preparation:

login by a/c system user, reset below a/c

alter user DBSNMP account unlock;
alter user dbsnmp identified by password;
alter user sys identified by password;

. oraenv

input pdhptlt10g

emca -config dbcontrol db -repos create

STARTED EMCA at Nov 3, 2010 2:16:52 PM
EM Configuration Assistant, Version 10.2.0.1.0 Production
Copyright (c) 2003, 2005, Oracle.  All rights reserved.

Enter the following information:
Database SID: pdhptlt10g
Listener port number: 15037
Password for SYS user:
Password for DBSNMP user:
Password for SYSMAN user:
Email address for notifications (optional):
Outgoing Mail (SMTP) server for notifications (optional):
-----------------------------------------------------------------
You have specified the following settings

Database ORACLE_HOME ................ /opt/oracle/product/10.2.0.4.0.as

Database hostname ................ ydcrh04
Listener port number ................ 15037
Database SID ................ pdhptlt10g
Email address for notifications ...............
Outgoing Mail (SMTP) server for notifications ...............
-----------------------------------------------------------------
Do you wish to continue? [yes(Y)/no(N)]: Y
Nov 3, 2010 2:17:14 PM oracle.sysman.emcp.EMConfig perform
INFO: This operation is being logged at /opt/oracle/product/10.2.0.4.0.as/cfgtoollogs/emca/ptlt10g/emca_2010-11-03_02-16-52-

Nov 3, 2010 2:17:16 PM oracle.sysman.emcp.EMReposConfig createRepository
INFO: Creating the EM repository (this may take a while) ...
Nov 3, 2010 2:18:30 PM oracle.sysman.emcp.EMReposConfig invoke
INFO: Repository successfully created
Nov 3, 2010 2:18:34 PM oracle.sysman.emcp.util.DBControlUtil secureDBConsole
INFO: Securing Database Control (this may take a while) ...
Nov 3, 2010 2:18:37 PM oracle.sysman.emcp.util.PlatformInterface executeCommand
WARNING: Error executing /opt/oracle/product/10.2.0.4.0.as/bin/emctl config emkey -repos
Nov 3, 2010 2:18:37 PM oracle.sysman.emcp.util.DBControlUtil secureDBConsole
WARNING: Configuring EM-Key failed.
Nov 3, 2010 2:18:37 PM oracle.sysman.emcp.EMDBPostConfig performConfiguration
WARNING: Error securing Database control.
Nov 3, 2010 2:18:37 PM oracle.sysman.emcp.EMDBPostConfig setWarnMsg
INFO: Error securing Database Control, Database Control has been brought up in non-secure mode. To secure the Database Control execute the following command(s):
 1) Set the environment variable ORACLE_SID to pdhptlt10g
 2) /opt/oracle/product/10.2.0.4.0.as/bin/emctl stop dbconsole

(手动改正/opt/oracle/product/10.2.0.4.0.as/ydcrh04_pdhptlt10g/sysman/config/emoms.properties)

oracle.sysman.eml.mntr.emdRepConnectDescriptor=(DESCRIPTION\=(ADDRESS_LIST\=(ADDRESS\=(PROTOCOL\=TCP)(HOST\=ydcrh04)(PORT\=15037)))(CONNECT_DATA\=(SERVICE_NAME\=pdhptlt10g)))

 3) /opt/oracle/product/10.2.0.4.0.as/bin/emctl config emkey -repos -sysman_pwd < Password for SYSMAN user >
 4) /opt/oracle/product/10.2.0.4.0.as/bin/emctl secure dbconsole -sysman_pwd < Password for SYSMAN user >
 5) /opt/oracle/product/10.2.0.4.0.as/bin/emctl start dbconsole
 To secure Em Key, run /opt/oracle/product/10.2.0.4.0.as/bin/emctl config emkey -remove_from_repos -sysman_pwd < Password fo
r SYSMAN user >
Nov 3, 2010 2:18:37 PM oracle.sysman.emcp.util.DBControlUtil startOMS
INFO: Starting Database Control (this may take a while) ...
Nov 3, 2010 2:20:16 PM oracle.sysman.emcp.EMDBPostConfig performConfiguration
INFO: Database Control started successfully
Nov 3, 2010 2:20:16 PM oracle.sysman.emcp.EMDBPostConfig performConfiguration
INFO: >>>>>>>>>>> The Database Control URL is http://ydcrh04:1158/em <<<<<<<<<<<

Error securing Database Control, Database Control has been brought up in non-secure mode. To secure the Database Control execute the following command(s):

 1) Set the environment variable ORACLE_SID to pdhptlt10g
 2) /opt/oracle/product/10.2.0.4.0.as/bin/emctl stop dbconsole
 3) /opt/oracle/product/10.2.0.4.0.as/bin/emctl config emkey -repos -sysman_pwd < Password for SYSMAN user >
 4) /opt/oracle/product/10.2.0.4.0.as/bin/emctl secure dbconsole -sysman_pwd < Password for SYSMAN user >
 5) /opt/oracle/product/10.2.0.4.0.as/bin/emctl start dbconsole

 To secure Em Key, run /opt/oracle/product/10.2.0.4.0.as/bin/emctl config emkey -remove_from_repos -sysman_pwd < Password for SYSMAN user >

[oracle@ydcrh04 utility]$ . oraenv
ORACLE_SID = [pdhptlt10g] ?
The Oracle base for ORACLE_HOME=/opt/oracle/product/10.2.0.4.0.as is /opt/oracle/product
[oracle@ydcrh04 utility]$ emctl stop dbconsole
TZ set to Hongkong
Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation.  All rights reserved.
http://ydcrh04:1158/em/console/aboutApplication
Stopping Oracle Enterprise Manager 10g Database Control ...
 ...  Stopped.
[oracle@ydcrh04 config]$ emctl config emkey -repos -sysman_pwd password
TZ set to Hongkong
Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation.  All rights reserved.

The Em Key has been configured successfully.
[oracle@ydcrh04 config]$ emctl secure dbconsole -sysman_pwd password
TZ set to Hongkong
Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation.  All rights reserved.
http://ydcrh04:1158/em/console/aboutApplication
DBCONSOLE already stopped...   Done.
Agent is already stopped...   Done.
Securing dbconsole...   Started.
Checking Repository...   Done.
Checking Em Key...   Done.
Checking Repository for an existing Enterprise Manager Root Key...   Done.
Generating Enterprise Manager Root Key (this takes a minute)...   Done.
Fetching Root Certificate from the Repository...   Done.
Updating HTTPS port in emoms.properties file...   Done.
Generating Java Keystore...   Done.
Securing OMS ...   Done.
Generating Oracle Wallet Password for Agent....   Done.
Generating wallet for Agent ...    Done.
Copying the wallet for agent use...    Done.
Storing agent key in repository...   Done.
Storing agent key for agent ...   Done.
Configuring Agent...
Configuring Agent for HTTPS in DBCONSOLE mode...   Done.
EMD_URL set in /opt/oracle/product/10.2.0.4.0.as/ydcrh04_pdhptlt10g/sysman/config/emd.properties
   Done.
Configuring Key store..   Done.
Securing dbconsole...   Sucessful.
[oracle@ydcrh04 config]$ emctl start dbconsole
TZ set to Hongkong
Oracle Enterprise Manager 10g Database Control Release 10.2.0.4.0
Copyright (c) 1996, 2007 Oracle Corporation.  All rights reserved.
https://ydcrh04:1158/em/console/aboutApplication
Starting Oracle Enterprise Manager 10g Database Control ............................
 started.
------------------------------------------------------------------
Logs are generated in directory /opt/oracle/product/10.2.0.4.0.as/ydcrh04_pdhptlt10g/sysman/log

https://ydcrh04:1158/em/

Manually configure the Oracle 10g EM dbconsole