Recommended Locations of Files 

Before installing the SAP Cryptographic Library, you should be familiar with the necessary files, where they should be located, and how to set their location so that the system can find them at run-time. For the AS ABAP, use the locations as indicated in the table below.

Recommended Locations for Files on the AS ABAP

File	Location
SAP Cryptographic Library and SAPGENPSE	Directory specified by the profile parameter DIR_EXECUTABLE Windows: <DRIVE>:\usr\sap\<SID>\SYS\exe\run UNIX: /usr/sap/<SID>/SYS/exe/run
License ticket, server’s SNC PSE and credentials	Subdirectory sec in the server's DIR_INSTANCE directory Windows: <DRIVE>:\usr\sap\<SID>\<instance>\sec UNIX: /usr/sap/<SID>/<instance>/sec

Where to Set the Location of the Files for the AS ABAP

Component	Where to Set	Value
Parameter to set the location of the SAP Cryptographic Library	Profile parameter snc/gssapi_lib	Windows: <DRIVE>:\usr\sap\<SID>\SYS\exe\ run\sapcrypto.dll UNIX: /usr/sap/<SID>/SYS/exe/run/ libsapcrypto.<ext>
Parameter to set the location of the license ticket and credentials	Windows NT: Registry key KEY_LOCAL_MACHINE\Software\ SAP\<SID>\environment\ SECUDIR UNIX: Login file for <sid>adm	Windows: <DRIVE>:\usr\sap\<SID>\ <instance>\sec UNIX: /usr/sap/<SID>/<instance>/sec

Windows

The entries under the component's registry key \environment define its process-specific environment, which overrides the system-defined environment. We therefore recommend defining SNC_LIB and SECUDIR in the registry instead of as system environment variables, especially if multiple components run on a single host. You can then avoid conflicts if different components require different environments.

When you set SECUDIR in the registry, the setting does not take effect for the command line activities. Therefore, when using the command line configuration tool sapgenpse, temporarily set SECUDIR using the command line:

set SECUDIR=<path>

The following command line sets SECUDIR temporarily on the application server:

set SECUDIR=D:\usr\sap\ABC\DVEBMGS28\sec

As an alternative, you can change to the desired directory and set SECUDIR as indicated below:

cd D:\usr\sap\ABC\DVEBMGS28\sec

set SECUDIR=.

By using this technique, you can avoid problems such as case-sensitivity or shortened directory names in Windows that use the tilde character (~).

To continue with the configuration for a specific server component, see the following topics:

·        Configuring SNC for Using the SAPCRYPTOLIB on the AS ABAP  

·        Configuring SNC for Using the SAPCRPYTOLIB Using SAPGENPSE