DMZ Configuration For R12

(1) Make sure a cold backup taken before start the DMZ configration:
(2) Startup database and database listener only on both RAC nodes (srohsnoil33 and srohsnoil34)
(3) run the script to change the profile options hierarchy type values to SERVRESP
(3.1) log into primay MT (srohsnoil008) as apsroi1i user
(3.2) $ cd $FND_TOP/patch/115/sql
(3.3) connect as APPS user

$ sqlplus apps/<apps_passwd>
SQL> @txkChangeProfH.sql SERVRESP

(4) Backup xml file first
-- /sroi1i/inst/apps/sroi1i_srohsnoil013/appl/admin/sroi1i_srohsnoil013.xml
-- /sroi1i/inst/apps/sroi1i_srohsnoil009/appl/admin/sroi1i_srohsnoil009.xml
-- /sroi1i/inst/apps/sroi1i_srohsnoil010/appl/admin/sroi1i_srohsnoil010.xml
-- /sroi1i/inst/apps/sroi1i_srohsnoil012/appl/admin/sroi1i_srohsnoil012.xml
-- /sroi1i/inst/apps/sroi1i_srohsnoil008/appl/admin/sroi1i_srohsnoil008.xml
-- /sroi1i/inst/apps/sroi1i_srohsnoil011/appl/admin/sroi1i_srohsnoil011.xml

(4) Run Autoconfig on DMZ node first:
(4.1) Log into DMZ node (srohsnoil013) as apsroi1i user

Backup original xml files first
$ cd $AD_TOP/bin
$ ./adconfig.sh run=INSTE8_SETUP contextfile=/sroi1i/inst/apps/sroi1i_srohsnoil013/appl/admin/sroi1i_srohsnoil013.xml appspass=<apps_passwd>

Log out and log back in to source env files

(5) Run Autoconfig on additional MT's with the following order:
(5.1) Run autoconfig on srohsnoil009

$ cd $AD_TOP/bin
$ ./adconfig.sh run=INSTE8_SETUP contextfile=/sroi1i/inst/apps/sroi1i_srohsnoil009/appl/admin/sroi1i_srohsnoil009.xml appspass=<apps_passwd>

Log out and log back in to source env files
(5.2) Run autoconfig on srohsnoil010

$ cd $AD_TOP/bin
$ ./adconfig.sh run=INSTE8_SETUP contextfile=/sroi1i/inst/apps/sroi1i_srohsnoil010/appl/admin/sroi1i_srohsnoil010.xml appspass=<apps_passwd>

Log out and log back in to source env files
(5.3) Run autoconfig on srohsnoil012
$ cd $AD_TOP/bin
$ ./adconfig.sh run=INSTE8_SETUP contextfile=/sroi1i/inst/apps/sroi1i_srohsnoil012/appl/admin/sroi1i_srohsnoil012.xml appspass=<apps_passwd>

Log out and log back in to source env files

(6) Run Autoconfig on PCP nodes:
(6.1) Run autoconfig on PCP-2 node, srohsnoil011:

$ cd $AD_TOP/bin
$ ./adconfig.sh contextfile=/sroi1i/inst/apps/sroi1i_srohsnoil011/appl/admin/sroi1i_srohsnoil011.xml appspass=<apps_passwd>

Log out and log back in to source env files
(6.2) Run autoconfig on PCP-1 node, srohsnoil008:
$ cd $AD_TOP/bin
$ ./adconfig.sh contextfile=/sroi1i/inst/apps/sroi1i_srohsnoil008/appl/admin/sroi1i_srohsnoil008.xml appspass=<apps_passwd>

Log out and log back in to source env files

(7) Start up the Application only on Primary MT (srohsnoil008)
(8) Log into sroi1i Application, and Verify 'Hierarchy Type' is set to 'Server-Responsibility'

Login to Application as SYSADMIN with Application Developer responsibility.

Navigate to Application Developer ==> Profile
Query for 'APPS_WEB_AGENT' ==> and verify the field 'Hierarchy Type' from 'Security' to 'Server-Responsibility'
Query for 'APPS_SERVLET_AGENT'  ==> and verify the field 'Hierarchy Type' from 'Security' to 'Server-Responsibility'
Query for 'APPS_JSP_AGENT' ==> and verify the field 'Hierarchy Type' from 'Security' to 'Server-Responsibility'
Query for 'APPS_FRAMEWORK_AGENT' ==> and verify the field 'Hierarchy Type' from 'Security' to 'Server-Responsibility'

(9) Node Trust Level profile option verify and/or Change

Change the responsibility to "System Administrator"
Navigate to Profile ==> System ==> Click on 'Server', enter 'srohsnoil013' ==>  Query for the profile option 'Node Trust Level', and scroll on RIGHT to see the server name.
==> Click on find ==> On the server level for srohsnoil013 change value from blank to 'External'
==>  Save the record.

(10) Responsiblities Trust Level profile option verify and/or Change
(10.1) The list responsibilities of DMZ are :
HR Employee Self Service I
HR Employee Self Service II
HR Employee Self Service III
HR Employee Self Service IV
HR Employee Self Service V
HR Employee Self Service VII
HR Employee Self Service VIII
HR Employee Self Service XX
HR Employee Self Service SG

(10.2) As "System Administrator" responsibility ==> Navigate to Profile ==> System ==> Click on 'Responbsibility', enter 'HR Employee Self Service%'
==> Query for "Responsibility Trust Level", scroll on RIGHT to see the Responsibility name

it should show 'External'

(10.3) Repeat Step (9.2) for all the listed responsibilities
(11) Profile Change: The profile change should only occur at SERVER level

(11.1) APPS_FRAMEWORK_AGENT (make sure there's no '/' at the end for SERVER level profile)
As "System Administrator" responsibility ==> Navigate to Profile ==> System
==> Click on 'Server', enter 'srohsnoil013' ==> Query for the profile option 'Application Framework Agent', scroll on RIGHT to see the server name.
==> Click on find ==> on the server level for srohsnoil013 change value to "https://sriamyhcmw.srv.com:443"
==> Save the record.

(11.2) APPS_JSP_AGENT (make sure there's no '/' at the end for SERVER level profile)
As "System Administrator" responsibility ==> Navigate to Profile ==> System
==> Click on 'Server', enter 'srohsnoil013' ==> Query for the profile option 'Applications JSP Agent', scroll on RIGHT to see the server name.
==> Click on find ==> on the server level for srohsnoil013 change value to "https://sriamyhcmw.srv.com:443"
==> Save the record.

(11.3) APPS_WEB_AGENT  (make sure there's no '/' at the end for SERVER level profile)
As "System Administrator" responsibility ==> Navigate to Profile ==> System
==> Click on 'Server', enter 'srohsnoil013' ==> Query for the profile option 'Applications Web Agent', scroll on RIGHT to see the server name.
==> Click on find ==> on the server level for srohsnoil013 change value to "https://sriamyhcmw.srv.com:443/pls/sroi1i"
==> Save the record.

(11.4) APPS_SERVLET_AGENT (make sure there's no '/' at the end for SERVER level profile)
As "System Administrator" responsibility ==> Navigate to Profile ==> System
==> Click on 'Server', enter 'srohsnoil013' ==> Query for the profile option 'Apps Servlet Agent', scroll on RIGHT to see the server name.
==> Click on find ==> on the server level for srohsnoil013 change value to "https://sriamyhcmw.srv.com:443/OA_HTML"
==> Save the record.

(12) Assign one of the Responsiblities in (10.1) to SYSADMIN
-- For example: HR Employee Self Service I
(13) Startup MT processes on PCP-2 node (srohsnoil011)
(14) Startup MT processes on DMZ node (srohsnoil013)
(15) Log into DMZ url (https://sriamyhcmw.srv.com) and verify the resonsibility is accessible