Creating Credentials for the SAP Web Dispatcher  

Use

The SAP Web Dispatcher must have active credentials at run-time to be able to access its PSEs. Therefore, to produce active credentials, use the configuration tool’s command seclogin to “open” each PSE.

The credentials are located in the file cred_v2 in the directory specified by the environment variable SECUDIR. Make sure that only the user under which the SAP Web Dispatcher runs has access to this file (including read access).

If the SAP Web Dispatcher is to pass the SSL connection to the SAP Web Application Server, then you do not need to perform these steps.

Prerequisites

·        The SAP Cryptographic Library is installed and the environment variable SECUDIR is set to the directory where the license ticket and PSEs are located.

·        You know the user that runs the SAP Web Dispatcher.

Procedure

Use the following command line to open each PSE and create credentials.

sapgenpse seclogin <additional options> -p <PSE_Name> -x <PIN> -O [<Windows_Domain>\]<user_ID>

Where:

Standard Options

Option	Parameter	Description	Allowed Values	Default
-p	<PSE_Name>	Path and file name for the PSE.	Path description (in quotation marks, if spaces exist)	None
-x	<PIN>	PIN that protects the PSE	Character string	None
-O	[<Windows_ Domain>\] <user_ID>	User for which the credentials are created. (The user that runs the SAP Web Dispatcher process.) If the user that runs the SAP Web Dispatcher is the current user, then this parameter is optional. Use the parameter –v (verbose) to see the results.	Valid operating system user	The current user

 

Additional Options

Option	Parameter	Description	Allowed Values	Default
-l	None	List all available credentials for the current user.	Not applicable	Not set
-d	None	Delete credentials	Not applicable	Not set
-chpin	None	Specifies that you want to change the PIN	Not applicable	Not set

After creating the credentials, restart the SAP Web Dispatcher.

Result

The credentials file (cred_v2) for the user provided with the –O option is created in the SECUDIR directory.

The following command line opens the SAP Web Dispatcher’s SSL server PSE that is located at C:\Program Files\SAP\SAPWebDisp\sec\SAPSSLS.pse and creates credentials for the user ABCadm. (SECUDIR is set to C:\Program Files\SAP\SAPWebDisp\sec). The PIN that protects the PSE is abcpin.

sapgenpse seclogin –p SAPSSLS.pse –x abcpin –O ABCadm