Administration Overview
SAP Mobile Platform Server Overview
SAP Mobile Platform Server as an OData Proxy
URL Rewrite Modes
Single Sign-On Mechanisms
How SAP Mobile Platform Server Handles Cookies
Offline Applications Overview
Logging and Tracing Overview
Hybrid App Feature Restriction Overview
Push Overview
Exceptions When Working in a Clustered Server Environment
Postinstallation Landscape Setup
Adding Reverse Proxies or Relay Servers
Using Relay Server with SAP Mobile Platform
Deploying Relay Server Components to Microsoft Windows Server
Deploying Relay Server Components to Apache on Linux
Concurrent Connections
Configuring Relay Servers to Work with SAP Mobile Platform
Relay Server Configuration File Reference
Relay Server Section
Backend Server Section
Backend Farm Section
Options Section
Automatic Configuration of the Relay Server
File Hiding Utility (dbfhide)
Configuring Relay Server for HTTPs with SAP Mobile Platform
Configuring Outbound Enablers to Work with SAP Mobile Platform Servers
Relay Server Outbound Enabler Command (rsoe2) Reference
Checking IIS Client Negotiation Certificate Status for Mutual Authentication
Configuring Apache Relay Server State Manager as a Service
Installing a Load Balancer in Front of a Relay Server Farm
Configuring Apache as a Load Balancer
Connecting to Relay Server at Runtime
Using Apache Reverse Proxy for HTTP Clients
Installing and Configuring Apache Reverse Proxy
Decrypting Certificates for HTTPS Connections
Configuring Apache as a Load Balancer for a Cluster
Configuring Apache as a Load Balancer for the EIS Back End
Using Nginx Reverse Proxy for Agentry Clients
Installing Nginx Web Server
Configuring Nginx as a Reverse Proxy
Using SAP Web Dispatcher with SAP Mobile Platform
Installing SAP Web Dispatcher
Configuring SAP Web Dispatcher
Installing SAP Cryptographic Software
Generating Personal Security Environments
Web Dispatcher Profile Parameters
Configuring SAP Web Dispatcher for TLS
Starting and Stopping Web Dispatcher
Setting Up Back-End Communications
Preparing to Connect to SAP using Java Connectors
Installing the SAPCAR Utility
Installing the SAP Cryptographic Libraries
Setting Up Host System Connectivity for Agentry Applications
Establishing Connectivity: Oracle Net Service Names
Establishing Connectivity: SQL Server ODBC (Windows)
Establishing Connectivity: SQL Server ODBC (Linux)
Establishing Connectivity: Java Virtual Machine
Establishing Connectivity: HTTP-XML
Establishing Connectivity: OData
Establishing Connectivity: Host File System
Adding a SOCKS Proxy or Load Balancer for APNS Connections
Enabling a SOCKS Proxy in a Network Proxy Server
Adding a Load Balancer in the DMZ
Getting Started
Starting and Stopping SAP Mobile Platform Server
Starting and Stopping SAP Mobile Platform Server on Windows
Starting and Stopping SAP Mobile Platform Server on Linux
Getting Started with Management Cockpit
Starting and Stopping Management Cockpit on Windows
Starting and Stopping Management Cockpit on Linux
Using the Home Screen
Using Context Sensitive Help
Setting Up Browser Certificates for Management Cockpit Connections
Activating Sample Data for ESPM
Application Administration
Deploying Applications
Deploying from a Preproduction Environment
Configuring a Production Environment for Deployment
Production Environment Deployment Tasks By Application Type
Defining Applications
Define Back-End Connections
Defining Back-End Connections
Custom SSO Mechanism Samples
Endpoint Reserved Patterns
Defining Back-end Connections for Agentry
Configuring SQL Back-end Connections for Agentry Applications
Configuring the SqlBe.ini Query Initialization File for Agentry Applications
Configuring the PasswordValidationAudit.sql File for Agentry Applications
Configuring Query Constant Files for Agentry Applications
Configuring Java Virtual Machine Back-end Connections for Agentry Applications
Configuring HTTP-XML Back-end Connections for Agentry Applications
Configuring OData Back-end Connections for Agentry Applications
Configuring File System Back-end Connections for Agentry Applications
Defining Application Authentication
Web Application Authentication Samples
Defining Client Policies
Defining Client Password Policy
Defining Client Log and Trace Policies
Defining Feature Restriction Policies
Defining Push Notifications
Custom Push Provider
Configuring Push Notification Settings
Android Push Notifications
Apple Push Notifications
BlackBerry Push Notifications
Windows Push Notifications
Windows Phone Push Notifications
Configuring Custom APNS Host and Port
Configuring Push for Agentry
Uploading Client Resources
Updating a Resource Bundle
Deleting a Resource Bundle
Defining Application-Specific Settings
Uploading and Deploying Hybrid Apps
Managing Application Versions Using REST APIs
Deploying Hybrid Apps Using the REST API
Promoting Hybrid Apps Using the REST API
Retrieving Hybrid App Details Using the REST API
Deleting Hybrid App Details Using the REST API
Publishing Agentry Apps
Managing Agentry App Versions
Configuring Agentry Settings
Updating Agentry Configuration Settings
Configuring the Transmit Configuration File for Agentry Applications
Restarting an Agentry Application
Localizing Agentry Applications
Localization Files
ClientText.ini
Globals.ini Format
ApplicationText.ini Format
Enables.ini Format
Defining Offline Application Settings
Application Configuration File
Saving Application Settings
Managing and Monitoring Applications
Managing and Monitoring Tasks By Application Type
Managing Applications
Editing an Application
Deleting an Application
Pinging a Back-End Connection
Managing Registrations
Deleting a Registration
Changing Client Log and Trace Settings
Managing Users
Disconnecting Users
Managing Feature Restriction Policies
Importing and Exporting Application Configurations
Exporting an Application Configuration
Importing an Application Configuration
Transferring Applications Between System Landscapes
Creating an SAP Gateway Account
Logging In to the Transport Management System
Defining the Web Service to Transfer Applications
Defining Application Types to Transfer
Defining Source and Target SAP Mobile Platform Systems
Defining Transport Routes
Configuring SAP Mobile Platform CTS+ Properties
Exporting Applications to Transport Requests
Importing Applications into Target Servers
Managing Security Profiles
Creating and Configuring Security Profiles
Editing a Security Profile
Deleting a Security Profile
Managing Connections
Defining a Back-End Connection
Editing Back-End Connections
Deleting Back-End Connections
Pinging a Back-End Connection
Reporting Usage Statistics
Application Usage Statistics
Managing Application Logs and Traces
Setting Log Levels
Enabling Application Traces
Viewing Logs and Traces
Using End-to-End Tracing to Troubleshoot and Diagnose Device Problems
Configuring SAP Solution Manager
Purging Logs and Traces
Configuring Agentry Application Logs
Purging Agentry Logs
Managing OData Services
Creating a Destination
Testing the Destination Connection
Deploying a Custom Service
Assigning and Removing OData Service Destinations
Activating and Deactivating a Service
Registering an SAP Gateway Service
Troubleshooting
Catalog Service
Provisioning Applications
Provisioning with Afaria
Setting Up the Afaria Environment
Creating an MAF Logon Provisioning File
Server Administration
Starting and Stopping SAP Mobile Platform Server on Windows
Starting and Stopping SAP Mobile Platform Server on Linux
Configuring SAP Mobile Platform Server
Configuring Server Properties in Management Cockpit
Server Configuration: System
Server Configuration: Connectors
Server Configuration: Database
Server Configuration: Offline
Offline Component Logging
Server Configuration: JVM
Server Configuration: System Landscape Directory
Changing Database Connection Passwords
Configuring TLS Protocol Versions and Cipher Suites for HTTPS Connections
Mobiliser Database Connection Pool Properties
Configuring Server Session Timeout
Configuring Tomcat Thread Pool Properties
Overriding Logging Settings
Configuring Response Size
Server Monitoring and Analysis
Managing a Cluster
Restarting a Cluster Node
Deleting a Cluster Node
Managing Server Log Files
Setting Server Log File Size
Viewing Server Log Files
SAP Mobile Platform Server Log File
Configuring Agentry Application Logs
Agentry Logs
Purging Agentry Logs
Viewing Agentry Logs
Agentry messages.log File
Agentry events.log File
Agentry startup.log File
Agentry app-id thread-xxx.log File
Workload Analysis with Wily Introscope
Using Introscope Agent for Workload Analysis
SAP License Auditing
Generating and Sharing the SAP Audit Measurement File
SAP Application Users Tracked with SAP License Audit Overview
SAP Audit Measurement File Log Information
Monitoring and Analysis with SAP Solution Manager
Integrating SAP Solution Manager
Configuring System Landscape Directory Settings in SAP Mobile Platform
Configuring the Managed System
Configuring Technical Monitoring
Defining a Custom Monitoring Template
Defining the Availability Metric for SAP Mobile Platform Servers
Assigning the Template to the SAP Mobile Platform Servers
Creating User and Password for Diagnostic Agents
Downloading the Latest Solution Manager Configuration File
Viewing Workload Analysis Data
Viewing Change Analysis Data
Application Configuration IDs
Viewing Technical Monitoring Data
Viewing Client Tracing
Managing SAP Mobile Platform Server Features
Viewing SAP Mobile Platform Server Component Versions
Backing Up and Restoring Server Configuration Data
Port Number Reference
HTTP/HTTPS Port Number Reference
TCP Port Number Reference
Security Administration
SAP Mobile Platform Security Overview
SAP Mobile Platform Security Architecture
Authentication Types Supported in SAP Mobile Platform
Anonymous Access Applications
Basic Authentication
X.509 Certificate Authentication
Token-Based Authentication
Single Sign-On
Component Security
Communication Security
Back-End Security
Common Security Infrastructure
Cluster Security
Planning Your Security Landscape
SAP Mobile Platform Authentication Quick Start
Configuring Security in SAP Mobile Platform
Securing the Server Infrastructure
Managing Firewalls and Preventing Intrusion
Setting File System Permissions
Securing Platform Administration
Enabling Production-Ready Administrator Authentication
Logging in to Management Cockpit With the Initial Password
Adding a Production-Grade Provider
Validating the Production Admin Security Profile
Changing Security Log Levels
Resetting the Administrator Password
Changing the Password for the SAP Mobile Platform Windows Service
Creating Multiple Administrators
Configuring Security Profiles and Authentication Providers
Creating and Configuring Security Profiles with Authentication Providers
Predefined Security Profiles
Admin Security Profile
Default Security Profile
Notification Security Profile
Creating and Configuring Security Profiles
Stacking Authentication Providers and Combining Results
Authentication Providers in SAP Mobile Platform
No Authentication Challenge Provider
No Authentication Challenge Configuration Properties
System Login (Admin Only) Provider
System Login (Admin Only) Configuration Properties
Populate JAAS Subject From Client Provider
Populate JAAS Subject From Client Configuration Properties
X.509 User Certificate Provider
X.509 User Certificate Configuration Properties
SAML2 Provider
Configuring the SAML Service Provider Certificate Generator
Creating a SAML2 Local Service Provider
Creating a SAML2 Trusted Identity Provider
SAML2 Authentication Configuration Properties
SAML Two-Factor Authentication
HTTP/HTTPS Authentication Provider
HTTP/HTTPS Authentication Configuration Properties
Kerberos Single Sign-On Provider
Kerberos Configuration Properties
Principal Propagation Single Sign-On Provider
Principal Propagation Configuration Properties
Directory Service (LDAP/AD) Provider
Directory Service (LDAP/AD) Configuration Properties
Configuration Best Practices for Multiple LDAP Trees
LDAP Role Computation
Gathering Provider Group Information
Nested Groups and Roles in LDAP
Skipping LDAP Role Lookups (SkipRoleLookup)
Configuring an LDAP Provider to Use SSL
SAPSSO2 Generator
SAPSSO2 Generator Properties
UserRoleAuthorizer Provider
controlFlag Attribute Values
Role Mapping
SAP Mobile Platform Logical Roles
Mapping Logical Roles to Physical Roles
Mapping the Impersonator Role to the Reverse Proxy Certificate in XML
Mapping Logical Roles to Physical Roles in XML Files
Certificates and Keys
Managing Certificates
Generating Certificates and Keys
Certificate Alias and HTTPS Connections
Updating the Default Certificate for HTTPS Connections
Keytool Utility
Changing Keystore Passwords With Keytool
Configuring Strong Encryption for JVM Security
Enabling Strong Encryption in Java Development Kit
Encrypting Configuration Files
Configuring Virus Scan
SAP Mobile Platform VSA Configuration
Configuring the McAfee VirusScan Enterprise for SAP VSA
Configuring ClamAV SAP VSA
Configuring Virus Scan Adapters for other Anti Virus Providers
Virus Scan Logging
Troubleshooting Virus Scan
Testing the VSA using the SAP NW-VSI Java GUI
Monitoring and Validating SAP Mobile Platform Security
Checking the Security Log
Debugging Authentication Errors with CSI Tool
End-to-End Security Configuration
Configure Secure Access to SAP Gateway with X.509 Certificates
Enabling SSO on an SAP Gateway System
Creating a Self-Signed Root Certificate Authority
Creating a Technical-User Certificate
Creating an End-User Certificate
Importing User Certificates
Creating SAP Gateway User Accounts
Importing the Root CA into SAP Gateway
Mapping User Certificates in SAP Gateway
Activating and Testing an SAP Gateway Service
Obtaining an SSL Certificate
Importing X.509 Certificates into the Shared Keystore
Creating a Security Profile with X.509 Authentication
Configuring an Application to Use X.509 and an SAP Gateway Service
Testing an Application Connection to SAP Gateway
Application Security
Authentication for User Logins
Credential Types for Supported Authentication Providers
Single Sign-On Integration Across Client Applications
Integrating with Single Sign-On Solutions
Network-Edge Authentication
Token-Based SSO Authentication
Basic Authentication Against an SSO-Integrated Service
Single Sign-on Integration with SiteMinder
SiteMinder Client Authentication
Security Profile for a SiteMinder-Protected Back End
Configuring SiteMinder Integration with SAP SSO2
Configuring Network-Edge Authentication with a SiteMinder-Protected Back End
SiteMinder Web Agent Configuration for SAP Mobile Platform
X.509 Authentication at the Network Edge with a Reverse Proxy
Preparing Certificates
Configuring SAP Mobile Platform Server Certificate-based Authentication with a Reverse Proxy
Single Sign-On Types
Single Sign-On Authentication
Preparing Your Environment for Single Sign-On
Propagate Single Sign-On Using Populate JAAS Subject From Client
Check Impersonation Attribute
Using SSL to Secure HTTPS Channel Communications in SAP Mobile Platform
Using SSL Between a Client and SAP Mobile Platform Server
Using SSL Between SAP Mobile Platform Server and the Back End
Enabling a Direct HTTPS Connection to SAP Mobile Platform Server
Enabling OCSP
Device Security
Limiting Application Access
Device Data Security
Application, Device, and User Registration
Application Recognition
Securing Sensitive Data On-Device with DataVault
Client Password Policy for Data Vault Logins
Login Screens for Data Vaults
Agentry Security
Agentry Security Specifications Reference
Application Services (Mobiliser) Administration
Basic Deployment Model
Deploying Mobiliser to SAP HANA Cloud Platform
Basic Deployment
Deployment Example
Advanced Deployment
Standard Reverse Proxy Setup
Mobiliser Setup
Mobiliser Universal User
Creating or Updating Hashed Password for the Universal User
Creating or Updating the Encrypted Password for Preferences
Encryption and Keystore Configuration
Encryption in MOB_PREFERENCES
Keystore Configuration
Creating the Keystore for Data Encryption
Encrypting Preferences Using Operations Dashboard
On-Device Charging Installation and Configuration
Provision Secure Element Keys for DIRECT Mode
Generate Private Keys Used by On-Device Charging
Performance Considerations
Event Handling Threads
Business Logic Configuration
Framework
Gateway
Java Management Extension Authentication
Standard Security Filters
Exception Mapping
Open Data Protocol Interface
Transmission Control Protocol Interface
Hibernate
Java Database Connectivity - BoneCP
Messaging
Engine
Encryption
Logic
Template
Channels
EmailChannel
HtmlChannel
HttpChannelEnd
JabberChannel
SmppChannel
GCMChannel
Audit
Database Audit Manager and Audit Dispatcher
JavaScript Object Notification Audit Manager
Event Handler
Tasks
Jobs
cron Job Task Handler
MOB_JOBS Table
Miscellaneous Configuration
Security Endpoint
SMS Available on Cell Authentication
One-Time Password Generation
Transaction Configuration
Demand for Payment
Security Fundamentals
Prevent Unauthorized Access
Web Portal Access to Mobiliser
Hashing Customer Credentials
Default Mobiliser Web Portal Accounts
Changing the Mobiliser Web Portal Passwords
Operations Dashboard Reference
Logging in to the Operations Dashboard
Preferences
Applications
Node and System Preferences
Adding a Preference Node
Jobs
Servers
Server List
Information
Requests
Data
Channels
Events
Event Queues
Scheduled Events
Event Handlers
Tasks
Task Details
Task Handlers
Trackers
SOAP/REST Interface Management
Data Archiving, Retention and Deletion
Data Archiving
Data Retention and Deletion
Deletion Script
cron Expression Reference
SMS Administration
Setting Up a Production System
Hashing the Admin Password
Configuring New Database Installations
IBM DB2 Database
Configuring DB2 Databases
Enabling the DB2 JDBC Driver
Oracle Database
Configuring Oracle Databases
Installing Oracle JDBC Drivers
Enabling the Oracle JDBC Driver
Enabling Encryption
Encrypting Property Values
Configuring Authentication
Configuring the Event Scheduler JDBC Driver
Enabling SSL
Communication Channels
Configuring SMPP Inbound Channels
Configuring SMPP Outbound Channels
Configuring JMS Channels
Workspaces
Creating Workspaces
Opening Workspaces
Default Menu
Configuring Default Menus
Deleting Workspaces
Users
Adding Users
Editing User Properties
Deactivating Users
User Roles
Deleting Users
Categories
Subscribers
Creating Empty Subscriber Sets
Uploading Subscriber Sets
Reports
Generating Traffic Reports
Generating Subscriber Reports
Maintenance and Tuning
Default Ports
Configuring the HTTP Port
System Configuration Files
Editing Configuration Files
Log Files
Database Table Maintenance
Processing Engine
Monitoring Sessions
Viewing Processing Engine Logs
Processing Engine Performance
MBO Runtime 3.0 Administration
Overview
Administering Mobile Business Object Packages
Administering Hybrid App Packages
Administering Object API and Hybrid Applications
Wily Introscope Agent
Installing Introscope Enterprise Manager
Installing the Java Introscope Agent
Installing the .NET Introscope Agent
Glossary: MBO Runtime
Troubleshooting
Quick Fixes to Simple Server Problems
Agentry Application Locks after Publishing Update
Agentry Client Disconnected after Application or Server Restart
Agentry Client Fails Using IP as a Subject Alternate Name
Agentry Transmits are Slow on iOS 7
Browser Caching Issue
Connection Failure Outside Corporate Network
Custom Connector Not Working
Custom Connector Port Overwritten
DB2 Issues When Uploading Hybrid Applications
HTML Code Appears in Server Log
HTTPS Connection Problem
Hybrid App Import Reports Error
Impersonator Role Missing Error
JVM Bind Error
Kerberos Error Codes
Login Fails when Both Basic and SPNEGO Login Modules Are Used
Management Cockpit Stops Working After Enabling Mobiliser Services Feature
Management Cockpit Stops Working When User Interface Bundles are Down
Mobiliser Features Not Included in Enabled Features List
OSGi and Log4j Errors in Server Log
Publishing Error for Agentry Application
Server Cannot Start after Changing Log Settings
Server Cannot Start on Newer Version of Windows
Server Connection to Back End Takes Longer Than Expected
Server Using DB2 Cannot Restart
SSOExpiredException Messages in Server Log
Unauthorized Error for First Mutual Authentication Request
Unknown Host Exception While Accessing BIS
Issues Requiring Product Support
Product Support Engagement Requirements
Creating an Incident on SAP Service Marketplace
Increasing Server Status Logging Levels
Server Fails to Initialize
Statistics Data Loss During Server Crash or Shut Down
Glossary: SAP Mobile Platform