Download the latest 11g release (11.1.0.6 now) and don’t be scared about the size
If you have a Metalink account, you can also download the last update (11.1.0.7 now, patchset 6890831) and don’t be scared about the size

2. Install 11.1.0.6 database release
===========================
First, install the 11.1.0.6.
I’m not gonna describe this process here as it’s out of the scope. But there is very well documented on Oracle By Example.
After checking that everything is OK, like running SQL*Plus or SQL Developer and Enterprise Manager Database Console, you should close all the services for upgrading it to 11.1.0.7.

3. Upgrade the software to 11.1.0.7 by applying the patch
=============================================
Stopping the services can be done on Windows in 2 ways:

• Go to Services and stop OracleDBConsole[SID], OracleService[SID] and Oracle[ORACLE_HOME]TNSListener.
• start a console and run the following commands:
  sqlplus / as sysdba
  SQL>    SHUTDOWN IMMEDIATE
  SQL>    EXIT
  emctl stop dbconsole
  lsnrctl stop

Now that the database is down, we can upgrade it to 11.1.0.7
Start the patch installer and upgrade the software.
Start the listener, you can do this in 2 ways:

• go to Services and start Oracle[ORACLE_HOME]TNSListener.
• start a console and run the following command:
  lsnrctl start

4. Upgrade the database to 11.1.0.7 by using DBUA
========================================
Now we should start the Database Upgrade Assistant (DBUA). It will find the database to be upgraded and automatically upgrade it.
In the end, you should start the listener, database and EM console by starting the corresponding services (see above) OR by running the following console commands:

Congratulations, your database is patched. If you don’t want Database Vault you can stop here.

4.1. (alternatively) Upgrade the databse to 11.1.0.7 manually
==============================================
If for any reasons you can’t use DBUA or you don’t want to do this (rolling upgrades, no UI), you can do the DB upgrade from the console as following:

The last thing to upgrade would be the EM Console by running the following command:

Congratulations, your database is manually patched.

5. Install Database Vault
====================
Until 11g, the Database Vault was a stand-alone product. Lots of people are confused and think that the latest version is 10.2.0.3, which is FALSE.
THERE IS A 11G VERSION, shipped with the big installation kit. Now you have one reason for such a big installation kit (another reasons are: Real Application Testing or RAT and Warehouse builder server-side components)

Let’s see how to use it: stop all the 3 services (DB Console, database and listener) OR stop them manually:

Start Oracle Universal Installer and choose Advanced Installation, then pick Custom Edition. Pay attention that Custom always installs an Enterprise Edition !!
Then make sure you are choosing an existing Oracle Home, this is not chosen by default!
Select “Oracle Database Vault” checkbox. You must also install Oracle Label Security (if you haven’t it yet). OUI is also checking by default Oracle Services For Microsoft Transaction Server, but this is not mandatory, you can uncheck it.
Review the components to be installed and proceed to install them.

Open the database by starting all 3 services (listener, database and DB Console) OR start them manually:

6. Register your database with Database Vault
=====================================
Start Database Configuration Assistant from Start->Programs->Oracle – ORACLE_HOME->Configuration and Migration tools OR alternatively from console by running the following command:

Choose “Configure Database Options” and select Oracle Database Vault (and Oracle Label Security) and proceed to credentials page.
Pick a password for DBVOWNER and DBVACCTMGR accounts (you might find this very difficult as Database Vault has very strict password requirements) and proceed. The database is automatically restarted by DBCA.

Go to https://host_name:port/dva and you’re done.

Be aware, some people are making the database just too secure and neither themselves can access it!

Good luck!

Related posts: