Skip to Content

This blog covers latest information and known issues for the SAP S/4HANA 1709 Fully-Activated Appliance (if not indicated otherwise, the issues will occur in client 100 or across all clients).

The overview blog for this appliance can be found under


Cross Topics

Initial system performance after instance creation

When you create an instance, the initial system performance will be slow, especially within the Fiori Launchpad (some minutes of response time for the logon / first tiles, potentially a time-out). Also, the first click on a Fiori tile will be significantly slower. This is due to initial caching in the system and will become faster if you continue working.  

Note to SAP administrators: SGEN has been performed to pre-compile ABAP coding.


Supported hosting providers for the SAP S/4HANA 1709 Fully Activated Appliance

Currently, Amazon Web Services (AWS), MS Azure, Google Cloud Platformare (GCP) and SAP Monsoon (only SAP-internal) are supported cloud providers for the SAP S/4HANA 1709 Fully Activated Appliance.


Access via SAP Analysis for MS Office (and other RFC-based channels)

When trying to open a connection from SAP Analysis for MS Office to SAP S/4HANA (using a local entry in your SAP Logon), you get the error message:

LOCATION    SAP-Gateway on host vhcals4hci.dummy.nodomain / sapgw00
ERROR       reject connection request from […]
MODULE /bas/[…]/gwr3cpic.c


  1. Open transaction SMGW > Goto > Expert Functions > External security > Maintain ACL files> > switch to tab prxyinfo
  2. Add a standard line to the PRXYINFO tab as follows to allow all traffic regardless of network.:
  3. Save > Activate Globally

Please also ensure that the ports 3300 and 30215 are opened for your instance. These ports are open by default but you can check/change this in the instance details of your CAL instance ( > Instances > [Click on your instance] > Virtual Machines > Access Points)


Fiori Launchpad

The Fiori User Assistance icon (question mark icon on top right) is not visible

The reason for this could be two things:

  1. Wrong proxy setting in the Web Dispatcher configuration.
    This is definitely wrongly configured in the SAP S/4HANA 1709 SP00 fully-activated appliance, so fix this first. Resolution needs access to the Linux backend system of the appliance (via PuTTY/ssh) and takes ~10-15 minutes.
    (Note to SAP employees: if you have deployed an appliance in the SAP-internal CAL network, you don’t have to touch this setting, proceed directly with 2.).
  2. Invalidated certificate for the server that contains the help content.
    If the corrected proxy setting does not take effect, apply this fix. Resolution is browser-based and takes ~5 minutes.
1. Resolution for the wrong proxy setting in Web Dispatcher
  1. Log on to the Linux backend system as root. You will need PuTTY (or another SSH client) and the private key file (.pem) that was generated when you created the instance. Unless you chose to save it on your own computer, the .pem file can be downloaded from the instance details page. For details how to log on with PuTTY, see this page > How to connect to a running instance via the secure shell protocol (SSH).
  2. When logged on to Linux, enter su s4hadm (to change to user s4hadm)
  3. Enter cd /usr/sap/S4H/SYS/profile (to change to the directory with the Web Dispatcher config files)
  4. Enter vi S4H_ASCS01_vhcals4hcs to open the configuration file in the vi text editor
  5. Press E (to edit the file anyway, an older swap version exists as well)
  6. Scroll to the end of the file where you will find the following text block:
    #Configure SAP Web Dispatcher for Context-Sensitive User Assistance
    wdisp/system_3 = SID=ABC, EXTSRV=, SRCURL=/sap/dfa/help/,, SRCSRV=*:*, STANDARD_COOKIE_FILTER=OFF
    wdisp/system_4 = SID=DEF, EXTSRV=,,  SRCURL=/resources/sap/dfa/help/, SRCSRV=*:*, STANDARD_COOKIE_FILTER=OFF
  7. Remove the two occurrences of the PROXY= parameter, i.e. afterwards the two lines should look like this:
    wdisp/system_3 = SID=ABC, EXTSRV=, SRCURL=/sap/dfa/help/, SRCSRV=*:*, STANDARD_COOKIE_FILTER=OFF
    wdisp/system_4 = SID=DEF, EXTSRV=, SRCURL=/resources/sap/dfa/help/, SRCSRV=*:*, STANDARD_COOKIE_FILTER=OFF
  8. Enter [ESC]:wq (to write the file and quit the vi editor)
  9. Lastly, restart the Web Dispatcher. Log on to https://vhcals4hcs.dummy.nodomain:44301/sap/admin/public/default.html with user bpinst and password Welcome1 (for this URL to work, you need to maintain your local hosts file)
  10. In Core System > Monitor > Status, choose Shutdown SAP Web Dispatcher from the drop-down menu and confirm.
  11. Reload the Fiori Launchpad in your browser to check if the question mark icon with the User Assistance is visible. If not, proceed to 2.
2. Resolution for the invalidated certificate of the help content server
  1. Go to with the Chrome browser (other browsers may work differently). An empty white page should appear.
  2. Click the ‘lock icon’ on the left of the URL
  3. Click Certificate > Valid
  4. Go to Details tab
  5. Click “Copy to File”
  6. Select “Next”
  7. Choose “Base-64 encoded X.509 (.CER)”
  8. Browse for the location you want to save it (eg. C:\docs) and type in a file name (eg. ondemand.cer)
  9. Save
  10. Next
  11. Finish
  12. OK
  13. Go to https://vhcals4hcs.dummy.nodomain:44301/sap/admin and login with user BPINST, password Welcome1
  14. Go to Menu > SSL and Trust Configuration > PSE Management
  15. From the Manage PSE pulldown menu (top of the page), select SAPSSLC.pse
  16. Click on import certificate
  17. Open the saved certificate (eg. “ondemand.cer”) from the saved location with notepad
  18. Copy the content of the file between —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—-,including those two lines
  19. Paste this into the “import certificate” form and then click Import
  20. Go to Menu > Core System > Monitor > Click on running drop down menu > Select  Shutdown of SAP Web Dispatcher. Confirm the warning message and select Back.
  21. Refresh the Fiori launchpad page and you should see the ‘question mark icon’ with the context-sensitive Fiori help items (you might need to clear your browser cache as well).


General remark on the Fiori Web Assistant content:

If you click the help icon (question mark) directly on the Fiori launchpad homepage, you will see Guided Tours that are not applicable for the SAP S/4HANA 1709 Fully-Activated appliance, so please ignore them and use the Web Assistant on specific Fiori tiles only.


Clients 200/300/400 (or other newly created clients): WebGUI / Web Dynpro apps prompt for separate log-on or access is blocked


If you log on to the Fiori launchpad in a client different than 100 and try to open WebGUI / Web Dynpro apps, you are prompted with a separate log-on screen or are blocked from access with a security certificate message.


Remove client 100 from the RFC connection LOCAL_HTTP:

tCode SM59 > HTTP Connection to ABAP System > LOCAL_HTTP > Logon & Security > Remove entry 100 in Client field (leave it blank) > Save.



“Manage Customer Returns” app (scope item BKP, Advanced Customer Returns)

On the ‘Manage Customer Returns’ app, it’s not possible to select the Return Document number and to activate the ‘Determine Refund’ button. If trying to access the link ‘ Refund Determination’ from the document number, an error ‘ the request Resource not found’ is displayed.
As a workaround, you can use the app “Determine Customer Refund”.


“Display Outbound Delivery” app (scope item 1IU, Customer Consignment)

The “Output Control” button is not active.As a workaround: from the initial screen of the app, select More > Outbound Delivery > Issues Delivery Output


“Manage Debit Memo Requests” app (scope item BDQ, Invoice Correction Process with Debit Memo)

The PDF output for order type CBII Invoice Increase Req. is not possible.
Under investigation.


“Manage Credit Memo Requests” app (scope item BKL, Invoice Correction Process with Credit Memo)

No output possinle for doc type RK Invoice Correct. Request..
Under investigation.


Asset Management

“Change Maintenance Notification” app (scope item BH1, Corrective Maintenance)

On the “Change maintenance notification” app, assigning an order to a notification is not possible. As a workaround, use the app “Manage Notification List” to assign orders.

To report this post you need to login first.


You must be Logged on to comment or reply to a post.

  1. Roland Kramer

    So klein ist die Welt, hallo Jörg …

    Bin gerade dran, S/4 1709 zu installieren, leider gibt es keine Kernel 7.53 DVD die benötigt wird

    Mal sehen, wie weit ich mit der FA Version komme … 😉


    Viele Grüsse Roland


    1. Joerg Wolf Post author

      Hi Roland,

      yes, small world 😉

      One remark:

      the yellow-marked link above is only visible for SAP employees or for customers / partners who have been authorised to download the appliance (see note 2041140 for details).

      Other than that, have fun with the fully-activated appliance.

      Gruesse Joerg

  2. Claus-Peter Paffrath

    Hi Joerg,

    many thanks for your Blogs.

    But I have another Issue: my Colleagues need in Addition several UI Add Ons, eg. UIHR001, UITRV001 for HR Self Services. Now there is a Problem with the Maintenance Planner: due to the Component MSGPMCON 200 the Maintenance Planner assumes, that the Component SAP Insurance FS-PM 5.3 for Netweaver is installed in the System. And therefore no Stack calculation is possible (due to NW 7.40). Clean up in Verification won’t correct the Information. In Solution Manager and LMDB the System Information is correct. Any Idea?

    Best Regards


    1. Joerg Wolf Post author

      Hello Silas,

      are you mabye behind a corporate firewall ?

      In general, please use the CAL forum and open a new thread for your issue,  describing what you did (and including your CAL user or instance ID).

      Please don’t append your question to existing threads, it’s easier to follow that way.

      Thanks, Joerg

  3. Andre Fischer

    I had issues to connect using ADT tools.

    I found the solution in this archived discussion

    A.) Open ports in CAL (from Joerg Wolf )

    Open the respective ports in CAL if not yet done (this is closed by default):

    – Custom TCP, 3300 for access from ABAP in Eclipse to S/4HANA ABAP stack

    – Custom TCP, 30215 for access from HANA Studio / modeling perspective to HANA DB

    Click on the instance in the CAL console to bring up the instance details and then -> Virtual Machine -> Edit (right lower corner) -> Add (access point) -> <add above ports, as IP range choose> -> Add -> Save.



    B.) Change settings in transaction SMGW

    1) Go to SMGW–>Goto–>Expert Functions–>External security–>Maintenance of ACL files–>switch to tab prxyinfo

    2) Add a line to the PRXYINFO tab as follows to allow all traffic regardless of network.

                   P SOURCE=* DEST=*

    3) Go back (F3) –> Save (and on the Popup) -> Activate Globally

    Method found by Girish Nayak  in another thread from @Suneeth Pillaiand @Vicente CastelloCannot login with RFC to&amp;nbsp; DEMO / Evaluatio… | SCN


    1. Joerg Wolf Post author

      Hello Kyo,

      I noticed that you posted the same question in the SAP CAL community (see here), and the CAL team is already on it.

      In the future, please use the CAL community as channel for concrete issues (as you did) since comments to blogs are harder to find & track. And cross-posting in different places is always tricky ;-).






Leave a Reply