PSU Kernel ACFS Security Patch July 2017

PSU Kernel ACFS Security Patch July 2017

Will apply July 2017 PSU on our 2 nodes RAC cluster on RH 7.4, at the same time our SA (System Administrator) also suggested to upgrade the Linux Kernel from 327 to 693, latest Red Hat  (linked on 12/25/2017)

Operating System: Red Hat 7.4 – how to check operating system
OS Kernel: 3.10.0-327.36.3.el7.x86_64 #1 SMP (current)
OS Kernel: 3.10.0-693.5.2.el7.x86_64 #1 SMP (after upgrade)
Database: Oracle – 12c – how to check/verify Oracle Database Version/Release

4 tasks & 3 days (Summary)

  • July 2017 PSU started 11/27 @ 10 am

    1. On node 2 only: stop oem agent, stop GG, stop ACFS filesystem, stop CRS
    2. Patch GI Home – one by one patch, NO opatchauto (will start on node# 2)
    3. Patch DB Home – one by one patch, NO opatchauto
    4. Start CRS & verify all the resources, & ACFS filesystem is back/online/mounted (this is optional, this might come online on one node, but should NOT be mount/online on the node to be patched, otherwise have to bring it down/offline again)
    5. After successfully completing all these steps on single node (node# 2) will do all these steps on the 2nd node (node# 1)

    After done with all these above steps:
    1. Make sure ACFS is online/available/mounted on both nodes
    2. Now from anyone node/instance
    3. Run datapatch -verbose
    4. Verify patching status from/within the database
    5. Make sure ACFS is available/online/mounted
    6. Start Golden Gate
    Here your July 2017 PSU Patching is completed – Task# 1 is completed

2a. Kernel Upgrade started 12/4 @ 10 am

2b. ACFS patching (same day) 12/4 after Kernel Upgrade
stop gg, acfs, db services, stop crs on one node only (node 2)
apply ACFS patch
start crs
verify all the resources are back up and running
verify ACFS is back & mounted
login to db and run datapatch
and verify from/within db about patching status
after patching completed successfully, need to verify patch info using opatch utility
after confirmation
make sure ACFS is up/running
start GG

3. Security Patch started 12/8 @ 10 am

Note: steps 2a & 2b will be done on the same day.


Need to apply July 2017 PSU on our 12c 2 nodes RAC cluster (we have 4 clusters in total, 8 nodes)
OS: Red Hat Enterprise Linux Server release 7.4 (Maipo)
Database:  (Grid + ASM)
Oracle Golden Gate is configured on ACFS (shared storage)

Nov 27, 2017


  1. Apply 2017 July PSU for Grid & DB
  2. Upgrade Red Hat Enterprise Server Kernel
  3. Patch ACFS
  4. Apply Critical Security Patch

Leave a Reply

Your email address will not be published.