This appendix describes how to set up multiple EnterpriseOne path codes for auditing and electronic signatures in support of the FDA 21 CFR Part 11 regulation. It contains the following topics:
Section B.1, "Understanding Auditing and Electronic Signatures in Multiple EnterpriseOne Path Codes"
Section B.3, "Creating Required Oracle Table Spaces and Users"
Section B.4, "Creating Julian and Non-Julian Database Data Sources for 21 CFR Part 11"
Section B.7, "Configuring an Oracle Database for 21 CFR Part 11"
Section B.8, "Configuring Auditing and Electronic Signatures for Multiple Path Codes"
You can configure auditing and electronic signatures in EnterpriseOne 9.0 for multiple path codes. This configuration enables you to mimic or test auditing in a "validation" path code prior to promoting changes (auditing or otherwise) to your production environment.
Important:
Auditing of system tables is NOT supported because system tables are shared across multiple path codes. You cannot enable auditing on a system table in one path code when the same system table is already enabled for auditing in another path code.This appendix provides the technical requirements associated with this type of a configuration as well as the effects the configuration has on some of the standard EnterpriseOne administration processes, such as change control, data refreshes, ESU applications, and so forth.
Hereafter in this appendix, the "auditing and electronic signatures" functionality is referred to simply as "auditing" or "21 CFR Part 11."
See the Prerequisites section in the main part of this guide for a full list of tasks that you must perform before configuring auditing for multiple path codes. In addition to the prerequisites, consider the following items before you proceed:
Before upgrading to a new version of JD Edwards EnterpriseOne or applying software updates that contains table changes, you should turn off auditing and electronic signature functions.
Table Conversions. You must disable auditing functionality when performing table conversions. See the Table Conversions section in this guide for more information.
ESUs. You must disable auditing functionality when applying ESUs.
When implementing 21 CFR Part 11 across multiple path codes on an Oracle database, you need to create table spaces to house system/configuration tables used for 21 CFR Part 11. For each path code that you plan to configure, you should create at least four table spaces:
Two table spaces for storing Julian configuration tables.
Two tables spaces for storing non-Julian configuration tables.
To create the table spaces:
Verify the disk space and location for the Julian and no-Julian table spaces for each path code to be audited.
Connect your database via SQWLL Plus.
Log into the database with SYSDBA User and perform the database operations to create table spaces, database users and owners, and grant rights to owners.
Issue the create tablespace command:
Create tablespace XXSYT datafile 'YYYY' size 35M autoextend on
Create tablespace XXSYI datafile 'YYYY' size 35M autoextend on
Create tablespace XXNJT datafile 'YYYY' size 35M autoextend on
Create tablespace XXNJI datafile 'YYYY' size 35M autoextend on
Where:
XX is a denotation of the path code for which you are setting up CFR Part 11, for example DV for Development, PY for Prototype, or PD for Production.
SY indicates the system or configuration tables with Julian dates.
NJ indicates system or configuration tables tat are non-Julian.
T indicates that this is the table space for storing table level information.
I indicates that this is the table space for storing index level information.
YYYY is the location and name of the database data file, for example: /u01/oracle/data/dvsyt01.dbf
Repeat this process for each path code you would like to configure for auditing.
Create the required Oracle database users and owners.
While still logged into the database as a "System" user, issue the following commands:
Create user XXSY identified by password default tablespace XXSYT temporary tablespace TEMP quota unlimited on XXSYT quota unlimited on XXSYI
Create user XXNJ identified by password default tablespace XXNJT temporary tablespace TEMP quota unlimited on XXNJT quota unlimited on XXNJI
Where:
XX is a denotation of the path code for which you are setting up for auditing, for example DV for Development, PY for Prototype, or PD for Production.
SY indicates the system or configuration tables with Julian dates.
NJ indicates system or configuration tables tat are non-Julian.
T indicates that this is the table space for storing table level information.
I indicates that this is the table space for storing index level information.
Repeat this process for each path code you would like to configure for auditing.
You have now successfully created the required database table spaces and users to configure auditing for your identified path codes.
When setting up auditing, you must configure a Julian database data source and non-Julian database data source for the auditing system/configuration tables. To do so:
Sign in to the EnterpriseOne Windows client.
In the Fast Path, enter GH9011.
Drill down into Data Source Management.
Create a Julian Database Data Source.
Open the Database Data Sources application and locate the data source:
Select System - 900.
In the Data Source Name QBE (Query by example) field, enter System - 900.
Click Find.
Select System - 900 in the grid and click Copy.
Enter System - XXSY in the Data Source Name field, where:
XX denotes the path code for which you are configuring auditing, such as DV for Development, PY for Prototype, or PD for Production.
Enter the database server name.
In the Object Owner ID field, enter the database owner, for example: DVSY for Development Julian system and configuration tables.
Click Advanced and make sure the "Use Julian Dates" check box is selected.
Click OK.
Select the Row menu and then select Database Sizing.
This opens the Work with Oracle Database Object Sizing form.
Click the Add button.
In the Object Name field, enter Default.
In the Table Space Name field, enter xxsyt, where:
xx denotes the path code you are configuring for auditing.
In the Index Space Name field, enter xxsyi, where:
xx denotes the path code you are configuring for 21 CFR Part 11.
Click OK.
Click Cancel.
Click OK.
To configure the non-Julian data source:
Open the Database Data Sources application.
Enter System - 900 in the Data Source Name QBE (query by example) field.
Click Find.
Select the System - 900 data source.
Click Copy.
Enter System - XXNJ in the Data Source Name field, where:
XX denotes the path code you are configuring 21 CFR Part 11 for.
NJ denotes that the data source will contain non-Julian tables.
Enter the database server name.
Enter the object owner ID.
Enter the database name.
Click on Advanced.
Clear the Use Julian Dates check box.
Click OK.
Click the Database Sizing Form exit.
Click Add.
In the Object Name field, enter default.
In the Table Space Name field, enter xxnjt, where:
xx denotes the path code you are configuring 21 CFR Part 11 for.
In the Index Name field, enter xxnji, where:
xx denotes the path code you are configuring 21 CFR Part 11 for.
Click OK.
Click Close.
Click OK.
Repeat these steps for each path code for which you are configuring 21 CFR Part 11 in System and all server maps.
After defining the System - XXSY (Julian) and System - XXNJ (Non-Julian) data sources, generate the required OCM mappings.
After creating OCM mappings and data sources, you must restart the EnterpriseOne Windows client for the mappings to take effect.
After defining the System - XXSY (Julian) and System - XXNJ (Non-Julian) data sources, generate the required tables for 21 CFR Part 11 into the new data sources.
In the Fast Path, enter OMW.
In OMW, locate your default project.
Place the following tables in your default project:
F9500001
F9500002
F9500003
F9500004
F9500005
F9500006
F986112
Perform a Get on all of these tables to ensure you have current specifications on your EnterpriseOne Windows client.
Generate the tables into each of the data sources as listed:
System - XXSY data source
F9500001
F9500002
F9500005
F986112
System - XXNJ data source
F9500003
F9500004
F9500006
Repeat these steps for each path code being configured 21 CFR Part 11.
After generating the required tables to the System - XXSY (Julian) and System - XXNJ (Non-Julian) data sources, create the required Object Configuration Manager (OCM) mappings. To do so:
In the Fast Path, enter OCM.
Create OCM mappings for *PUBLIC in the System and Server Maps for all environments that leverage the path codes you are configuring for 21 CFR Part 11.
Map the following tables to the System - XXSY data source:
F9500001
F9500002
F9500005
F986112
Map the following tables to the System - XXNJ data source:
F9500003
F9500004
F9500006
Map the following objects to the LOCAL data source:
B9500001
B9500002
B986112
Map B9500005 to the server that executes the business functions for the path code you are configuring for 21 CFR Part 11.
Repeat the preceding step for each path code you are defining for 21 CFR Part 11.
Note:
You must map the J environments as well.Activate all the mappings.
Restart EnterpriseOne services for:
Enterprise, application, and logic servers.
HTML servers.
To verify that the records have been successfully uploaded:
On the EnterpriseOne Windows client machine, locate and double-click the dbtempates.exe file, located in the system\bin32 directory. For example:
C:\e900\system\bin32\dbtempates.exe
At the prompt to sign in to EnterpriseOne, enter your EnterpriseOne user credentials.
Sign in to the path code and environment you have configured OCM mappings for, such as DV900.
A DOS window appears informing you that records have been successfully uploaded.
Press Enter to close the DOS window.
Important:
For EnterpriseOne Tools releases prior to 8.97, the instructions in the "Configuring the JAS.INI file for Auditing" section of this guide that state to add the following entry in the JAS.INI file to support auditing:[SERVER COMPONENTS]
com.jdedwards.ajsAuditComponent
Ignore this instruction for EnterpriseOne Tools releases 8.98 and higher. For these releases, if you add this to the JAS.INI file, you will not be able to open EnterpriseOne applications.
For auditing to work properly, you must grant database privileges to the owners of the audit tables and audited tables such as PRODDTA, CRPDTA. To do so:
Start SQL PLUCS and connect to the instance as SYS.
For each owner, such as XXSY, XXNJ, PRODDTA, CRPDTA..., enter the following commands:
GRANT CREATE PROCEDURE TO owner
GRANT CREATE TRIGGER TO owner
GRANT SELECT ON V_$SESSION TO owner
GRANT CREATE TABLE TO owner
Restart the application and HTML services.
Note the following items when configuring multiple path codes for 21 CFR Part 11:
When auditing is enabled in EnterpriseOne, the system records changes, additions, and deletions to an audit table (otherwise referred to as a shadow table) to provide a tracking history.
An audit table contains the columns used as the primary key of original table along with any other columns that you define.
For every change to an audited column in an original table (Fxxxx), the audit table records:
Field that was changed.
Previous value in the field.
New value in the field.
Date and time of the change.
Other fields in the table selected for auditing.
Other fields in the table selected for recording.
Form, application, and version name used to make the change.
The user ID that made the change.
The following task provides high-level steps for configuring auditing and electronic signatures in multiple path codes in EnterpriseOne. For more detailed instructions about any particular step, refer to the appropriate sections in the main chapters of this guide.
Important:
Auditing of system tables is NOT supported because system tables are shared across multiple path codes. You cannot enable auditing on a system table in one path code when the same system table is already enabled for auditing in another path code.Make sure that users are signed out of the EnterpriseOne installation that is configured for auditing and electronic signature approvals.
Use the Configuration Application (P9500001) to add the path code to enable auditing and electronic signatures. See Setting Up an Audit and Electronic Signature Configuration for a Pathcode.
Sign off and sign in to EnterpriseOne Windows client and restart EnterpriseOne services when 21 CFR Part 11 is enabled for one path code. Do this for all path codes for which 21 CFR Part 11 is enabled.
After enabling auditing and electronic signatures for a path code, use the Configuration Application (P9500001) to enable auditing for a table. See Configuring a Table for Auditing.
Important:
Provide a different name for the A table when the same table is enabled for auditing on multiple path codes. For example, if F0101 is enabled for auditing, provide the following names:For DV900 path code - A0101DV
For PD900 path code - A0101PD
When you select a table, EnterpriseOne launches Table Design Aid (TDA) and automatically adds all primary key columns of the audited table to the audit table.
If a default index does not exist, TDA creates one for the audit table and populates it with CFRGUID and B4ORAFTR.
After it completes, save the changes to the audit table.
Check in the audit table.
Note:
Before you copy the audit information, you have to promote the audit tables to the path code you are auditing.Remember to provide different names for audit tables when auditing multiple path codes, for example AXXX for one path code and DVXXX for another.