Preparation
1. Download the SAP Cryptographic Library from the SAP Service Marketplace. The SAP Cryptographic Library installation package sapcrypto.car contains the following files:
• The SAP Cryptographic Library (sapcrypto.dll for Windows or libsapcrypto.
• A corresponding license ticket (ticket)
• The configuration tool sapgenpse.exe
Steps
1. Copy and transfer the downloaded library file(libsapcrypto) and the configuration tool(sapgenpse) to the DIR_EXECUTABLE directory. Ensure the files permission is correct.
/usr/sap/SID/SYS/exe/run
cdexe
2. Copy the ticket file to the sub-directory sec in the instance directory $(DIR_INSTANCE).
/usr/sap/SID/DVEBMGSxx/sec
3. Set the environment variable SECUDIR to the sec sub-directory. The application server uses this variable to locate the ticket and its credentials at run-time. Define the environment at sapenv_HOSTNAME.csh and sapenv_HOSTNAME.sh file.
4. Set the following profile parameter as in transaction code RZ10 on each instances. You can ignore the warnings that the parameters are not known to the system. This can be ignore, if you are upgrading the SAP Cryptographic Library.
ssf/name = SAPSECULIB ssf/ssfapi_lib = <path and file name of SAPCRYPTOLIB> sec/libsapsecu = </path><path and file name of SAPCRYPTOLIB> ssl/ssl_lib = </path><path and file name of SAPCRYPTOLIB>
5. Restart all the instances (Central Instance, Dialog Instance). This can be ignore, if you are upgrading the SAP Cryptographic Library.
