Nov 23, 2016. Start Sap Router, 3. Start Sap Router Command in Linux, 4. Creating the credential for User responsible to start SAP Router:, 4. Stop Sap Router, 6../sapgenpse get_my_name -n validity, certificate request, Installing New Sap Router in Linux / Unix O.S. And Renewal Certificate Process, new certificate. Transaction code SM13 is a update management transaction which is used for: • Display update requests • Analyze problems pertaining to the update • Test an.

Installation on linux ———————————————- 1. Create the subdirectory saprouter in the directory /usr/sap/.

Get the latest version of the SAProuter from the SAP Service Marketplace (service.sap.com/patches). Choose Support Packages and Patches ® Entry by Application Group ® Additional Components ® SAPROUTER. The SAProuter is in packet saprouter*.SAR; the program niping is also in this packet. Copy programs saprouter and niping to the newly created directory /usr/sap/saprouter. If you cannot copy the programs from SAP Service Marketplace, you can copy a version (may be obsolete) from your directory /usr/sap//SYS/exe/run.

(Optional) If you want to start the SAProuter on the same computer used for an SAP instance, insert the following line into file /usr/sap//SYS/exe/run/startsap: Start sap router SRDIR=/usr/sap/saprouter if [ -f $SRDIR/saprouter ]; then echo “ nStarting saprouter Daemon “ tee -a $LOGFILE echo “—————————-“ tee -a $LOGFILE $SRDIR/saprouter -r -R $SRDIR/saprouttab tee -a $LOGFILE & fi Insert the lines before the commands to start the SAP instance. Normally the SAProuter runs on a different computer. If this is so, this step is omitted and you start the SAProuter as described in Starting the SAProuter. Maintain the route permission table in directory /usr/sap/saprouter. If you want to keep it in another directory or under a name other than saprouttab, you must specify this with the SAProuter option -R (see Option R ). This should help in SAP Router configuration and installation.

Procedure to refresh your expired SAP Router certificate with new one. I have included some screenshots for better understanding. Check the validity of your router using below command: sapgenpse get_my_name Usually the validity of certificate is only for one year. Login to SAP Market Place to get the distinguished name of your router server: Before executing the next steps, make sure that you have taken the backup of complete SAPROUTER folder (Or which ever directory containing your SAP Router). Delete the following files local.pse, srcert, certreq and cred_v2 from SAPROUTER folder. Generate the certificate Request with the command: sapgenpse get_pse -v -r certreq -p local.pse “” Example: sapgenpse get_pse -v -r “E: usr sap saprouter certreq” -p local.pse “CN=myserver, OU=, O=saprouter, O=SAP, C=DE” Got absolute PSE path “E: usr sap saprouter local.pse”. Please enter PSE PIN/Passphrase: **** Please reenter PSE PIN/Passphrase: ****!!!

WARNING: For security reasons it is recommended to use a PIN/passphrase Totally Rad 2 Rapidshare. !!! WARNING: which is at least 8 characters long and contains characters in!!! WARNING: upper and lower case, numbers and non-alphanumeric symbols.

Supplied distinguished name: “CN=Myserver, OU=, OU=SAProuter, O=SAP, C=DE” Creating PSE with format v2 (default) succeeded. Certificate creation ok PSE update ok PKRoot ok Generating certificate request ok.

Certificate Request Signed Part Subject:CN=Myserver, OU=, OU=SAProuter, O=SAP, C=DE” Key Key type:rsaEncryption Key size:2048 Attributes Signature Signature algorithm:sha256WithRsaEncryption Signature (size=”2048″): You will be asked to enter the pin twice. Do make a note of the pin as you will be using it later. C. Create SAP Router Certificate: On SAP Marketpace, select the certificate you want to generate the request for and continue: Copy and paste the content of file “certreq” on the next screen (From begin to end and no space included) Now your SAP Router certificate is ready.

Copy the certificate from “Begin certificate” to “End Certificate” and paste the content to file named “srcert”, which must be created in the same directory as the sapgenpse executable. Install the SAP router certificate Install the certificate using the below command, sapgenpse import_own_cert -c srcert -p local.pse example output: Please enter PIN: CA-Response successfully imported into PSE “D: usr sap saprouter local.pse” E. Create credentials for SAP router Execute below command to generate credentials for SAP Router.

Sapgenpse seclogin -p local.pse -O Example output: running seclogin with USER=”routadm” Please enter PIN: Added SSO-credentials (#0) for PSE “E: usr sap saprouter local.pse” “CN=myserver, OU=, OU=SAProuter, O=SAP, C=DE” Note:The account of the saprouter user should always be entered in full. If you do not enter a user here, credentials will be generated for currently logged in user. This will create a file called “cred_v2” in the same directory as “local.pse” F. Check the certificate. Execute below command to check the new validity of the certificate: sapgenpse get_my_name -v -n Issuer The name of the Issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE And below command to check the validity: sapgenpse get_my_name Sample output: SSO for USER “routadm” with PSE file “E: usr sap saprouter local.pse” Subject: CN=myserver, OU=000012345, OU=SAProuter, O=SAP, C=DE Issuer: CN=SAProuter CA, OU=SAProuter, O=SAP Trust Community II, C=DE Serialno: KeyInfo: RSA, 2048-bit Validity – NotBefore: Fri Mar 010 17: NotAfter: Thu Mar 08 17.