SAP Router Configuration (Windows Server)

1.  Download the latest saprouter from the Marketplace,

Ø Login to the SAP Support Portal with the S-user ID which is assigned to your installation

Ø  Use the latest SAProuter version, which can be downloaded from the SAP Software Download Center

Ø  Support Packages & Patches 

Ø  A-Z Alphabetical List of Products 

Ø  S

Ø  SAPROUTER

Ø  SAPROUTER (latest version)

Ø  your preferred O.S. version

Ø  saprouter_XXX-XXXXXXXX.sar

2.  Download the latest SAP Cryptographic Library from the SAP Software Download Area,

Ø  Support Packages & Patches

Ø  A-Z Alphabetical List of Products

Ø  S

Ø  SAPCRYPTOLIB

Ø  COMMONCRYPTOLIB (latest version)

Ø  your preferred O.S. version

Ø  SAPCRYPTOLIBP_XXXX-XXXXXXXX.SAR

3. Executing the commands,

 ·   SAPCAR  -xvf saprouter_XXX-XXXXXXXX.sar will unpack the following files:

saprouter[.exe]

·    SAPCAR  -xvf SAPCRYPTOLIBP_XXXX-XXXXXXXX.SAR will unpack the following files:

[lib]sapcrypto.[dll|so|sl]

sapgenpse[.exe]

4. Create the new folder,

(e.g. /usr/sap/saprouter).  Copy the file that we are extract through SAPCAR

5. Set the environment variables for SNC_LIB and SECUDIR,

My computer (right click)---> properties---> advanced system setting ----> advanced ---> environment variables ---> new 

SECUDIR---> path  till saprouter folder

SNC_LIB----> path till sapcrypto.dll

6. Create saprouttab  file in saprouter folder in file format,

7. Download the Distinguished Name from the SMP,

www.service.sap.com/saprouter-sncadd

Distinguished Name------> CN=pamserver, OU=0001400618, OU=SAProuter, O=SAP, C=DE

8. Create “certreq” file,

Now create a “certreq” file  in the  file format  in saprouter folder

9. Request for router license,

Enter the command on the command prompt

Sapgenpse get_pse -v -r certreq -p local.pse “<Distinguished Name>”

eg : Sapgenpse get_pse -v -r certreq -p local.pse “CN=sapserver, OU=xxxxxxxxxx, OU=SAProuter, O=SAP, C=DE”

Now open the certreq file with notepad

Copy the text and past it into the marketplace

Click on Request Certificate 

Copy the text in the executed page

10. Create “srcert” file in the file format in the saprouter folder,

 Past the copyed text in the “srcert” file

11. Import the certificate using the below command,  

sapgenpse import_own_cert -c srcert -p local.pse

Confirm that the import was successful

e.g: CA-Response successfully imported into PSE "/usr/sap/saprouter2/local.pse"

9. Create credentials for your PSE and secure your credentials file,

sapgenpse seclogin -p local.pse -O <user_for _SAProuter>

 eg : sapgenpse seclogin –p E:\usr\sap\saprouter\local.pse –O administrator

 Type in your PIN/Passphrase when prompted

 This generates the cred_v2 file

10. Check the command,

sapgenpse get_my_name -v -n Issuer

This should result to

Issuer  : CN=SAProuter CA, OU=SAProuter, O=SAP Trust Community II, C=DE

11. Now we need to maintain the details in the saprouttab file,

Model from SAP Marketplace :

Eg:

12. Download the CA certificate from SAP note 2131531,

https://service.sap.com/sap/support/notes/2131531

Download the object from the sap note  (last of the not)

Copy   smprootca.der  in to the saprouter folder

 Import the certificate

 sapgenpse maintain_pk -a smprootca.der -p local.pse

13. SAProuter service creation,

Enter  this command to the saprouter service creation

sc.exe create SAPRouter binPath= "saprouter.exe service -r -W 60000 -R saprouttab -K ^p:CN=sapserver, OU=xxxxxxxxxx, OU=SAProuter, O=SAP, C=DE^" start= auto obj= "NT AUTHORITY\LocalService"

Eg: sc.exe create SAPRouter binPath= "E:\usr\sap\saprouter\saprouter.exe service -r -W 60000 -R E:\usr\sap\saprouter\saprouttab -K ^p:CN=sapserver, OU=xxxxxxxxxx, OU=SAProuter, O=SAP, C=DE^" start= auto obj= "NT AUTHORITY\LocalService"

Then goto -----> Services

Right click on SAProuter service----> Propertice-----> logon

Type the user of saprouter and password

 Then goto “regedit”

 (Search on the system)

HKEY_LOCAL_MACHINE -----> SYSTEM -------> Services -------> saprouter ------>  double Click on image path

Remove the  “^”

14. Starting SAProuter,

15. Goto OSS1,

Parameter-----> Technical Setting

Fill the entries for the OSS connection

15.Goto SM59,

Select  ABAP Connections-----> Double click on SAPOSS------->  Connection Test

It show no errors in your Router Connection

Thanks for reading, Please share your valuable feedback.  

Share this

Basis Genie