SAPRouter Installation on Linux step by step

[avinashkumar2232]

Dear Techies,

If you are finding the SAP Router installation document step by step in simplest way, than this is for you.

Software needed

 1.Download latest version of SAPRouter from support portal.

  (visit Support Packages  –> Browse Download catalogue –> Additional components– >SAProuter)

1. Download latest version of SAPCRYPTOLIB from support portal.

    (visit Support Packages  –> Browse Download catalogue –> Additional components– >SAPCRYPTOLIB)

1. Download latest version of SAPCAR to extract the above downloaded software.

    (visit Support Packages  –> Browse Download catalogue –> Additional components– >SAPCAR)

Backup—

Take /usr/sap/saprouter

Make a directory saprouter in /usr/sap/.

And download the all 3 files

Extract the all files with commad –

./SAPCAR_1115-70006236.EXE -xvf *.SAR

Make sure that all files have full permission

CONFIGURATION:

1. Generating a new certificate request.
2. Goto SAProuter Certificates –> click Apply Now and copy your distinguished name and click next

Open cmd as administrator and navigate to <path_saprouter>\nt-x86_x64\ and execute,

Cmd -   sapgenpse get_pse -v -r certreq -p local.pse “<Distinguished Name>“

Enter the PIN

A file  “local.pse” will be created in the saprouter directory. (Ex: D:\usr\sap\saprouter\local.pse)

A file “certreq” will under <dir_saprouter>\nt-x86_x64  (Ex: D:\usr\sap\saprouter\certreq)

 Aquiring certificate signed by CA.

Open the “certreq” file with notepad and copy the text (including BEGIN and END)

Now go to the certification page and click on Submit CSR

Enter the text that you copied and request for certificate

Copy the generated response including begin and end

Create a file that you copied and transfer to the /usr/sap/saprouter

create a new file “routcert.txt” under <dir_saprouter>\nt-x86_x64 and paste the above certificate text.

Now run the command in the /usr/sap/saprouter

sapgenpse import_own_cert -c routcert.txt -p local.pse

and enter the pin that you generated

Now local.pse file generated

Authorizing windows user for accessing SAPRouter.

        Execute the following cmd with the saprouter user (sncadm).

sapgenpse seclogin -p local.pse -O <exclusive_user_SAProuter>

Now you will prompted to enter the PIN. enter the one you have given on above

Check whether a file “cred_v2” is created under saprouter directory.

1. Verifying authorization for the sncadm of saprouter.

      log on to user for saprouter,  open cmd and navigate to <dir_saprouter>\nt-x86_x64\ and execute

      sapgenpse get_my_name -v -n Issuer

For validity check run the command - sapgenpse get_my_name -n validity

Few other things to consider:

1. Some You can use the following SAPRouter command as below.

• Start router: saprouter -r
• Stop router: saprouter -s
• Soft shutdown: saprouter -p
• Router info: saprouter -l (-L)
• Create a new routtab: saprouter -n
• Toggle trace: saprouter -t
• Cancel route: saprouter -c id
• Dump buffers: saprouter -d
• Flush: saprouter -f
• Start router with a third-party library: saprouter -a library

1. If you are re installing the SAP router must take a backup of existing one.
2. Make sure that there is nothing in saprouter directory.
3. Normally saprouter is installed on Solution Manager and solman sidadm user will be used to administrator saprouter.
4. If solman system is not in your landscape you can use development system of ECC.

Below notes/documents can be referred for more information:

#https://support.sap.com/en/tools/connectivity-tools/saprouter/install-saprouter.htm

#https://community.sap.com/t5/devops-and-system-administration-blogs/sap-router-installation-and-con...

That’s it !   Have fun !!

Thanks,
Avinash