Installing the SAP Cryptographic Library for SSL 

Use

The AS Java uses the SAP Cryptographic Library for cryptographic functions, for example digital signatures and SSL. You can use this procedure to install or update the SAP Cryptographic Library on the AS Java.

Prerequisites

You have obtained the SAP Cryptographic Library installation package. It is available on SAP Service Marketplace at service.sap.com/swdc under Download → SAP Cryptographic Software.

This package contains the following files

●      The SAP Cryptographic Library (sapcrypto.dll for Windows NT and higher or libsapcrypto.<ext> for UNIX)

●      A corresponding license ticket (ticket)

●      The configuration tool sapgenpse.exe

The use of cryptographic functions on the AS Java is subject to German export regulations. Therefore, the distribution of this software can be limited to certain countries and not freely available. To check about the availability of the SAP cryptographic software, contact your local SAP representative.

Procedure

...

You have obtained the SAP Java Cryptographic Toolkit package that corresponds to your SAP J2EE Engine release.

       1.      Download the SAP Cryptographic Library installation package to the file system of the AS Java and extract its contents.

       2.      Copy the library, the configuration tool, and the license ticket to the corresponding directories:

○       Copy the library and the configuration tool to $DIR_CT_RUN (for example, /usr/sap/<SID>/SYS/exe/uc/NTAMD64) and restart the system.

The default location for the library and the configuration tool is $(DIR_EXECUTABLE), which is the directory specified by the parameter $(DIR_LIBRARY). Therefore, to make sure the library can be found, copy it to the $(DIR_LIBRARY) directory. If you copy it to a different location, then you also have to specify the location in the parameter ssl/ssl_lib.

○       Copy the ticket to the $(DIR_INSTANCE)/sec directory. If the sec subdirectory does not yet exist, create it.

SAP Cryptographic Library: /usr/sap/<SID>/SYS/exe

Ticket: /usr/sap/<SID>/<instance>/sec.

You can use the ICM Monitor or the Web Administration Interface to check the ICM parameter settings.

       3.      Note the location of the SAP Cryptographic Library

You will need it when setting the parameters for the Internet Communication Manager (ICM).

       4.      Check the file permissions

The operating system user under which the AS Java runs must be able to execute the library’s functions.

This user is specified during the installation. By default, it is <sid>adm for UNIX installations and SAPService<SID> for Windows.

Result

The SAP Cryptographic Library, which includes the library and the configuration tool, is installed on the AS Java host.

You should periodically check for an updated version of this library on SAP Service Marketplace, for example, when you install support packages.

See also:

●      Maintaining ICM parameters for Using SSL

●      Administration of the Internet Communication Manager