Installing Saprouter on Windows 2003 server

If you have developed a Sap System in your Office can happen that technical support is needed to fix some customize problems. In order to allow that Sap technical support can help your developers, you must set up a Saprouter connection between your office and the Sap side.

The first approach to the online docs and the online technical support is not easy, so you can get benefits from this how to.

First step

After the first contact with the technical support, you must compile the remote connection data sheet (note 28976) in which you specify what kind of connection you have ( dial-up, isdn, internet, …) and what typology of connection you prefer: Saprouter and SNC or Saprouter and VPN.

This how to describe the set up of a Saprouter and SNC connection with an internet connection.

The compiled data sheet must be sent to the fax number indicated in the document.

The installation of Saprouter

Past few days you have a reply from Sap tech. supp. in which they indicate as the host name and the public ip address of your Saprouter as the Saprouter of sap side and the link from which you can download the software needed. (http:/service.sap.com/SAPROUTER-SNCADD).

You can find the saprouter.exe in the installation directory of your sap system.

This is the list of the program that you need:

ntscmgr.exe (locate in the sap int. directory often : C:\usr\sap\SVI\SYS\exe\run)

saprouter.exe (locate in the sap int. directory often : C:\usr\sap\SVI\SYS\exe\run)

sapcar.exe (locate in the sap int. directory often : C:\usr\sap\SVI\SYS\exe)

sap cryptographic library (http:/service.sap.com/SAPROUTER-SNCADD -> download area) download in the directory c:\usr\sap\saprouter.

1) Create the directory c:\usr\sap\saprouter on your saprouter sever.

2) Create the account SNC_admin in your domain, member of administrator group

3) Log in with SNC_admin account

4) Install ntscmgr.exe

5) Install sapcar.exe

6) Install sap cryptographic library in the directory c:\usr\sap\saprouter with the command

car – xvf SAPCRYPTO.CAR

7) Install saprouter.exe with command :

ntscmgr install saprouter –b c:\usr\sap\saprouter\saprouter.exe –p “service –r –W 6000 –R c:\usr\sap\saprouter\saprouttab – K ^p:your_distinguished_name^”

The your_distinguished_name is in the http:/service.sap.com/SAPROUTER-SNCADD -> apply now link.

8) Set the environment variables in My Computer -> Properties -> Advanced :

User variables for SNC_admin:

Variable Valuetee

SECUREDIR saprouter

SNC_LIB c:\usr\sap\saprouter\sapcrypto.dll

9) Edit the registry under

MyComputer\HKEY_LOCAL_MACHINE\System\Currentcontrolset\Services\Saprouter

and change ^ to “ under Image path

10) Create the directory c:\documentandsettings\SNC_admin\sec

11) Reboot the system

12) From c:\usr\sap\saprouter directory create the certificate request with the command:

Sapgenpse get_pse –v –r certreq –p local.pse “your_distinguished_name”

The command generate a certreq file in the saprouter directory.

13) Open the certreq file with a note pad editor and copy and paste the content in the

http:/service.sap.com/SAPROUTER-SNCADD procedure

14) In reply you’ll receive the certificate signed by the CA. Copy and paste the text in a file

named srcert ( created in the dir c:\usr\sap\saprouter)

15) Installing the certificate by the command :

sapgenpse import_own_cert –c srcert –p local.pse

16) Create the credentials for Saprouter:

Sapgenpse seclogin –p local.pse –O SNC_admin

17) Check if the certificate has been imported correctly with the command:

Sapgenpse get_my_name –v –n Issuer (the name should be: your distiunguished name)

18) Go to control panel -> services : saprouter -> botton: startup , set the start up type on

Automatic and enter the user SNC_admin

19) Populate the saprouttab with the entries supplied from sap tech. service such as:

# SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxx.xxx.xxx.xxx *

# SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <port>

# SNC-connection from SAP to local R/3-System for NetMeeting
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503

# SNC-connection from SAP to local R/3-System for saptelnet
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23

# Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> xxx.xxx.xxx.xxx 3299

# deny all other connections
D * * *

20) For troubleshooting you can read the dev_rut file in \usr\sap\saprouter

The installation of service connections

This software has to be installed on your sapserver.

21) Go to http://service.sap.com/serviceconnection and compile the maintain connection by press

the maintain connection link and go to Systemdata.

22) In Systemdata you’ll find the table named “system” already compiled, go to Appl.Server table and press CreateNewApplicationServer, compile all fields without insert any other saprouter.

23) In Systemdata, System, Saprouter chose the port 3299.

24) Now in Service connector you must find the Routestring in the form of /H/localadress_of_saprouter/S/3299

25) Select the connection type from Set up Connection types (typically R3/ Support)

26) Install the Service Connector from the link at 21.

27) Clik on the selected Connection Type and than press Star Service Connector

28)When you open a service connection, the executable stfk.oez file is generated which contains the connection parameters for the Service Conn.

29) If a Service Conn. started successfully, confirm the connection choosing yes.

30) The connection is opened and the Saprouter tries to connect to Sap side until (choosing refresh) you see connected in the SAProuterstatus.