Policies for Oracle WebLogic Server.
Table 5-2 provides some examples of the limitations that users in non-Administrator roles might encounter.
Table 5-2 Access Limitations based on Role
Role | Limitations |
---|---|
Deployer | User can view but not edit server or domain configurations. They can also modify areas related to application deployment including some JDBC and JMS resources. |
Monitor | User access to WebLogic Remote Console is entirely read-only. |
Operator | User can start and stop servers but cannot see the Edit Tree perspective. |
Configure Managed Servers
Managed Servers are subordinate servers that are managed indirectly through the domain's Administration Server.
In a typical production environment, you should create one or more Managed Servers in the domain to host business applications and only use the Administration Server to configure and monitor the Managed Servers.
You can configure Managed Servers as standalone instances or organize them into clusters. See Managed Servers and Managed Server Clusters in Understanding Oracle WebLogic Server.
Create a Managed Server
This process creates a standalone Managed Server. If you want to add the Managed Server to a cluster, follow the instructions in Assign a Managed Server to a Cluster.
Start a Managed Server
Start a Managed Server from WebLogic Remote Console.
Node Manager starts the server on the target machine. When the Node Manager finishes its start sequence, the server's state is indicated in the State column.
Configure Startup Arguments for a Managed Server
In most environments, Node Manager can start a server without requiring you to specify startup options. However, if you have modified your environment, such as adding classes to the WebLogic Server class path, you must specify startup options before you can use WebLogic Remote Console to start a server.
Configure Clusters
A WebLogic Server cluster consists of multiple WebLogic Server server instances running simultaneously and working together to provide increased scalability and reliability.
A cluster appears to clients as a single WebLogic Server instance. The server instances that constitute a cluster can run on the same machine or be located on different machines. You can increase a cluster’s capacity by adding additional server instances to the cluster on an existing machine or you can add machines to the cluster to host the incremental server instances. Each server instance in a cluster must run the same version of WebLogic Server. See Understanding WebLogic Server Clustering in Administering Clusters for Oracle WebLogic Server.
You can also create dynamic clusters which consist of server instances that can be dynamically scaled up or down to meet the resource needs of your applications. A dynamic cluster uses a single server template to define configuration for a specified number of generated (dynamic) server instances. For more information, see Dynamic Clusters in Administering Clusters for Oracle WebLogic Server.
Create a Cluster
Create a WebLogic Server cluster.
- In the Edit Tree, go to Environment, then Clusters.
- Click New.
- Enter a name for the cluster.
- Click Create.
Assign a Managed Server to a Cluster
You can add an existing Managed Server to clusters.
- If you haven't already, create a cluster. See Create a Cluster.
- Shut down the Managed Server. You cannot change the cluster of a running server.
- In the Edit Tree, go to Environment, then Servers.
- Select the Managed Server you want to add to a cluster.
- From the Cluster drop-down list, select the cluster where you want to assign this Managed Server.
- Click Save and commit your changes.
- Start the Managed Server.
Create a Dynamic Cluster
Create a cluster that dynamically scales depending on the resource needs of your applications.
Consider configuring elasticity on the cluster to control how the cluster scales up or down. See Configuring Dynamic Clusters in Configuring Elasticity in Dynamic Clusters for Oracle WebLogic Server for more information.
Remove a Server from a Cluster
You can remove a Managed Server from a cluster without deleting the server instance from the domain.
- In the Edit Tree, go to Environment, then Servers.
- Select the Managed Server you want to remove from a cluster to make it a standalone server instance.
- From the Cluster drop-down list, select None.
- Click Save.
Define a Singleton Service
A singleton service is a service running on a Managed Server that is available on only one member of a cluster at a time. WebLogic Server lets you automatically monitor and migrate singleton services from one server to another.
Note:
Singleton services can only be migrated automatically within a cluster. Ensure that you have created and configured a cluster and its member server instances.
By default, the singleton service iterates through all servers in the cluster to determine the list of candidate servers for migration.
Create a Server Template
Server templates define non-default settings and attributes that you can apply to a set of server instances.
When you create a server template and then apply it to Managed Servers, you can specify configuration attributes once and then propagate the new attribute settings to server instances without manually configuring each one. When you need to update an attribute, you can simply change the value in the server template, and the new value takes effect in all of the server instances that use that server template. You can also add a server template to a cluster, then all of the servers within the cluster will inherit the server template. See Server Templates in Understanding Domain Configuration for Oracle WebLogic Server.
If you need to define any server-specific attributes, you can easily override the server template at the individual server level.
- In the Edit Tree, go to Environment, then Server Templates.
- Click New.
- Enter a unique name for the server template.
- Click Create
After you create a server template, you can configure its attributes as you would configure a traditional Managed Server.
Apply a Server Template
Server templates define common configuration attributes for a set of server instances in one centralized location. When you apply a server template to a Managed Server or a cluster, the server instances inherit the configurations from the server template.
- To apply a server template to a standalone Managed Server:
- In the Edit Tree, go to Environment, then Servers.
- Select the Managed Server where you would like to apply the server template.
- From the Template drop-down list, select a template. You can also click More ︙ to create and apply a new server template.
- Click Save.
- To apply a server template to a cluster:
- In the Edit Tree, go to Environment, then Clusters.
- Select the cluster where you would like to apply the server template.
- From the Template drop-down list, select a template. You can also click More ︙ to create and apply a new server template.
- Click Save.
Configure Machines
A machine is the logical representation of the computer that hosts one or more WebLogic Server instances. Each Managed Server must be assigned to a machine.
As part of the machine configuration process, you'll also configure each machine in your domain to communicate with Node Manager, a program used to control WebLogic Server instances. A single Node Manager instance is used to control all of the server instances running on the same physical machine. These instances can reside in different clusters, domains, and so on. See About Node Manager in Administering Node Manager for Oracle WebLogic Server.
- In the Edit Tree, navigate to Environment, then Machines.
- Click New.
- Enter a name for the new machine.
- Optional: If you are creating a machine that will run on a UNIX platform, select UNIX Machine from the Type drop-down list.
- Click Create.
- Configure the settings of your new machine under Environment, then Machines, then myMachine.
- On the Node Manager tab, configure the following properties:
The new machine entry now specifies the attributes required to connect to the Node Manager process running on the machine, as well as identify which WebLogic Server instances reside on the machine.
Assign a Server Instance to a Machine
As part of the process for setting up Node Manager to administer Managed Servers, you must assign a server instance to a machine.
Note:
You cannot change the machine of a server that's running, therefore you cannot use WebLogic Remote Console to change the machine of the Administration Server. Use an offline tool, such as WLST Offline instead.
- Shut down the Managed Server. You cannot change the machine of a running server.
- In the Edit Tree, go to Environment, then Servers.
- Select the Managed Server that you want to assign to a machine.
- In the Machine drop-down list, select the machine to which you want to assign this server.
- Click Save.
Configure a Virtual Host
A virtual host is a set of host names to which servers or clusters respond. When you use virtual hosting, you use DNS to specify one or more host names that map to the IP address of a server or cluster. You also specify which web applications are served by each virtual host.
- In the Edit Tree, go to Environment, then Virtual Hosts.
- Click New.
- Enter a name for the virtual host.
- Click Create.
- In the Virtual Host Names field, enter the host names for which this virtual host will serve requests. Use line breaks to separate host names.
- In the Network Access Point Name field, enter the dedicated server channel name (NetworkAccessPoint) for which this virtual host serves HTTP requests.
- Click Save.
- On the HTTP tab, configure HTTP attributes for the virtual host as needed. Click Save.
- On the Logging tab, configure the default log file settings for the virtual host as needed. Click Save.
- On the Targets tab, select the servers or clusters where you want to deploy this virtual host.
- Click Save.
Use Custom Classes to Configure Servers
You can create custom Java classes that extend server features or that perform some task when a server instance starts or shuts down.
These startup classes or shutdown classes are loaded by the system class loader and therefore are available to all resources on a server instance even if the resources are managed by different containers. For example, EJBs and JMX clients can access startup or shutdown classes even though their containers use their own, higher level class loaders.
These are system-level classes so you must place them on the server's class path. If you want to make custom classes available to multiple applications but do not need the classes to be available at the system level, consider deploying them as application startup classes.
For more information, see Configuring Server Level Startup and Shutdown Classes in Administering Server Startup and Shutdown for Oracle WebLogic Server.
Configure Startup Classes
You can create custom Java classes that extend server features or that perform some task when a server instance starts.
You must add the startup class to the class path of each server where it is deployed.
Configure Shutdown Classes
You can create custom Java classes that extend server features or that perform some task when a server instance shuts down.
You must add the shutdown class to the class path of each server where it is deployed.
Note:
After you delete a shutdown class, it will run the first time you shut down the server. When you shut down the sever subsequently, it will no longer run.
Configure Network Connections
Configure the network resources for your domain.
As your domain increases in complexity, it is imperative to carefully manage the network resources and connections within your domain to ensure secure and reliable communication between servers and applications.
WebLogic Server uses network channels to organize and define the attributes of its network connections. Among other attributes, network channels can define:
- The protocol the connection supports
- The listen address
- The listen ports for secure and non-secure communication
See Understanding Network Channels in Administering Server Environments for Oracle WebLogic Server.
Each WebLogic Server instance provides default settings for the protocols, listen addresses, and listen ports through which it can be reached. These settings are referred to collectively as the default network channel. This default network channel provides two listen ports through which it receives requests: one for non-SSL/TLS requests and the other for SSL/TLS requests. You can disable one of these ports, but at least one must be enabled.
You can also configure your own custom network channels.
Configure the Domain-Wide Administration Port
An administration port restricts all administrative traffic between server instances in a WebLogic Server domain to a single port. Additionally, only secure, SSL/TLS traffic is accepted and all connections through the port require authentication by a server administrator.
- The Administration Server and all Managed Servers in your domain must be configured with support for the SSL/TLS protocol.
- All servers in the domain, including the Administration Server, enable or disable the administration port at the same time.
See Configure an Administration Port for the Domain in Securing a Production Environment for Oracle WebLogic Server.
- Shut down all Managed Servers in the domain. You cannot enable the administration port dynamically on a Managed Server.
- Ensure that all servers in the domain are properly configured to use SSL/TLS. See Set Up SSL/TLS.
- In the Edit Tree, go to Environment, then Domain.
- Turn on the Enable Administration Port option.
- In the Administration Port field, enter the SSL/TLS port number that server instances in the domain should use as the administration port.
- Optional: If multiple server instances run on the same computer in a domain that uses a domain-wide administration port, then you must perform one of the following actions:
- Host the server instances on a multi-homed machine and assign each server instance a unique listen address
- Override the domain-wide administration port on all but one of the servers instances on the machine. On the Environment: Servers: myServer page for each Managed Server, enter a unique port value in the Local Administration Port Override field.
- Click Save and then commit your changes.
- Restart the Administration Server and start all the Managed Server instances in the domain.
Make sure the connection between the Managed Servers and the Administration Server uses the administration port.
Configure Custom Network Channels
A network channel is a configurable resource that defines the attributes of a network connection to WebLogic Server.
Specify Listen Ports
Define the listen ports for secure and non-secure communication.
Note:
You cannot disable both Listen Port Enabled or SSL Listen Port Enabled. At least one type of listen port must be active.- In the Edit Tree, go to Environment, then Servers, then myServer.
- Enable Listen Port Enabled and enter a port number.
- Enable SSL Listen Port Enabled and enter a port number.
- Click Save.
If you plan to configure a domain-wide administration port, make sure the SSL Listen Port and the Administration Port are set to different port numbers.
Configure General Protocol Settings
You can configure each WebLogic Server instance to communicate over a variety of protocols, such as HTTP, T3, and IIOP. You can also configure a group of communication settings that apply to all protocols.
The general protocol settings apply to connections that use the server's default listen port and listen address. If you create network channels for this server, each channel can override these settings. For more information, see Configuring Network Resources in Administering Server Environments for Oracle WebLogic Server.
- In the Edit Tree, go to Environment, then Servers, then myServer.
- On the Protocols tab, on the General tab, modify the default settings for protocols as necessary.
- Click Save.
- Repeat on applicable servers.
Configure T3 Protocol
T3 is an Oracle proprietary remote network protocol that implements the Remote Method Invocation (RMI) protocol.
Configure IIOP
The IIOP (Internet Inter-ORB Protocol) makes it possible for distributed programs written in different programming languages to communicate over the internet.
For information about using RMI-IIOP in your applications, see Understanding WebLogic RMI in Developing RMI Applications for Oracle WebLogic Server.
- In the Edit Tree, go to Environment, then Servers, then myServer.
- On the Protocols tab, go to the IIOP subtab.
- Turn on the Enable IIOP.
- If you want to modify the default configuration of IIOP (including the default IIOP user credentials), click Show Advanced Fields and update the options as necessary.
- Click Save.
Change the Domain Mode
The domain mode of your WebLogic Server domain determines its default security configuration. Select the domain mode that best meets the security requirements of the environment in which WebLogic Server runs.
The domain modes, in order from least to most secure, are Development Mode, Production Mode, and Secured Production Mode. We recommend that you only use development mode for domains in development or demonstration environments.
The default values for various security configurations will change to match the selected domain mode. See Understand How Domain Mode Affects the Default Security Configuration in Securing a Production Environment for Oracle WebLogic Server.
Note:
As of WebLogic Server 14.1.2.0.0, production mode now turns on secured production mode by default. All new installations of WebLogic Server 14.1.2.0.0 and later follow this behavior. In previous releases, when you enabled production mode, secured production mode was disabled by default and you had to enable it explicitly.
If you upgrade from WebLogic Server 14.1.1.0.0 and earlier, the behavior of your domain mode will not change. For example, when a domain in production mode is upgraded from 14.1.1.0.0 to 14.1.2.0.0 or later, it will remain in production mode with secured production mode disabled. However, if you upgrade your domain to 14.1.2.0.0 or later, and then select production mode as the new domain mode, it will enable secured production mode by default.
Changes to the domain mode can affect the default URL of the Administration Server, specifically the protocol and the port number. When SSL/TLS and the administration port are enabled (by default, both are enabled in secured production mode), the default URL is https://hostname:9002
. When SSL/TLS and the administration port are disabled (by default, both are disabled in development mode), the default URL is http://hostname:7001
.
Resume a Server
If a server in the STANDBY
or ADMIN
state, when you are ready for the server to receive requests other than administration requests, you can resume the server to transition it into the RUNNING
state.
- In the Monitoring Tree, go to Environment, then Servers.
- Select the servers that you want to transition into a
RUNNING
state and click Resume.
Suspend a Server
When you suspend a server, it transitions a server instance from the RUNNING
state to the ADMIN
state. In the ADMIN
state, the server is running, but it is only available for administration operations. This allows you to perform server and application-level administration tasks without risk to running applications.
- In the Monitoring Tree, go to Environment, then Servers.
- Select the servers that you want to transition into an
ADMIN
state. - Click Suspend and choose how the server completes its current tasks:
- When work completes: initiates a graceful suspension, which gives WebLogic Server subsystems and services time to complete certain application processing currently in progress.
- Force suspend now: initiates a forced suspension, in which the server instructs subsystems to immediately drop in-flight requests.
Shut Down a Server
You can use WebLogic Remote Console to shut down a server instance of WebLogic Server.
If you shut down the Administration Server, you won't be able to manage the domain from WebLogic Remote Console until it is restarted.