Installing the SAP Cryptographic Library for SSL (SAP Library

Installing the SAP Cryptographic Library for SSL

Use

The AS Java uses the SAP Cryptographic Library for cryptographic functions, for example digital signatures and SSL. You can use this procedure to install or update the SAP Cryptographic Library on the AS Java.

Prerequisites

You have obtained the SAP Cryptographic Library installation package. It is available on SAP Service Marketplace at service.sap.com/swdc under Download → SAP Cryptographic Software.

This package contains the following files

● The SAP Cryptographic Library (sapcrypto.dll for Windows NT and higher or libsapcrypto.<ext> for UNIX)

● A corresponding license ticket (ticket)

● The configuration tool sapgenpse.exe

Note

The use of cryptographic functions on the AS Java is subject to German export regulations. Therefore, the distribution of this software can be limited to certain countries and not freely available. To check about the availability of the SAP cryptographic software, contact your local SAP representative.

Procedure

...

You have obtained the SAP Java Cryptographic Toolkit package that corresponds to your SAP J2EE Engine release.

1. Download the SAP Cryptographic Library installation package to the file system of the AS Java and extract its contents.

2. Copy the library, the configuration tool, and the license ticket to the corresponding directories:

○ The default location for the library is the directory that is specified by the parameter $(DIR_LIBRARY), which by default is $(DIR_EXECUTABLE). Therefore, to make sure the library can be found, copy it to the $(DIR_LIBRARY)directory. If you copy it to a different location, then you also have to specify the location in the parameter ssl/ssl_lib.

○ Copy the ticket to the $(DIR_INSTANCE)/sec directory. If the sec subdirectory does not yet exist, create it.

Example

SAP Cryptographic Library: /usr/sap/<SID>/SYS/exe

Ticket: /usr/sap/<SID>/<instance>/sec.

Note

You can use the Web Administration Interface to check the ICM parameter settings.

3. Note the location of the SAP Cryptographic Library. You will need when setting the parameters for the Internet Communication Manager (ICM).

4. Check the file permissions. The operating system user under which the AS Java runs must be able to execute the library’s functions.

Note

This user is specified during the installation. By default it is <sid>adm for UNIX installations and SAPService<SID> for Windows.

Result

The SAP Cryptographic Library is installed on the AS Java host.

You should periodically check for an updated version of this library on SAP Service Marketplace, for example, when you install support packages.

● Using the Web Administration Interface