Recommended Locations of Files
Before installing the SAP Cryptographic Library, you should be familiar with the necessary files, where they should be located, and how to set their location so that the system can find them at run-time. For the AS ABAP, use the locations as indicated in the table below.
Recommended Locations for Files on the AS ABAP
| File | Location |
|---|---|
|
SAP Cryptographic Library and SAPGENPSE |
Directory specified by the profile parameterDIR_EXECUTABLE Windows:<DRIVE>:\usr\sap\<SID>\SYS\exe\run UNIX:/usr/sap/<SID>/SYS/exe/run |
|
License ticket, server's SNC PSE and credentials |
Subdirectorysec in the server'sDIR_INSTANCE directory Windows:<DRIVE>:\usr\sap\<SID>\<instance>\sec UNIX:/usr/sap/<SID>/<instance>/sec |
Where to Set the Location of the Files for the AS ABAP
| Component | Where to Set | Value |
|---|---|---|
|
Parameter to set the location of the SAP Cryptographic Library |
Profile parametersnc/gssapi_lib |
Windows: <DRIVE>:\usr\sap\<SID>\SYS\exe\ run\sapcrypto.dll UNIX: /usr/sap/<SID>/SYS/exe/run/ libsapcrypto.<ext> |
|
Parameter to set the location of the license ticket and credentials |
Windows NT: Registry key KEY_LOCAL_MACHINE\Software\ SAP\<SID>\environment\ SECUDIR UNIX: Login file for<sid>adm |
Windows: <DRIVE>:\usr\sap\<SID>\ <instance>\sec UNIX: /usr/sap/<SID>/<instance>/sec |
Windows
The entries under the component's registry key\environment define its process-specific environment, which overrides the system-defined environment. We therefore recommend definingSNC_LIB andSECUDIR in the registry instead of as system environment variables, especially if multiple components run on a single host. You can then avoid conflicts if different components require different environments.
When you setSECUDIR in the registry, the setting does not take effect for the command line activities. Therefore, when using the command line configuration toolsapgenpse, temporarily set SECUDIR using the command line:
set SECUDIR=<path>
The following command line setsSECUDIR temporarily on the application server:
set SECUDIR=D:\usr\sap\ABC\DVEBMGS28\sec
As an alternative, you can change to the desired directory and setSECUDIR as indicated below:
cd D:\usr\sap\ABC\DVEBMGS28\sec set SECUDIR=.
By using this technique, you can avoid problems such as case-sensitivity or shortened directory names in Windows that use the tilde character (~).
To continue with the configuration for a specific server component, see the following topics: