Part 4 : SAP Solution Manager 7.2 SR1 (+ SPS03) : New Client, Profile Parameters & UME

[patelyogesh]

Hello Friend,

You have your SAP Solution Manager ready for next step. You successfully upgraded your system following document

Now its time to make system ready for New Client, Profile Parameters & UME

Solution Manager Client

Note: As per SAP you do not require to create new client in SAP Solution Manager unless you have special requirements. You can continue configuring your system with SAP default client 001. I have show you below for an example. You can skip if you working with default clinet 001 to step : ABAP Profile Parameters

In my example I have SAP Solution Manager client 300

Make sure you set profile parameter login/no_automatic_user_sapstar = 0 in order to login new client

Perform client copy SAP_CUST

And SAP_USER

Your client is ready for next step.

ABAP Profile Parameters

Before making any changes to profile parameters make sure you have configured PHYS_MEMSIZE parameters for your ABAP system

You need to consider following for memory allocation

• - SQL server memory allocation
• - JAVA system memory allocation
• - Wily Introscope memory allocation
• - Operating System memory allocation
• - ABAP system memory allocation

2048519 - Profile parameters for SAP Solution Manager 7.2

abap/buffersize	500000
abap/shared_objects_size_MB	350
csi/enable	0
icm/host_name_full
icm/server_port_<X>	***
login/accept_sso2_ticket	1
login/create_sso2_ticket	2
rdisp/elem_per_queue	4000
rdisp/max_wprun_time	3600
rsdb/cua/buffersize	10000
rsdb/ntab/entrycount	30000
rsdb/ntab/ftabsize	60000
rsdb/ntab/irbdsize	15000
rsdb/obj/buffersize	50000
rsdb/obj/max_objects	20000
rtbb/buffer_length	60000
sap/bufdir_entries	10000
system/type
zcsa/db_max_buftab	10000
zcsa/presentation_buffer_area	20000000
zcsa/second_language	E
zcsa/table_buffer_area	100000000

Add following parameters to ABAP instance profile

ABAP Instance

icm/server_port_0 = PROT=HTTPS,PORT=5$(SAPSYSTEM)01,TIMEOUT=60,PROCTIMEOUT=3600

icm/server_port_1 = PROT=SMTP,PORT=25,TIMEOUT=120,PROCTIMEOUT=120

icm/server_port_2 = PROT=HTTP,PORT=5$(SAPSYSTEM)00,TIMEOUT=60,PROCTIMEOUT=3600

ssl/client_ciphersuites = 902:HIGH

JAVA SSL and Profile Parameter

Add profile parameter to java SCS profile

ms/server_port_1 = PROT=HTTPS,PORT=444$$

Navigate to \usr\sap\<SID>\J<XX>\sec. Create an empty text file and save it as ticket (no extension). That's it. Without this, SSL will not function.

For more information follow link

Copy SAPSSLS.pse and ticket file from java instance and paste in to SCS instance sec directory

SAP Help links

https://help.sap.com/saphelp_nw74/helpdata/en/a2/f9d7fed2adc340ab462ae159d19509/frameset.htm

https://help.sap.com/saphelp_nw74/helpdata/en/09/392712944fc6478c9f1ff198b6b0a7/content.htm?frameset...

Open SSL login to to NWA

You will be seen as below

Configure pors as below

UME

Login to NWA and open Configuration >> Infrastructure >> Destinations

Change RFC Destination UMEBackendConnection to SAP ABAP client 300 from 001

UME configuration completed.

SAP Roles

Create Java role

1776467 - Step 'Maintain Users' shows error 'User <user_name> is not allowed to perform this request. Check SAP Note 1647157'

1647157 - How to Set up Access to the SPML Service on AS Java

Assign this role to J2EE_ADMIN user

Restart SAP systems (ABAP + JAVA)

You will see access points as below for your system

Now you have system ready for  SAP Support Pack correction Notes 03 SPS

Thank you for reading

Yogesh

[TomCenens]

Hi Yogesh

Great to see you share experience on SAP Solution Manager 7.2. I do hope readers still also reflect on what they are doing and why. Things like SAP notes get updated etc so the actual content that is linked in your blog posts might change or shift over time. Besides that, happy to see community members share knowledge so openly.

SAP provides client 001 in SAP Solution Manager as a productive client. There is no real need (except if you've got some specific reasons for it) to copy the 001 client. This is described in the master guide which is linked on help.sap.com. Not copying the client also means less configuration or adjustments that need to be done.

Best regards

Tom

[patelyogesh]

Hello Tom,

Thanks again. I have added note for more clarification.

Thank you

Yogesh

[Former Member]

hello yogesh
I am getting an error sap memory request 4064 bytes could not be com! I have applied the parameter you have suggested above. can you please advise. I am stuck here now,. 

[patelyogesh]

Hello Abhi,

Can you please give me entire error message? I can take a look in to it.

I did not change memory parameters which already more than suggested by SAP note. I only adjusted the one who are not meeting requirement as per SAP note.

Regards,
Yogesh

[Former Member]

Hi yogesh.patel3

Your guide has been very clarified to me and I want to thank you for made it available to the community!. I have one question about the SSL access point, When I added the 50221 HTTPS port, it doesn't activate like the IIOPSEC or P4SEC. What should I check to activate it?.

[patelyogesh]

can you please look at sap help below

https://help.sap.com/saphelp_nw74/helpdata/en/48/3ae05299c172d0e10000000a42189c/content.htm

[Former Member]

Thanks Yogesh, the SSL is active now, but I'm having this situation: If I opened solman_setup using HTTP it works perfect, but if I go through HTTPS I can´t load the page (no error, no message, nothing). What should I look for?

[patelyogesh]

Can you try webgui through HTTPS on ABAP and let me know what you see there ?

[Former Member]

Hi Yogesh, I can load the webgui without problems, in both http and https, the thing is this page https://fullhostname:50001/sap/public/myssocntl?sap-client=001 its blank and not redirect to the solman_setup site. I have the icm parameter setup with the FQDN name and my host was edited with the full name too, but nothing happens in https,

[Former Member]

Hi Yogesh, solved my problem, I just imported the SSL certificate from the abap stack to the system and now IP opens solman_setup in HTTPS. Thank you very much for your replies!.

[patelyogesh]

that is right solution.

[nick_schmidt]

Getting shortdump when using snote to loading 0002225070 SAP Solution Manager 7.2 Support Package 03 - Basic function
Category               Resource Shortage
Runtime Errors         SYSTEM_NO_ROLL
the memory request for 4064 bytes could not be complied with.

Any ideas?

[patelyogesh]

We had this issue. check memory parameters. Try this 2 -3 times to apply note you might have success in it.
 

[former_member324561]

Hi  Marcia,

I am having the same issue has you, pls how did you I just imported the SSL certificate from the abap stack to the system?

[patelyogesh]

Hello,

Import SSL certificate to java what you have installed in ABAP stack.

-Yogesh

[former_member324561]

Thank You, how do I sign the certificate

[former_member218173]

Hi Yogesh,

Thanks for this wonderful document. It really helped me during the Solman 7.2 Installation.

Now, I am stuck at an issue. Solman_setup redirects to

https://sap.tcsmobilitycloud.com:50201/sap/public/myssocntl?sap-client=200 .  After entering solman_setup transaction the third time, it redirects to solman configuration page.

 

Could you please suggest any solution.

 

Regards

Dona

[patelyogesh]

Hello Dona,

Run TCode once and keep first open page and do not close it. Once again run TCode and see the results on second run.

Let me know if you are still not able to open page.

 

Thanks

Yogesh

[dominik_kastner]

Hy,

add following parameter for SSO ticket creating:

login/accept_sso2_ticket = 1

login/create_sso2_ticket = 2

BR

[former_member218173]

Hi Yogesh,

As mentioned in my earlier post i can open the TCODE Solman_setup after executing it the third time keeping the first and second page open.

 

Regards

Dona

[patelyogesh]

This is computer related issue and not a solution manager issue

-Yogesh

[vcassana]

How did they add the certificate? I currently have the problem at the moment of running solman_setup. Does not open in https.

If possible step by step.

 

Victor Cassana

[vcassana]

How did they add the certificate? I currently have the problem at the moment of running solman_setup. Does not open in https.

If possible step by step.

 

Victor Cassana

 

[patelyogesh]

Do you have HTTPS configured on ABAP and JAVA system?

-Yogesh

[Former Member]

Hello, Yogesh!

I want to ask one question regarding the parameters of icm/server_port_xx

I have set the three parameters of icm/server_port_0 , 1 , 2 but I did not set the parameters you have put up there of ssl/client and ms/server

are these two are essential? Why it is not included in the SAP note of profile parameters...

 

[Former Member]

Hello, Yogesh!

If i am fine with proceeding on http not https, i will not SSL certificate right?

but still, I cannot go to link even on http...

Where should I check?

[patelyogesh]

Yes please, ssl/client is must and ms/server required if you want https

-Yogesh

[patelyogesh]

If you are not configuring HTTPS you do not need certificates.

-Yogesh

[former_member201054]

Hi Yogesh,

Thanks for this wondeful document.

How to determine the port number for P4SEC and IIOPSEC. Is there a standard number?

for HTTP..I am giving 5xx01

what can I give for P4SEC and IIOPSEC ?

Thanks in advance