Entering content frame

Background documentation Recommended Locations of Files Locate the document in its SAP Library structure

Before installing the SAP Cryptographic Library, you should be familiar with the necessary files, where they should be located, and how to set their location so that the system can find them at run-time. For best results, use the locations as indicated in the tables below.

Table 1: Recommended Location for the SAP Cryptographic Library and Configuration Tool SAPGENPSE

Component

Location

Application Server

Directory specified by the profile parameter DIR_EXECUTABLE

Windows NT: <DRIVE>:\usr\sap\<SID>\SYS\exe\run

UNIX: /usr/sap/<SID>/SYS/exe/run

AGate

Windows NT: <DRIVE>:\Program Files\SAP\ITS\2.0\Programs

WGate

Windows NT: <DRIVE>:\Program Files\SAP\ITS\2.0\Programs

Table 2: Recommended Location for the License Ticket, the Server's PSE, and its Credentials

Component

Location

Application Server

Subdirectory sec in the server's DIR_INSTANCE directory

Windows NT: <DRIVE>:\usr\sap\<SID>\<instance>\sec

UNIX: /usr/sap/<SID>/<instance>/sec

AGate

Windows NT: <DRIVE>:\Program Files\SAP\ITS\2.0\<SID>\sec

WGate

Windows NT: <DRIVE>:\Program Files\SAP\ITS\2.0\WGateIIS\sec

Table 3: Where to Set the Location of the SAP Cryptographic Library

Component

Where to Set

Value

Application Server

Profile parameter snc/gssapi_lib

Windows NT:

<DRIVE>:\usr\sap\<SID>\SYS\exe\
run\sapcrypto.dll

UNIX:

/usr/sap/<SID>/SYS/exe/run/
libsapcrypto.<ext>

AGate

Registry key

KEY_LOCAL_MACHINE\Software\
SAP\ITS\2.0\<SID>\Programs\
AGate\environment\SNC_LIB

<DRIVE>:\Program Files\SAP\ITS\
2.0\Programs\sapcryptolib.dll

WGate

Configuration file wgate.conf

In the <global> block:

setenv SNC_LIB

Windows NT:

<DRIVE>:\Program Files\SAP\ITS\
2.0\Programs\sapcrypto.dll

Table 4: Where to Set the Location of the License Ticket and Credentials (SECUDIR)

Component

Where to Set

Value

Application Server

Windows NT:

Registry key

KEY_LOCAL_MACHINE\Software\
SAP\<SID>\environment\
SECUDIR

UNIX:

Login file for <sid>adm

Windows NT:

<DRIVE>:\usr\sap\<SID>\
<instance>\sec

UNIX:

/usr/sap/<SID>/<instance>/sec

AGate

Registry key

KEY_LOCAL_MACHINE\Software\
SAP\ITS\2.0\<SID>\Programs\
AGate\environment\SECUDIR

<DRIVE>:\Program Files\SAP\ITS\
2.0\<SID>\sec

WGate

Configuration file wgate.conf

In the <global> block:

setenv SECUDIR

Windows NT:

<DRIVE>:\Program Files\SAP\ITS\
2.0\WgateIIS\sec

Recommendation

Windows NT

The entries under the component's registry key \environment define its process-specific environment, which overrides the system-defined environment. We therefore recommend defining SNC_LIB and SECUDIR in the registry instead of as system environment variables, especially if multiple components run on a single host. You can then avoid conflicts if different components require different environments.

Note

When you set SECUDIR in the registry, the setting does not take effect for the command line activities. Therefore, when using the command line configuration tool sapgenpse, temporarily set SECUDIR using the command line:

set SECUDIR=<path>

Example

The following command line sets SECUDIR temporarily on the application server:

set SECUDIR=D:\usr\sap\ABC\DVEBMGS28\sec

This graphic is explained in the accompanying text

As an alternative, you can change to the desired directory and set SECUDIR as indicated below:

cd D:\usr\sap\ABC\DVEBMGS28\sec

set SECUDIR=.

By using this technique, you can avoid problems such as case-sensitivity or shortened directory names in Windows that use the tilde character (~).

To continue with the configuration for a specific server component, see the following topics:

 Leaving content frame