ICM Parameters - Reference for ABAP and Java

ICM Profile Parameters
Parameter Description Default Value
exe/icman

Specifies the name and path of the ICM.

DIR_EXECUTABLE

icm/accept_remote_trace_level

Specifies whether an external client may change the trace level of the SAP system.

FALSE

icm/authfile Specifies the file name and path of the authorization file that contains the hash values of passwords for ICM administration users.

$(DIR_GLOBAL)$(DIR_SEP) security$(DIR_SEP)data$(DIR_SEP)icmauth.txt

icm/cancel_strategy

Specifies the cases where the ICM is allowed to send a soft cancel to the work process.

1 (cancel is only possible with stateless sessions)

icm/ccms_monitoring
Activates/deactivates CCMS monitoring. Possible values are:
  • TRUE: Activation
  • FALSE: Deactivation

TRUE

icm/ccms_refresh_rate

Interval at which the ICM updates the status information, which is then passed on to CCMS monitoring.

30

icm/conn_timeout

Specifies the maximum duration (in seconds) of a connection to an external partner.

5000

icm/conn_timeout

Specifies the maximum duration (in seconds) of a connection to an external partner.

5000

icm/host_name_full

Specifies the fully qualified host name of the host on which the ICM is running, and which is available for requests. If this parameter is not set explicitly by you, the operating system asks for the host name.

-

icm/HTTP/admin_<xx>

Configures the Web-based administration interface.

icm(HTTP/admin_0 = PREFIX=/sap/admin, DOCROOT=$(DIR_ICMAN_ROOT)/admin, AUTHFILE=$(icm/authfile)

icm/HTTP/auth_<xx>

Sets up access restrictions.

icm/HTTP/auth_0= PREFIX=/, FILTER=SAP

icm/HTTP/error_templ_path

Sets the path where the ICM can find its own ICM error pages.

$(DIR_ICMAN_ROOT)/error_templ

icm/HTTP/file_access_<xx>

Specifies for which URL prefix static file access should be set, and in which directory the static files are stored.

-

icm/HTTP/logging_<xx>icm/HTTP/logging_<xx>

Controls HTTP logging

-

icm/HTTP/logging_Client_<xx>

Controls the logging of outgoing HTTP requests, that is, if the SAP Web AS as a client.

-

icm/HTTP/mod_<xx>

Configures modifications of HTTP requests.

icm/HTTP/mod_0 =PREFIX=/ (no action file)
icm/HTTP/redirect_<xx>

Defines an HTTP redirect. If the client attempts to access the URL in question, the server sends a redirect. This forces the client to access the new destination instead.

-

icm/HTTP/server_cache_<xx>

Configures ICM server cache.

UNIX:PREFIX=/, CACHEDIR=$(DIR_DATA)/cache

Windows:PREFIX=/, CACHEDIR=$(DIR_DATA)\\cache

icm/HTTP/server_cache_<xx>/clear

Forces the deletion of the ICM cache content each time the server is restarted

TRUE

icm/HTTP/server_cache_<xx>/expiration

Specifies the default expiration time (in seconds) for ICM cache entries.

86400

icm/HTTP/server_cache_<x>/max_entries

Maximum number of entries in ICM/HTTP server cache.

10000

icm/HTTP/server_cache_<xx>/max_name_len

Specifies the maximum length of HTTP URIs of objects that are to be saved in the ICM cache.

256

icm/HTTP/server_cache_<xx>/max_net_frag_size

Limits the maximum size of the data buffers fragmented on the network for all the documents coming from the cache.

0

icm/HTTP/server_cache_<xx>/max_ufo_entries

Specifies the maximum number of entries in the UFO List (UnFound objects) in the ICM server cache.

10000

icm/HTTP/server_cache_<xx>/memory_size_MB

Specifies which part of the cache should be stored in main memory and which on the hard disk.

50

icm/HTTP/server_cache_<xx>/size_MB

Specifies the size of the ICM server cache (in megabytes).

400

icm/HTTP/server_cache_<xx>/ufo_codelist

Handles additional HTTP error codes as UFOs.

404

icm/HTTP/server_cache_<xx>/ufo_expiration

Specifies the expiration time (in seconds) for the entries in the UFO list of the ICM cache.

60

icm/HTTPS/client_cipher_suite_header_name

See: SSL Parameters for ICM and Web Dispatcher

Specifies the header field that contains the cipher suite used.

SSL_CIPHER_SUITE

icm/HTTPS/client_certificate_chain_header_prefix

See: SSL Parameters for ICM and Web Dispatcher

Prefix for the CA certificate chains: The chain is structured from 1 to n, where n+1 is the last CA root certificate in the chain that is not sent to the server.

SSL_CLIENT_CERT_CHAIN_

icm/HTTPS/client_certificate_header_name

See: SSL Parameters for ICM and Web Dispatcher

Specifies header field names used for forwarding SSL certificates. The SAP Web Dispatcher sets the fields, and the ICM on the application server uses them.

SSL_CLIENT_CERT

icm/HTTPS/client_key_size_header_name

See: SSL Parameters for ICM and Web Dispatcher

Specifies header field names used for forwarding SSL certificates. The SAP Web Dispatcher sets the fields, and the ICM on the application server uses them.

SSL_CIPHER_USEKEYSIZE

icm/HTTPS/trust_client_with_issuer

See: SSL Parameters for ICM and Web Dispatcher

Specifies the intermediary that SSL client certificates forwarded in the HTTP header are accepted from. The profile parameter contains the issuer of the SSL certificate of the intermediary.

-

icm/HTTPS/trust_client_with_subject

See: SSL Parameters for ICM and Web Dispatcher

The trusted relationship between the SAP Web Dispatcher and the ICM is based on a client certificate, which the Web Dispatcher uses for the SSL connection. This Web Dispatcher certificate uses the ICM to decide whether the Web Dispatcher is trustworthy or not.

-

icm/HTTPS/verify_client

Specifies whether a client must produce a certificate.

1

icm/keep_alive_timeout

Time span in seconds in which the ICM attempts to keep a connection open if new data were to arrive from the partner through the network.

60

icm/listen_queue_len

Specifies the maximum number of requests kept in the queue while a connection is open.

512

icm/local_addr

Binds outbound connections from the ICM to a specified network interface.

-

icm/log_level

Specifies whether system log messages are written to the trace file.

0

icm/max_conn

Specifies the maximum number of open connections in the ICM.

500

icm/max_threads

Specifies the maximum number of threads in the ICM.

250

icm/max_services

Specifies the maximum number of ICM services that can be created.

30

icm/max_sockets

Specifies the maximum number of open sockets in the ICM.

2048

icm/min_spare_threads

Specifies the number of worker threads that the ICM tried to keep free.

3

icm/min_threads

Specifies the minimum number of threads in the ICM.

10

icm/ms_keepalive_s

Specifies the interval that keep-alive messages are sent to the message server

60

icm/<PROT>/context_quota

Quota restricting the context use in the back end (SAP Web AS). It specifies what percentage of all available contexts should be used to process requests depending on the protocol used.

HTTP: 90

HTTPS: 90

SMTP: 90

icm/<PROT>/max_request_size_KB

Protects the application server from a Denial of Service (DOS) attack with large requests.

102400

icm/req_queue_len

Specifies the maximum number of waiting requests.

1000

icm/security_log

Controls the output of the security protocol.

LOGFILE=dev_icm_sec,MAXSIZEKB=500

icm/server_port_<xx>

Specifies the ICM port/service (PORT) to use for a protocol (PROT).

-

icm/ssl_config_<xx>

Controls the general SSL configuration.

-

icm/trace_secured_data

Specifies whether SSL encrypted data written to the ICM trace file.

FALSE

icm/traffic_control

Specifies the timeout within a request.

-

icm/wp_mpi_available

Controls how many MPI buffers (granularity of the memory pipes) read by the network so that a rolled out context can be rolled back into a work process (by the ICM).

To make sure that no work processes are occupied unnecessarily if the network connection is slow, you can use this profile parameter to ensure that the context only occupies one work process if data are also available.

5

icm/wp_roll_timeout

Specifies the maximum time that a work process can run on the ICM with no rolling when reading data. With slow network connections and large volumes of data, the read time can become very slow (> 600 seconds).

15

icm/WS/ping_interval

Specifies the time interval in which the application server sends a ping message to the client once a WebSocket connection has become inactive.

60 seconds

is/HTTP/show_server_header

Specifies whether the server header field is included in HTTP responses from the server to the client. For security reasons SAP recommends that this information is not forwarded to the client.

FALSE

is/server_name

Specifies the official name of the application server.

SAP NetWeaver Application Server

is/server_version

Contains the kernel version number.

Corresponds to the kernel version used.

is/HTTP/show_detailed_errors

Specifies the standard form of HTTP error messages that the server (SAP Web Dispatcher or ICM) creates and sends to the client.

FALSE

is/HTTP/show_server_header

Specifies whether server header fields of the server should be added to the client or not.

FALSE

mpi/buffer_size

See: Parameters for Memory Pipes

Specifies the size of the memory pipes blocks.

65536

mpi/max_pipes

See: Parameters for Memory Pipes

Specifies the maximum number of memory pipes.

4000

mpi/total_size_MB

See: Parameters for Memory Pipes

Specifies the total size (in megabytes) of the shared memory areas used for MPI.

80

rdisp/http_min_wait_dia_wp

Number of dialog work processes that should stay free for other uses and are therefore not available for plugin requests (HTTP, HTTPS, SMTP).

1

rdisp/max_websocket_connections

Specifies the maximum size of the WebSocket table.

( $(rdisp/tm_max_no) / 2 )

rdisp/start_icman

Starts the ICM from the dispatcher

TRUE