How to Install SAP Identity Management 8.0 with Software Provisioning Manager 1.0
You want to get rid of the error-prone manual installation and update steps – processes that can take up days.
You want to use a tool that automates your SAP Identity Management 8.0 installation and update.
You want to use modern-looking UIs that guide you through the installation and update for less than an hour.
Well, this is a reality now. As of version 8.0 SP04 and higher, you can install SAP Identity Management (IdM) using the Software Provisioning Manager 1.0 installation tool. Once you install your IdM system, you can use the same tool to update it to a higher SP level or to apply patches.
If you want to try it, this blog post is the right place to start with.
We will focus on the installation option only. You will learn how to install your IdM system as a standard system (with all instances on one host) on Windows. For more information about a distributed system installation over several hosts, see: How to Install SAP Identity Management 8.0 as a Distributed System with Software Provisioning Manager 1.0
Before you start, you need to have the following prerequisites fulfilled:
- The database server is installed, in this case, Microsoft SQL Server 2012
- The JDBC driver is downloaded, in this case, sqljdbc4.
- A supported SAP NetWeaver version is installed, in this case, SAP NetWeaver 7.40 SP02
- The prerequisites for the IdM components deployed on SAP NetWeaver AS Java are fulfilled. That is, IdM User Interface for HTML5 requires SAPUI5 library, etc. See: Prerequisites and Dependencies Between Deployable Components.
- The SAPCAR archiving tool is available on the installation host. You can download the latest version of SAPCAR from: https://launchpad.support.sap.com/#/softwarecenter -> SUPPORT PACKAGES & PATCHES -> By Alphabetical Index (A-Z) -> S -> SAPCAR
- The Software Provisioning Manager Archive is downloaded and unpacked to a local directory using the following command: <Path to SAPCAR>\sapcar.exe -xvf <Path to Download Directory>\SWPM10SP<Support_Package_Number>_<Version_Number>.SAR <Path to Unpack Directory> See: Downloading and Extracting the Software Provisioning Manager Archive
- The latest patch level of SAP Identity Management installation archives and the specifically required installation archives are downloaded. See: Downloading Specific Installation Archives (Archive-Based Installation).
We recommend that you always download the latest patch level of SAP Identity Management components from the SAP Software Download Center as an alternative to downloading the complete installation media. Note that, if you choose to download the complete SAP Identity Management media, the media is delivered with each support package stack of SAP Identity Management 8.0 release. As result of this, you always download patch 00 of the respective SP.
- Log on to the installation host using an account with the required user authorization to run the Software Provisioning Manager. See: Required User Authorization for Running Software Provisioning Manager on Windows
- Start the Software Provisioning Manager by executing sapinst.exe from the directory to which you unpacked the file SWPM10SP<Support_Package_Number>_<Version_Number>.SAR. By default, the SL Common GUI uses the default browser defined for the host where you run the installer. We recommend using Google Chrome.
- Choose SAP Identity Management 8.0 -> Installation -> Standard System -> SAP Identity Management Standard System and then choose Next.
- To run the installation in a typical mode, choose Typical and then choose Next.
- Enter SAP System ID and then choose Next.
- Enter the master password, confirm it and then choose Next.
- In the Package Path field, browse for the path to the following installation archives (SAPEXE<Version>.SAR, SAPHOSTAGENT<Version>.SAR and SAPJVM8_<Version>.SAR). Every time you provide a path to an installation archive, you need to choose Next to make the archive available. Once the thee installation archives are available, choose Next.
- In the Database Type field, select the database type for your IdM installation and choose Next.
- Enter the database host and port of the server where the IdM database is to run and choose Next.
- Enter the credentials for the IdM database and choose Next.
- Enter the prefix of the IdM database and the base-qualified name that is used for IdM packages in this database. Choose Next.
- Enter the passwords for the IdM database users. By default, the master password (in step 6) that is used for all the created users, is populated for the database users. If you want, you can provide different passwords for the different database users. In addition, enter the name of the developer administrator user. Note that this user must either exist in the UME or be added to the UME before you can log on to the Identity Management Developer Studio. Choose Next.
- Enter the IdM instance number and choose Next. This instance number is assigned to the SAP Identity Management Dispatcher instance. If you do not enter a specific value, the instance number is set automatically to the next free and valid instance number that has not yet been assigned to the SAP system to be installed or to SAP systems that already exist on the installation host.
- Browse for the JDBC driver path and enter the JDBC driver class name. Choose Next.
- Enter the SAP SID of the SAP NetWeaver Java system to be used for IdM components that you want to install. Choose Next.
- Enter your SAP NetWeaver release version and Support Package. Choose Next.
- Enter the credentials of the administrator of the AS Java.
- Select the additional IdM components that you want to install or deploy. Choose Next.
- If you want to install VDS, select this option and choose Next.
- Enter the IdM instance number and choose Next. This instance number is assigned to the Virtual Directory Server instance. If you do not enter a specific value, the instance number is set automatically to the next free and valid instance number.
- In the Package Path field, browse for the path to the IdM installation archives. You can either specify the path to each archive separately, or provide the path to a download basket with all downloaded archives. Choose Next.
- In the “Parameter Summary” dialog, you can select a parameter that you want to change and then choose Revise or choose Next to start the installation.
- The installation of your SAP Identity Management standard system completed successfully.
Next Steps:
- Install SAP Identity Management developer studio. See: Installing the Identity Management Developer Studio
- Proceed with the initial configuration of all installed IdM components. See Post-Installation Checklist and all referenced information.
Hi Ivelina Kiryakova
I am Install SAP Identity Management 8.0 with sap netweaver 7.4 SP8 and oracle 12C
I have the following error:
Regards,
Rafael
Hi Rafael,
You need to view the entries in the log files and try to solve the problem. For more information about how to proceed when errors occur while the installer is running, see Troubleshooting with Software Provisioning Manager
Best Regards,
Ivelina
been manually installing IDM for years now but needed a new IDM server in our test domain and figured I'd give the SWPM a try.
Sadly, I'm stuck.
I'm doing a distributed installation because idm server, db (ms sql 2012) and java stack are on different systems.
So I ran the installation for the central component but when the swpm runs the 1-create-db.sql script I get the error that the database installation has failed.
However if I copy paste the exact command the SWPM is using and drop it in cmd it works.
Any idea?
Hi Jonathan,
You need to check the log files. (The LOG FILES tab, if you are using the SL Common GUI or the View Logs menu item, if you are using the Java SDT GUI).
If you cannot resolve the problem, report an incident using component BC-INS.
Best Regards,
Ivelina
Hello Ivelina,
I'm going to install all components of IDM 8.0 on one server as a PoC.
Does AS Java simple installation cover all possible requirements of IDM 8.0, or are some additional product instances (EP Core, Enterprise Portal, AS Java extentions, etc.) needed to support IDM 8.0 functionalities?
Best regards,
Rafael
Hi Rafael,
The NW Java installation is enough. All needed components for IDM are installed from its archives as shown in step 21 above.
Of course, You'll need the Eclipse Neon (4.6) with the latest SAP IDM (8.5.2) on your computer (or directly on the PoC server) to work with IDM.
Hi Rafael,
Yes, the SAP NW AS Java installation is enough, as Benoit mentioned in his comment. Depending on the IDM components that you want to deploy on AS Java, make sure you check the prerequisites for them here: Prerequisites and Dependencies Between Deployable Components.
Some IDM components require libraries that are available as AS Java extensions.
Best Regards,
Ivelina
Hi,
what about the update option? I once installed our system, manually each IDM component (IDM, VDS, IDM Dev. studio).
When I now try to use the SWPM it says: "SAP system XYZ exists and is not suitable for this installation option.
DIAGNOSIS:Valid instance types for this installation option are IDM,VDS, but instance J00 has a different type.
SOLUTION: Choose a different SAP system ID or uninstall the existing system."
Regards, Richard
Hi Richard,
You can update SAP Identity Management with Software Provisioning Manager 1.0 only if you have installed SAP IDM with the SWPM tool.
Best Regards,
Ivelina
Hi We followed the above steps and installation guide from SAP to install SAP IDM 8.0
after installation we get an error ""Login failed: SSL error message""
Please help.. where can we trouble shoot..
Login failed: SSL error message mean by you don't import the ssl certificate on your eclipse JRE.
you need to import it by keytool cmd. https://docs.oracle.com/javase/tutorial/security/toolfilex/rstep1.html
If you don't want to use ssl port on eclipse dev studio you must add "IS_HTTPS = FALSE" on the eclipse preferences metadata .metadata\.plugins\org.eclipse.core.runtime\.settings\com.sap.idm-dev-studio-userinterface.prefs
Sorry if I answer too late but this can help the next person who will have the same problem
getting error Login failed: SSL error message after installation.. where can we check.. pls advice
Hi,
Please refer to the Post-Installation Tasks in the SAP Identity Management Installation and Update Guide. More specifically, see Using the HTTP Security (Secure Sockets Layer/SSL)
Best Regards,
Ivelina
Hello Ivelina,
Thanks for your detailed blog post! We are working on a IDM 8.0 (latest SP) installation at the moment and some things are just not clear to us. Maybe you/anyone can help? :-
We tried to follow your guideline, but to me it is not clear if you already had a AS Java before you started the installation. As a prerequesite you name "A supported SAP NetWeaver version is installed, in this case, SAP NetWeaver 7.40 SP02." In one of the first screens you set up a system ISY into which you are putting IDM system IDM later...?
Hope you can help us out on that 🙂
Regards + Thanks in advance!
Daniel
Hi Daniel,
You need to install SAP NetWeaver AS Java before you start SAP Identity Management 8.0 installation with SWPM. This is a prerequisite for the IDM installation.
SWPM deploys several IDM components on SAP NetWeaver AS Java. If you don’t have it installed in advance, SWPM will not be able to deploy those components.
Best Regards,
Ivelina
But the SAPSID for IDM installation should be different than the one of SAP NW AS Java? Or it is the same?
Hi Ivelina,
thanks for your response! That clears up the question.
Best
Daniel
Hello again Ivelina,
do you think it is fine for a test environment to install the AS Java plus the IDM and all of its componnents on one machine?
Regards
Daniel
Hi Daniel,
Yes, you can test IDM and AS Java installation on one host. Depending on the database server you are using, have in mind that installing IDM and AS Java on the same Oracle or SAP ASE database server is not supported. You must install IDM and AS Java on different Oracle or SAP ASE database servers. For example, see: Prerequisites and Recommendations (SAP ASE)
If you are using MS SQL server, it is OK to install IDM and AS Java on the same database server.
Best Regards,
Ivelina
Hi Ivelina,
thanks again!
Best,
Daniel
Hi Ivelina,
I am installing SAP IDM 8.0 standard version. SAP NW AS Java is already installed and up and running.
After the step in which you mention the SID ofr SAP NW AS JAVA I am stuck with the following error:
The step getNWVersion with step key |NW_IDM_OneHost|ind|ind|ind|ind|0|0|NW_IDM_AdaptNW_Internal|ind|ind|ind|ind|idmAdaptNw|0|getNWVersion was executed with status ERROR ( Last error reported by the step: TypeError: instanceForDeploy has no properties (in script NW_IDM_OneHost|ind|ind|ind|ind, line 129576: ???)).
ERROR 2018-07-02 16:38:07.709 (root/sapinst) (startInstallation) [/bas/749_REL/bc_749_REL/src/ins/SAPINST/impl/src/sapinst/CSiStepExecute.cpp:1116] id=controller.stepExecuted errno=FCO-00011
The step getNWVersion with step key |NW_IDM_OneHost|ind|ind|ind|ind|0|0|NW_IDM_AdaptNW_Internal|ind|ind|ind|ind|idmAdaptNw|0|getNWVersion was executed with status ERROR ( Last error reported by the step: TypeError: instanceForDeploy has no properties (in script NW_IDM_OneHost|ind|ind|ind|ind, line 129576: ???)).
Any idea what could be the issue?
Hi Laurent,
I would suggest that you check out our Troubleshooting with Software Provisioning Manager topic. If you can’t resolve this issue, report an incident using component BC-INS.
Best Regards,
Ivelina