Before installing the SAP Cryptographic Library, you should be familiar with the necessary files, where they should be located, and how to set their location so that the system can find them at run-time. For the AS ABAP, use the locations as indicated in the table below.
Recommended Locations for Files on the AS ABAP
File |
Location |
SAP Cryptographic Library and SAPGENPSE |
Directory specified by the profile parameter DIR_EXECUTABLE Windows: <DRIVE>:\usr\sap\<SID>\SYS\exe\run UNIX: /usr/sap/<SID>/SYS/exe/run |
License ticket, server’s SNC PSE and credentials |
Subdirectory sec in the server's DIR_INSTANCE directory Windows: <DRIVE>:\usr\sap\<SID>\<instance>\sec UNIX: /usr/sap/<SID>/<instance>/sec |
Where to Set the Location of the Files for the AS ABAP
Component |
Where to Set |
Value |
Parameter to set the location of the SAP Cryptographic Library |
Profile parameter snc/gssapi_lib |
Windows: <DRIVE>:\usr\sap\<SID>\SYS\exe\ UNIX: /usr/sap/<SID>/SYS/exe/run/ |
Parameter to set the location of the license ticket and credentials |
Windows NT: Registry key KEY_LOCAL_MACHINE\Software\ UNIX: Login file for <sid>adm |
Windows: <DRIVE>:\usr\sap\<SID>\ UNIX: /usr/sap/<SID>/<instance>/sec |
Windows
The entries under the component's registry key \environment define its process-specific environment, which overrides the system-defined environment. We therefore recommend defining SNC_LIB and SECUDIR in the registry instead of as system environment variables, especially if multiple components run on a single host. You can then avoid conflicts if different components require different environments.
When you set SECUDIR in the registry, the setting does not take effect for the command line activities. Therefore, when using the command line configuration tool sapgenpse, temporarily set SECUDIR using the command line:
set SECUDIR=<path>
The following command line sets SECUDIR temporarily on the application server:
set SECUDIR=D:\usr\sap\ABC\DVEBMGS28\sec
As an alternative, you can change to the desired directory and set SECUDIR as indicated below:
cd D:\usr\sap\ABC\DVEBMGS28\sec
set SECUDIR=.
By using this technique, you can avoid problems such as case-sensitivity or shortened directory names in Windows that use the tilde character (~).
To continue with the configuration for a specific server component, see the following topics:
· Configuring SNC for Using the SAPCRYPTOLIB on the AS ABAP
· Configuring SNC for Using the SAPCRPYTOLIB Using SAPGENPSE