Configuring Secure Network Communications for SAP

ProcedureTo Install the SAP Cryptographic Library

  1. Extract the contents of the SAP Cryptographic Library installation package.

  2. Copy the library file and the configuration tool (sapgenpse.exe) to the directory specified by the application server's profile parameter DIR_EXECUTABLE.

    In the following example, this directory is represented with the notation $(DIR_EXECUTABLE).

    Windows NT:

    • DIR_EXECUTABLE: <DRIVE>:\usr\sap\<SID>\SYS\exe\run\

    • Location of SAP Cryptographic Library: <DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll

  3. Check the file permissions for the SAP Cryptographic Library. Make sure that <sid> adm (or SAPService <SID> under Windows NT) is able to execute the library's functions.

  4. Copy the ticket file to the sec sub-directory in the instance directory $(DIR_INSTANCE).

    Windows NT:

    • DIR_INSTANCE: <DRIVE>:\usr\sap\<SID>\<instance>

    • Location of the ticket: <DRIVE>:\usr\sap\<SID>\<instance>\sec\ticket

  5. Set the environment variable SECUDIR to the sec sub-directory.

    The application server uses this variable to locate the ticket and its credentials at run-time. If you set the environment variable using the command line, then the value may not be applied to the server's processes. Therefore, setting SECUDIR in the start-up profile for the server's user or in the registry (Windows NT) is recommended.


    Note –

    These instructions are available at http://help.sap.com/saphelp_erp2004/helpdata/en/96/709b3ad94e8a3de10000000a11402f/frameset.htm