SecureAnyCloud
Deployment guide

Oracle WebLogic 15c

Overview

This guide covers launching, connecting to and administering an Oracle WebLogic Server 15c (15.1.1.0.0) instance from the SecureAnyCloud image on AWS Marketplace. The image delivers WebLogic 15c on JDK 21 LTS, with a preconfigured base_domain AdminServer.

What you get:

  • Oracle WebLogic Server 15c (15.1.1.0.0) on JDK 21 LTS
  • A preconfigured base_domain AdminServer on port 7001
  • A NodeManager on port 5556 for managed-server lifecycle operations
  • A per-instance admin password, generated on first boot
  • Domain administration through the WebLogic Remote Console or the WLST scripting tool

What is Oracle WebLogic Server?

Oracle WebLogic Server is the leading Java EE and Jakarta EE application server for deploying enterprise applications. WebLogic 15c (version 15.1.1.0.0) is the current release line. It supports Jakarta EE applications, JDBC datasources, JMS, EJBs and the full enterprise Java stack.

The AdminServer listens on port 7001 and serves the WebLogic sign-in page. You can also administer the full domain with the WebLogic Remote Console desktop application or the WLST scripting tool. A NodeManager is configured on port 5556 for managed-server lifecycle operations.

Supported Versions

The "Oracle WebLogic Server" listing offers more than one delivery option. This image provides WebLogic 15c (15.1.1.0.0) on AlmaLinux 9 or Oracle Linux 9. The listing also offers WebLogic 14c on Oracle Linux 8. All variants deploy the same core application server, with the base_domain AdminServer configuration and the same first-boot password rotation.

Connecting to Your Instance

The SSH login user is the same on both operating system variants:

  • AlmaLinux 9: ec2-user
  • Oracle Linux 9: ec2-user

Connect with the key pair you selected at launch:

ssh -i your-key.pem ec2-user@<instance-public-ip>

First boot and password generation

On the first boot of your instance, a one-shot first-boot service runs automatically. It does the following:

  • Starts the WebLogic AdminServer.
  • Generates a fresh, cryptographically random admin password that is unique to this instance.
  • Rotates the weblogic user password through WLST.
  • Writes the credentials to /stage/scripts/weblogic-credentials.log (readable by root only).
  • Restarts the AdminServer with the new password.
  • Creates the sentinel file /var/lib/sac/data/weblogic-firstboot.done.

To retrieve your credentials, run:

sudo cat /stage/scripts/weblogic-credentials.log

The file contains the weblogic username, the per-instance password and the domain home path. Treat it as a secret. Only root can read it (chmod 0600).

Verifying the Installation

JDK and WebLogic versions

/u01/java/jdk-21/bin/java -version sudo unzip -p /u01/app/oracle/product/wlserver/server/lib/weblogic.jar META-INF/MANIFEST.MF | grep Implementation-Version
sudo systemctl is-active weblogic.service nodemanager.service
sudo systemctl is-enabled weblogic.service nodemanager.service

WebLogic sign-in page

Open a browser and go to http://<instance-public-ip>:7001/console/welcome/. You should see the Oracle WebLogic Server sign-in page.

After you sign in

Sign in with the username weblogic and the password from /stage/scripts/weblogic-credentials.log. After you authenticate, the WebLogic Server 15.1.1 welcome page appears.

The welcome page confirms that the AdminServer is running. It is the starting point for domain management.

WebLogic Remote Console

WebLogic Server 15c also supports the WebLogic Remote Console for administration. Download it from Oracle:

https://github.com/oracle/weblogic-remote-console/releases

Install the Remote Console on your workstation, then create a new connection with these settings:

  • Connection Type: Admin Server
  • URL: http://<instance-public-ip>:7001
  • Username: weblogic
  • Password: from /stage/scripts/weblogic-credentials.log

The Remote Console is a full domain management interface. Use it to deploy applications, configure JDBC datasources, manage JMS, view server logs and administer security realms.

WLST (WebLogic Scripting Tool)

WLST is a command-line administration tool available on the instance. Switch to the oracle user and start WLST:

sudo su - oracle export JAVA_HOME=/u01/java/jdk-21 /u01/app/oracle/product/wlserver/common/bin/wlst.sh

Connect to the running AdminServer:

connect('weblogic', '<password>', 't3://127.0.0.1:7001')

These WLST commands are useful:

# Show AdminServer runtime state serverRuntime() cmo.getState()
# List deployed applications domainConfig()
ls('/AppDeployments')
# Inspect server configuration serverConfig()
cd('/Servers/AdminServer') ls()
# Exit disconnect() exit()

Managing the WebLogic Services

The weblogic.service systemd unit manages the AdminServer, and nodemanager.service manages the NodeManager. Check their status:

sudo systemctl status weblogic.service --no-pager sudo systemctl status nodemanager.service --no-pager

To start, stop or restart the AdminServer, run:

sudo systemctl start weblogic.service
sudo systemctl stop weblogic.service
sudo systemctl restart weblogic.service

Deploying Applications

To deploy a Java EE application (WAR, EAR or JAR), use the WebLogic Remote Console or WLST. To deploy with WLST, start it first:

sudo su - oracle export JAVA_HOME=/u01/java/jdk-21 /u01/app/oracle/product/wlserver/common/bin/wlst.sh

Then run these commands in WLST:

connect('weblogic', '<password>', 't3://127.0.0.1:7001') deploy('myapp', '/path/to/myapp.war', targets='AdminServer')

Configuring JDBC Datasources

You can create JDBC datasources in the WebLogic Remote Console or with WLST. Here is an example WLST session:

connect('weblogic', '<password>', 't3://127.0.0.1:7001') edit() startEdit() cd('/JDBCSystemResources') cmo.createJDBCSystemResource('MyDataSource')
# ... configure driver, URL, credentials activate()

Installation Layout

Key paths on the instance:

  • /u01/java/jdk-21: JDK 21 LTS (symlink to jdk-21.x.x)
  • /u01/app/oracle/product: WebLogic Middleware home (MW_HOME)
  • /u01/app/oracle/product/wlserver: WebLogic Server home (WL_HOME)
  • /u01/app/oracle/product/user_projects/domains/base_domain: AdminServer domain home
  • /stage/scripts/weblogic-credentials.log: per-instance credentials (root, 0600)
  • /var/lib/sac/data/weblogic-firstboot.done: first-boot sentinel

Security Notes

  • The admin password is unique per instance and is never shared across AMIs.
  • /stage/scripts/weblogic-credentials.log is readable only by root (chmod 0600).
  • Port 7001 is exposed by default for WebLogic management. For production deployments, restrict access with AWS Security Groups.
  • SELinux ships in a non-enforcing mode, because WebLogic's ClassLoader and JNI are not compatible with enforcing SELinux. For production deployments, consider additional OS-level hardening.
  • For additional security, change the admin password after your first login, using the WebLogic Remote Console or WLST.

Support

SecureAnyCloud maintains this image. For technical support, deployment assistance, application configuration, JVM tuning and upgrades, contact SecureAnyCloud support at sales@secureanycloud.com.

Deploy on AWS

Launch Oracle WebLogic Server with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS