Linux / Windows – what’s the difference…

How to Install saprouter on Ubuntu Server (without any SAP installation)


Firstly you have need for SAPCAR, saprouter and sapcrypto.
All of the above you can find from SW download centre from SAP:

Note: You will be asked for a PIN code. Just pick your own 4 numbers, but
you’ll have to use the same PIN every time you’re asked to enter one.

  1. Send a customer message to SAP Support (component XX-SER-NET-OSS-NEW) and tell them to register the hostname and IP of your new SAProuter.
    You have to register it with a official IP address (no internal IP’s allowed), but it’s allowed to use NAT in the firewall/router.
  2. Install Saprouter – Download, Extract, copy to right place (in right case: /usr/sap/saprouter/ in my case it was /usr/local/sbin/)
  3. Extract sapcrypto: SAPCAR -xvf SAPCRYPTOLIB_XX-XXXXXXXX.SAR (where XXX are version and date numbers)
  4. Copy sapcrypto files where you had installed saprouter – In my case it was /usr/local/sbin/
  5. Copy to /usr/lib/
  6. Set up SNC_LIB & SECUDIR environment variables (if you are using bash) like:
    vi ~/.bashrc
    Insert following:
    export SECUDIR=/usr/local/sbin/
    export SNC_LIB=/usr/local/sbin/
    – In my case path was where I installed saprouter and copied
    :wq – Save and close
    Make variables to work: source ~/.bashrc
  7. Make folder “sec” under your user with you’ll be running saprouter …
  8. Create new certificate request’s and new local PSE’s file command:
    sapgenpse get_pse -v -r certreq -p local.pse “CN=<your sap router ip>, OU=<your ou_number>, OU=SAProuter, O=SAP, C=DE”
    just press Enter for the PIN – You will get new certreq file
  9. Edit certreq – copy all text inside it
  10. Open browser and go to address “Apply Now”
  11. Choose “SAProuter” and click “Continue”
  12. Copy-paste the content of file certreq into text area, and click “Request Certificate”.
  13. The web page will create the certificate response (inside text area).
  14. If srcert file exists – delete the current srcert file. Create the new srcert file, and fill with the above certificate response.
  15. Import the response into the local PSE.
    sapgenpse import_own_cert -c srcert -p local.pse
  16. Create the credential for <sid>adm user (Or user under which you are running saprouter – in my case it was root)
    sapgenpse seclogin -p local.pse -O <sid>adm
  17. Registering with the local PSE
    sapgenpse get_my_name -v -n Issuer
  18. Restart saprouter if needed or start it fo first time (in my case):
    /usr/local/sbin/saprouter -r -E -G /var/log/saprouter.log -R /etc/saprouter/saprouttab -K "p:CN=, OU=, OU=SAProuter, O=SAP, C=DE" &


For reference:

, , , , , , , , , ,

Leave a Reply

Your email address will not be published. Required fields are marked *