Enterprise Resource Planning Blogs by SAP
Get insights and updates about cloud ERP and RISE with SAP, SAP S/4HANA and SAP S/4HANA Cloud, and more enterprise management capabilities with SAP blog posts.
Showing results for 
Search instead for 
Did you mean: 
Product and Topic Expert
Product and Topic Expert
This blog covers latest information and known issues for the SAP S/4HANA 1909 Fully-Activated Appliance.

The overview blog for the appliance can be found here.
The known issues for older appliance releases are here: 1809 / 1709.

Technical Topics

Initial system performance after instance creation or re-activate

When you create an instance or suspend / re-activate it, the system performance will be slower, especially within the Fiori Launchpad. Also, the first click on a Fiori tile will be significantly slower. This is due to initial caching in the system and will become faster if you continue working.

Other performance tuning tips are:

  • Choose the cloud provider location nearest to you (for good network latency)

  • Fiori rendering performance on the remote desktop is often slower than on your local laptop

  • The demo users contain a relatively large number of roles and Fiori tiles. You can copy these demo users in TCode SU01 and adapt accordingly e.g. remove roles, create your own roles / Fiori catalogs, or personalize the Fiori launchpad.

Note to SAP administrators: SGEN has been performed to pre-compile ABAP coding.

Issues with CORS (Cross-Origin Resource Sharing)

- Relevant for 1909 SP00 only, fixed in 1909 FPS01 -

You need to enable CORS if you want to connect e.g. from SAP Analytics Cloud into S/4HANA. Enabling CORS is done by setting one system parameter (icf/cors_enabled) to the value 1, however, in the 1909 SP00 appliance this parameter is set to 0 by default.
If you need CORS, please see here how to change the value to 1.
If you change the CORS parameter to 1, the personalization of the Fiori homepage ("Edit Homepage") will not work reliably anymore.
A correction for this cross dependency is described in SAP Note 2804978 (more background in this blog).

Transport system (STMS) is not configured by default

Please check the SAP standard documentation how to configure the transport system in a new system.

System short dumps in tCode ST22

You will see a significant number of dumps in tCode ST22 (related to SYSTEM_SHMCONSTR_ILL_STATEMENT) when you have accessed the system with Fiori.
This will not affect your system functionality, a fix is under investigation.

Issues with CIF configuration (e.g. for ePPDS or SCM integration scenarios)

If you encounter issues with the data transfer via CIF (SAP Core Interface), please check Tx SMQR and replace the existing value CIF* by CF*.

Fiori & User Interface

Error in Me area > App Finder > User Menu / SAP Menu

- Relevant for 1909 SP00 only, fixed in 1909 FPS01 -

When you navigate to the "Me Area" > App Finder and try to open the user or SAP menu, you get an error "Can not get menu data: HTTP request failed".

Resolution: You need to change two OData Services (ZUSER_MENU and ZEASY_ACCESS_MENU).


  • Search for the service ZUSER_MENU and mark the respective line

  • Change the processing mode to "Routing-based" (button in task bar on the top right)

  • In the right lower pane "System Aliases", click Add System Alias

  • In the change view, click New Entries and enter the following values:

    • Service Doc. Identifier: ZUSER_MENU_0001

    • SAP System Alias: LOCAL

    • Default System: Set the flag

  • Save and choose a customizing request

  • Do the same steps for the service ZEASY_ACCESS_MENU (the Service Doc. Identifier is called ZEASY_ACCESS_MENU_0001)

  • Afterwards restart the browser and test the services in the Me area again

No Fiori tiles displayed in client 400

- Relevant for 1909 SP00 only, fixed in 1909 FPS01 -

When you log on to client 400 in Fiori, the launchpad loads but no tiles are displayed and you see an error message "Failed to load catalogs".
This is due to the deactivated Gateway service in client 400, you can resolve it easily via activating this service.

  • Log on to client 400 in SAP GUI (BPINST / Welcome1)

  • Enter tCode /n/IWFND/IWF_ACTIVATE and choose Activate

  • Afterwards, refresh Fiori and tiles should load

  • To further configure Fiori in client 400, also assign a local alias to service ZINTEROP

    • Enter tCode /n/IWFND/MAINT_SERVICE

    • Locate and mark the service ZINTEROP

    • Choose Add System Alias in the right lower pane > New Entry

      • Service Doc Identifier: ZINTEROP_0001

      • SAP System Alias: LOCAL

      • Default System: Select

    • Save and choose a transport request

The Fiori User Assistance icon (question mark icon on top right) is not visible

This can have multiple reasons, the most common ones are:
A) Outdated SSL/TLS version (all 1909 versions)

Root cause is an outdated TLS version that is not accepted anymore by the SAP Cloud Platform (where the help content is stored) as of September 2020.

Change the parameter ssl/client_ciphersuites to the value 150:PFS:HIGH::EC_P256:EC_HIGH in the DEFAULT profile of your appliance (either via Tx RZ10 or the Web Dispatcher parameter change dialog) and restart your system. See SAP Notes 2968560 and 510007 for details.
B) Expired certificate for the connection between SAP S/4HANA and the SAP Cloud Platform (1909 SP00 only):


  1. Go to https://cp.hana.ondemand.com with the Chrome browser (other browsers may work differently). An empty white page should appear.

  2. Click the ‘lock icon’ on the left of the URL

  3. Click Certificate (Valid)

  4. Go to Details tab

  5. Click “Copy to File”

  6. Select “Next”

  7. Choose “Base-64 encoded X.509 (.CER)”

  8. Browse for the location you want to save it (eg. C:\docs) and type in a file name (eg. ondemand.cer)

  9. Save

  10. Next

  11. Finish

  12. OK

  13. Go to the web dispatcher admin console on  https://vhcals4hcs.dummy.nodomain:44301/sap/admin and login with user BPINST, password Welcome1

  14. Go to Menu > SSL and Trust Configuration > PSE Management

  15. From the Manage PSE pulldown menu (top of the page), select SAPSSLC.pse

  16. Click on Import Certificate

  17. Click on Certificate File Upload

  18. Choose the ondemand.cer file that you previously saved from the browser

  19. Click Import

  20. Refresh the Fiori launchpad page and you should see the ‘question mark icon’ with the context-sensitive Fiori help items

  21. If this does not succeed, please clear your browser cache and restart the browser. if this still doesn't help, restart the web dispatcher in the admin console (Go to Menu > Core System > Monitor > Click on Running drop down menu > Select  Shutdown of SAP Web Dispatcher. Confirm the warning message and select Back)

C) Firewall issues

Another reason could be a blocked connection (firewall, ports) between SAP S/4HANA and the SAP Cloud Platform. Especially if you have installed the appliance on your own hardware or in a confined cloud provider setup, you might need to adapt the proxy settings of the web dispatcher in file /usr/sap/S4H/SYS/profile/S4H_ASCS01_vhcals4hcs (see the SAP Fiori User Assistance documentation  > chapter


Included MS Windows Remote Desktop (RDP)

Certificate error when using the Cloud Connector in Chrome

If you access the Cloud Connector (https://vhcals4hcs.dummy.nodomain:8443/) on the remote desktop with Chrome, you might get an error about an "HSTS certificate error", especially if you have been logged on to Fiori before (this is different to the warning about the self-signed certificate).
The issue is under investigation, as workaround please use Firefox (also pre-installed on the RDP) to access the Cloud Connector.
If you absolutely have to use Chrome for the Cloud Connector you can tweak the HSTS settings by entering chrome://net-internals/#hsts in the Chrome URL bar and search the Internet for details.

Eclipse: "Secure Storage is Locked"

After starting Eclipse (e.g. for HANA Studio, ABAP Dev Tools), a text "Secure Storage is Locked" is displayed in the System pane, but the button "Unlock" doesn't work.


  1. Close Eclipse

  2. On the RDP, delete the folder .eclipse under C:\Users\Administrator

  3. Restart Eclipse

Issues with specific business scenarios

Service: Errors in browser pop-ups (503, not secure)

There are issues with browser pop-up Windows that are triggered by "actions" e.g. when calling a print-preview for order quotations, or triggering the creation of a follow-up document for an opportunity. This issue is under investigation.

Data Migration: ERP 6.0 EHP8 (IDES) performance in "direct transfer" scenarios

The CAL solution for the ERP 6.0 EHP8 IDES system (needed/recommended for the direct transfer data migration scenarios) has a very slow performance, both initially directly after system creation and also when running. The issue is a low-level issue with the underlying ASE database and can be fixed by increasing the threads for ASE and repairing table indices. Since this is difficult to realize manually, we plan to provide an updated IDES system with a better performance in the next weeks (status mid-July 2020).

Master Data Governance: Controlling area information missing in Profit Center Hierarchy validation

The message "x000(usmd1a)" is raised when validating change request with profit/cost center hierarchies.
This is a coding error that can be fixed by applying SAP Note 2934920 (typically via manual download/upload of the note unless you have connected your system to the SAP Notes system).

Master Data Governance: "Import Data for Consolidation – Business Partner" on remote desktop

The upload of XLS/CSV files in the app "Import Data for Consolidation – Business Partner" fails with an error message "Dereferencing the NULL reference".

Please try the upload from a local PC where MS Office is installed (the remote desk doesn't have it installed as it's a separate license).