Steps to change the APPS, APPLSYS, and APPS_NE password using FNDCPASS or AFPASSWD for EBS 12.2

Whenever using FNDCPASS or AFPASSWD to change the APPS, APPLSYS, and APPS_NE password, we must also perform the following actions:

1. Shut down the application tier services using the below script:

$INST_TOP/admin/scripts/adstpall.sh

2. Change the APPLSYS password using

A. FNDCPASS:
For example, the following command changes the APPLSYS password to 'WELCOME':

FNDCPASS apps/<appspwd> 0 Y system/manager SYSTEM APPLSYS WELCOME

B. AFPASSWD:

AFPASSWD is an enhanced version of FNDCPASS, and includes the following features:

• AFPASSWD only prompts for passwords required for the current operation, allowing separation of duties between applications administrators and database administrators. This also improves interoperability with Oracle Database Vault. In contrast, the FNDCPASS utility currently requires specification of the APPS and the SYSTEM usernames and corresponding passwords, preventing separation of duties between applications administrators and database administrators.
• When changing a password with AFPASSWD, the user is prompted to enter the new password twice to confirm.
• In Oracle E-Business Suite Release 12.2.3 and higher, you can also use the AFPASSWD utility to migrate Oracle E-Business Suite user passwords to a password hashing scheme.

Syntax for using AFPASSWD:
 AFPASSWD [-c <APPSUSER>[@<TWO_TASK>]] -s <APPLSYS>

3. Run autoconfig with the newly changed password.

4. Start AdminServer using the $INST_TOP/admin/scripts/adadminsrvctl.sh script. Do not start any other application tier services.

5. Change the "apps" password in WLS Datasource as follows:

• Log in to WLS Administration Console.
• Click Lock & Edit in Change Center.
• In the Domain Structure tree, expand Services, then select Data Sources.
• On the "Summary of JDBC Data Sources" page, select EBSDataSource.
• On the "Settings for EBSDataSource" page, select the Connection Pool tab.
• Enter the new password in the "Password" field.
• Enter the new password in the "Confirm Password" field.
• Click Save.
• Click Activate Changes in Change Center.

6. Start all the application tier services using the below script

$INST_TOP/admin/scripts/adstrtal.sh

7. Verify the WLS Datastore changes as follows:

• Log in to WLS Administration Console.
• In the Domain Structure tree, expand Services, then select Data Sources.
• On the "Summary of JDBC Data Sources" page, select EBSDataSource.
• On the "Settings for EBSDataSource" page, select Monitoring > Testing.
• Select "oacore_server1".
• Click Test DataSource
• Look for the message "Test of EBSDataSource on server oacore_server1 was successful".

Ref: (Doc ID 1674462.1)