Installing the SAP Cryptographic Library on the SAP Web AS (SAP Library - Using the SAP Cryptographic Library for SNC)

Installing the SAP Cryptographic Library on the SAP Web AS

Prerequisites

You have obtained the SAP Cryptographic Library installation package.

Procedure

As user <sid>adm:

Extract the contents of the SAP Cryptographic Library installation package.

Copy the library file to the directory specified by the application server's profile parameter DIR_EXECUTABLE. In the following, we represent this directory with the notation $(DIR_EXECUTABLE).

Example

Examples

UNIX:

DIR_EXECUTABLE: /usr/sap/<SID>/SYS/exe/run/

Location of SAP Cryptographic Library: /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so

Windows NT:

DIR_EXECUTABLE: <DRIVE>:\usr\sap\<SID>\SYS\exe\run\

Location of SAP Cryptographic Library:
<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll

Copy the configuration tool sapgenpse.exe to any local directory, for example, also $(DIR_EXECUTABLE).

Check the file permissions for the SAP Cryptographic Library. If, for example, you copied the library to its location using ftp on UNIX, then the file permissions may not be set correctly. Make sure that <sid>adm (or SAPService<SID> under Windows NT) is able to execute the library's functions.

Copy the ticket file to the sub-directory sec in the application server's instance directory $(DIR_INSTANCE):

Example

Examples

UNIX:

DIR_INSTANCE: /usr/sap/<SID>/<instance>

Location of the ticket: /usr/sap/<SID>/<instance>/sec/ticket

Windows NT:

DIR_INSTANCE: <DRIVE>:\usr\sap\<SID>\<instance>

Location of the ticket: <DRIVE>:\usr\sap\<SID>\<instance>\sec\ticket

Set the environment variable SECUDIR to the sec sub-directory. The application server uses this variable to locate the ticket and its credentials at run-time.

Recommendation

If you set the environment variable using the command line, then the value may not be applied to the application server's processes. Therefore, we recommend setting SECUDIR in the startup profile for the application server's user or in the registry (Windows NT).

Result

The SAP Cryptographic Library is installed on the application server and the environment is set up correctly so that the application server can locate the library at run-time.