=============================================================================
Run Date: JAN 11, 2022                     Designation: CHDS*2.2*1
Package : CHDS - CLINICAL DATA REPOSITORY/HEA Priority: Mandatory
Version : 2.2         SEQ #1                    Status: Released
                  Compliance Date: JAN 19, 2022
=============================================================================


Subject: CHDR Technical Update for TRM and Fortify Compliance

Category: 
  - Informational
  - Other

Description:
============

  
 The CHDR application is an interagency data transfer application 
 responsible for synchronizing the Allergy and Pharmacy data for Active 
 Dual Consumer (ADC) patients contained in the DOD's Clinical Data 
 Repository (CDR) and the VA's Health Data Repository (HDR).
  
 The purpose of this patch/upgrade is to bring the CHDR application into 
 TRM, CRISP and Fortify compliance.
  
 Defect Tracking System Ticket(s) & Overview: 
 ============================================ 
 1.      JIRA Task Id: CHDR-139 - CHDS*2.2*1 Release Plan
  
 Problem: 
 -------- 
 The current CHDR java application is not TRM, CRISP nor Fortify compliant.
  
 Resolution: 
 -----------
  
 Compare all current CHDR application libraries to TRM instances and 
 replace non-compliant libraries with compliant libraries.  Upon 
 completion of library updates, execute a Fortify Scan and mitigate all 
 findings.  Update platform components to CRISP compliance which will 
 include upgrade of the operating system, application server and database 
 servers.
  
 OS Upgrade:  Solaris M8 Supercluster per AITC deployment.
 Oracle WebLogic Middleware: Version 12.2.1.4
 Oracle Database: Version 19c
  
 Test Sites: 
 ----------- 
 Since the CHDR application is not directly connected to any VistA sites 
 there are no VA Vista sites associated with this release.  Test support 
 and verification will be provided by VA Test results with concurrence 
 from DOD test results. 
  
 Software and Documentation Retrieval Instructions:
 --------------------------------------------------
  
 The software for this patch is being released as a java electronic 
 archive (.ear) file to be deployed at AITC as a centrally located 
 application.  There is no associated VistA patch to be released to all 
 VistA sites.
  
 Other Software Files:
 ---------------------
  
 All code updates, build, library and properties files will be controlled 
 and stored in the chdr-code Github repository.
  
 Patch Installation:
 -------------------
  
 The patch installation will include submission of the updated newly 
 compiled electronic archive file (.ear file) to the production AITC 
 WebLogic administrator for deployment to the WebLogic domain.
  
 Back-Out/Roll Back:
 -------------------
  
 The back out or roll back of this application will include the 
 replacement of the new .ear file with the previously deployed .ear file 
 and performed by the AITC WebLogic Administrator.
  
  
 Routine Information:
 ====================

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : SEP 21, 2021
Completed By:                               Date Completed: JAN 07, 2022
Released By :                               Date Released : JAN 11, 2022
=============================================================================


Packman Mail Message:
=====================

No routines included