SAP ROUTER CONFIGURATION

Step1: Raise a message to SAP, as follows

Short Text Applying Certificate

Long Text Hi, We are using SAP ECC AFS 6.0, as we wanted to configure our SAPRouter. Please provide us certificate. The following are the details:=========================Cut Id: 8xxxxxINS No.:0Xxxxxxxxx=========================Static IP: x.x.x.xHost Name: xxxxOS: WindowsXP SP2======================

Step 2: Once u get acknowledge from SAP, then start SAP Router configuration based on the replay.

Step 3: Create a folder in C drive like: C:\saprouter and download the SAPCAR.exe from service market place and put into saprouter folder.

Step 4: Download the SAP cryptographic software from service.sap.com/tcs and put into C:\saprouter folder.

Prepared by PARASURAM.T

Step 5: Uncar the files that is as follows, C:\saprouter: SAPCAR –XVF <filename.SAR> [cryptographic file]

NOTE: Copy all the files from c:\saprouter\ntintel, put into c:\saprouter and Make sure u have configure the SAProuter in Admin privilege

Step 6: Set the Environment Variable

Step 7: Then login to service market place www.service.sap.com/ics (Creating a certificate)

Prepared by PARASURAM.T

And click on Apply now button, u will get Request Certificate for SAProuter screen

Execute the command in dos mod, see the below screen.

NOTE: Before executing, change according to ur distinguished name.

Prepared by PARASURAM.T

In this screen it will ask the PIN number “Do not give” and press 2 times.

This command will create two files “certreq” and “local.pse” in your sap router folder. certreq u can find it in c:\saprouter\ ntintel and local.pse c:\saprouter.

You will get a Certificate request in the file “certreq” .Open it in notepad and copy the whole contents and paste it in the following screen which I marked as a red color.

And click the Request Certificate icon and it will generate a certificate.

Prepared by PARASURAM.T

Which in turn will generate a certificate? Copy the whole contents and paste it in the notepad and save it with the name of “srcert”, put into c:\saprouter\ ntintel.

Rename the file from dos, see the below screen

Step 8: Import the certificate: Follow the below screen

Prepared by PARASURAM.T

Step 9: Then execute the command “sapgenpse get_my_name -v -n Issuer”. This command is to authenticate the SAPRouter configuration has been successful or not. The command responds with your distinguished name if the configuration is correct, follow the bellow screen

Step 10: Check SAPRouter is existed in services.msc. If not u have to install manually, follow the below steps

Note: Before this confirm in c:\saprouter folder have contain this files

ntscmgr.exe saprouter.exe niping.exe saprouttab[Should not contain the extension with any type]

If it is not, u has to download it manually from service market place.

Step 10.1: Create saprouttab file manually, according to Ur server IP address

#saprouttab file created by on

# SNC-connection from and to SAP KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 * KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3389

# Development ECC Server KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 132.147.160.247 3200KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 132.147.160.247 3201KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 132.147.160.247 3389

Prepared by PARASURAM.T

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

# Access from the local Network to SAPNet - R/3 Frontend (OSS)# P * 194.39.131.34 3299 P 194.39.131.34 132.147.160.247 3389P 194.39.131.34 132.147.160.247 50500

P * * *

# deny all other connectionsD * * *

Step 10.2: Install the SAPRouter, from command level

ntscmgr install SAPRouter -b c:\saprouter\saprouter.exe -p "service -r –W 60000 -R c:\saprouter\saprouttab -K p:CN=user2, OU=0000879801, OU=SAProuter, O=SAP, C=DE"

Step 10.3: Start and stop the SAPRouter from command level.

Start: saprouter -r -S 3299 –K "CN=user2, OU=0000879801, OU=SAProuter, O=SAP, C=DE"

Stop: saprouter -s

If it not started, then try to start manually from services.msc. Suppose if u get any alert like, Could not start SAPRouter from local computer with error: 1053, then u check the user have Admin rights, see the below screen, if it’s not change it to Admin user see the below screens

Prepared by PARASURAM.T

Prepared by PARASURAM.T

Prepared by PARASURAM.T

Refer the following SNOTES, if u gets any different problem: 82751

SAPRouter is working fine u have to check the following things:

Step1: Log into Ur SAP and run the transaction oss1 and give the proper inputs

Click the parameter button; u will get the following screen

Prepared by PARASURAM.T

Step 2: Go to sm59 and execute u will get a following screen, expand the ABAP connections

Prepared by PARASURAM.T

And check the technical settings, in this make sure ur source IP address and Detonation IP address, is there in message server, see the below screen

And click the Logon & Security tab, check the PW status should be in “Saved” mode and see the below screen

Prepared by PARASURAM.T

Prepared by PARASURAM.T

Next click on the Connection Test, u will get following screen

Prepared by PARASURAM.T

We have to establish the connection

Prepared by PARASURAM.T

We have to maintain credentials in service market place

System Data u can find in the above screen

Prepared by PARASURAM.T

Prepared by PARASURAM.T