install config gateway 20

SAP NetWeaver How-To Guide

Installing and Configuring SAP NetWeaver Gateway 2.0

Version 2.0

September 2011

Authors: Marc Chan, SAP Customer Solution Adoption

© Copyright 2011 SAP AG. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice.

Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors.

Microsoft, Windows, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation.

IBM, DB2, DB2 Universal Database, OS/2, Parallel Sysplex, MVS/ESA, AIX, S/390, AS/400, OS/390, OS/400, iSeries, pSeries, xSeries, zSeries, z/OS, AFP, Intelligent Miner, WebSphere, Netfinity, Tivoli, Informix, i5/OS, POWER, POWER5, OpenPower and PowerPC are trademarks or registered trademarks of IBM Corporation.

Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries.

Oracle is a registered trademark of Oracle Corporation.

UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.

Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc.

HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World Wide Web Consortium, Massachusetts Institute of Technology.

Java is a registered trademark of Sun Microsystems, Inc.

JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape.

MaxDB is a trademark of MySQL AB, Sweden.

SAP, R/3, mySAP, mySAP.com, xApps, xApp, SAP NetWeaver, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.

These materials are subject to change without notice. These materials are provided by SAP AG and its affiliated companies ("SAP Group") for informational purposes only, without representation or warranty of any kind, and SAP Group shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP Group products and services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty.

These materials are provided “as is” without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

SAP shall not be liable for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials.

SAP does not warrant the accuracy or completeness of the information, text, graphics, links or other items contained within these materials. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third party web pages nor provide any warranty whatsoever relating to third party web pages.

SAP NetWeaver “How-to” Guides are intended to simplify the product implementation. While specific product features and procedures typically are explained in a practical business context, it is not implied that those features and procedures are the only approach in solving a specific business problem using SAP NetWeaver. Should you wish to receive additional information, clarification or support, please refer to SAP Consulting.

Any software coding and/or code lines / strings (“Code”) included in this documentation are only examples and are not intended to be used in a productive system environment. The Code is only intended better explain and visualize the syntax and phrasing rules of certain coding. SAP does not warrant the correctness and completeness of the Code given herein, and SAP shall not be liable for errors or damages caused by the usage of the Code, except if such damages were caused by SAP intentionally or grossly negligent.

Disclaimer

Some components of this product are based on Java™. Any code change in these components may cause unpredictable and severe malfunctions and is therefore expressively prohibited, as is any decompilation of these components.

Any Java™ Source Code delivered with this product is only to be used by SAP’s Support Services and may not be modified or altered in any way.

Document History Document Version Description

1.00 First unofficial release of this guide for Gateway 1.0 pilot

2.00 Release of this how-to guide for SAP NetWeaver Gateway 2.0

Typographic Conventions Type Style Description

Example Text Words or characters quoted from the screen. These include field names, screen titles, pushbuttons labels, menu names, menu paths, and menu options. Cross-references to other documentation

Example text Emphasized words or phrases in body text, graphic titles, and table titles

Example text File and directory names and their paths, messages, names of variables and parameters, source text, and names of installation, upgrade and database tools.

Example text User entry texts. These are words or characters that you enter in the system exactly as they appear in the documentation.

<Example text>

Variable user entry. Angle brackets indicate that you replace these words and characters with appropriate entries to make entries in the system.

EXAMPLE TEXT Keys on the keyboard, for example, F2 or ENTER.

Icons Icon Description

Caution

Note or Important

Example

Recommendation or Tip

Table of Contents

1. Business Scenario ..........................................................................................................1

2. Background Information .................................................................................................1

3. Prerequisites....................................................................................................................1

4. Step-by-Step Procedure ..................................................................................................2 4.1 Download the Gateway bit from Service Marketplace ................................................2 4.2 Installing the Gateway system ...................................................................................3 4.3 Basic Configurations on Gateway and Backend systems ...........................................7 4.4 Installing the Backend system for Workflow scenario ............................................... 28

Installing Gateway 1.0 Pilot

September 2011 1

1. Business Scenario This how-to guide aims at providing a step-by-step procedure with screen shots to guide first time users of SAP NetWeaver Gateway 2.0 for the installation and fundamental configuration required on the system.

2. Background Information

This how-to guide aims at providing a step-by-step procedure with screen shots to guide first time users of SAP NetWeaver Gateway 2.0 for the installation and fundamental configuration required on the system.

3. Prerequisites To install SAP NetWeaver Gateway 2.0, your basis need to be SAP NetWeaver 7.02 SP07 or later. Please make sure you meet this requirement before proceeding. You should also have your SAP backend identified to work with SAP NetWeaver Gateway. During the configuration, you will also need to configure the backend to have it connect to Gateway.


September 2011 2

4. Step-by-Step Procedure

4.1 Download the Gateway bit from Service Marketplace

1. Open your web browser, go to http://service.sap.com/swdc. Click on Installation and Upgrades Browse our Download Catalog SAP NetWeaver and complementary products SAP

NETWEAER GATEWAY SAP NETWEAVER GATEWAY 2.0 Installation and Upgrade.

2. Click on the Downloads tab and select the newest available bit there. Click on the button Add to Download Basket.

3. Start your SAP Download Manager and start the download of the bit

4. A ZIP file will be downloaded. Extract the ZIP file and locate the following archives: \GW_CORE_200_INST\DATA\K-200AGINGWCORE.SAR

\IW_BEP_200_INST\DATA\K-200AGINIWBEP.SAR

\IW_CBS_200_INST\DATA\K-200AGINIWCBS.SAR

\IW_CNT_200_INST\DATA\K-200AGINIWCNT.SAR

\IW_FND_250_INST\DATA\K-250AGINIWFND.SAR


September 2011 3

\IW_SCS_200_INST\DATA\K-200AGINIWSCS.SAR

\WEBCUIF\700\WEBCUIF_700.SAR

\WEBCUIF\701\WEBCUIF_701.SAR

4.2 Installing the Gateway system 1. In the Gateway box, extract \GW_CORE_200_INST\DATA\K-200AGINGWCORE.SAR to the

EPS inbox folder.

2. Start SAP GUI and go to transaction SAINT. Go to Installation Package Load Packages From Application Server. You should be able to see the file was uploaded successfully.

3. Go back to transaction SAINT, click on the Start button.

4. Verify and select the Add-on to be installed and then click on Continue.


September 2011 4

5. Click on Continue on the next screen.

6. Click Continue. Choose Yes and prompted whether you want to add Modification Adjustment Transports to the queue?


September 2011 5

7. Click on Continue on the next screen.

8. Enter the password for the add-on component you are installing. (Please refer to SAP note #1569624 for the passwords). Then click on Continue and then Import. The import process will then start.


September 2011 6

9. You should see the following screen when the installation completes. Click on the Software

Components tab and then click Finish.

10. Repeat steps 1 to 9 for the component WEBCUIF (2 SAR archives to be extracted as 3 .PAT files). You will have to install WEBCUIF 700 first and then use the same procedure (steps 3 to 9) to upgrade it to WEBCUIF 701. A successful execution will lead to the screen below. Remarks: for the component password for WEBCUIF, please refer to SAP note #1162091.

11. Repeat steps 1 to 9 for other Gateway components you need to install in the following sequence. IW_FND 250 IW_CBS 200 IW_CNT 200 IW_BEP 200 IW_SCS 200


September 2011 7

4.3 Basic Configurations on Gateway and Backend systems

Activate ICF

1. Logon to the Gateway system. Go to transaction SICF, make sure default_host is activated. Then activate /sap/public/opu and all the sub-nodes underneath.

2. Activate /sap/opu/sdata and all the sub-nodes underneath.

Setting Profile Parameters.


September 2011 8

3. In the Gateway box, go to transaction RZ10. Edit the DEFAULT profile (Extended Maintenance). Add the following parameters:

login/accept_sso2_ticket 1 login/create_sso2_ticket 2

Do the same thing in the Backend system.

Remarks: if there is an error, click on the menu Utilities Import Profiles Of Active servers, to get the latest version of profiles first.

Create Gateway Administrator 4. In the Gateway box, go to transaction SPRO. Click on the button SAP Reference IMG.

5. Go to SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration User Settings Define Role for SAP NetWeaver Gateway Administrator. Click on the

Execute icon next to it.


September 2011 9

6. In the Role field, enter SAP_BC_BASIS_ADMIN. Click on Copy Role. In the To Role field, enter Z_SAP_BC_BASIS_ADMIN. Then click Copy All.

7. Click on Change to edit Z_SAP_BC_BASIS_ADMIN.

8. Select Authorization tab, click on the change button for Change Authorization Data.


September 2011 10

9. In the following screen, on the file menu choose Edit Insert Authorization From Template.

10. Select /IWFND/RT_ADMIN and click on Continue.

11. Click on the Generate icon. Click on the Generate button on the pop-up dialog.

12. Enter “T-Project Gateway” in the text field. Then click Execute.

13. The Change role: Authorizations page displays, with the Status of the profile showing as generated.

14. Click on Back then select the tab User. Under the User ID column, enter the username you want to assign as Gateway Administrator. Save the change.


September 2011 11

15. Click on User Comparison. Then click on Complete Comparison on the pop-up.

16. Click Save to save the changes.

17. To test it, logout and login and GW_ADMIN. See if you can access SPRO and the Gateway IMG. Stay logon as GW_ADMIN for the rest of the operations.

Creating Gateway User 18. Logon to the Gateway box as GW_ADMIN. Go to transaction SPRO. Click on SAP Reference

IMG.

19. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration User Settings Define Role for SAP NetWeaver Gateway User. Click on the Execute icon

next to it.

20. In the Role field, enter SAP_BC_ENDUSER. Then click on Copy Role.

21. Enter Z_GW_ENDUSER in the To Role field. Then click on Copy All.


September 2011 12

22. Click on the Change button to edit Z_GW_ENDUSER. Then click on the tab Authorizations and click on the button for Change Authorization Data.

23. On the file menu, choose Edit Insert Authorizations From Template.

24. Select /IWFND/RT_GW_USER, /IWCNT/RT_USER_REP and /IWCNT/RT_USER_WF from the list and choose Continue. You will need to do this one after one.

25. Click on the Generate button and choose Generate on the pop-up.

26. Assign profile name accordingly. On the next screen, make sure the status is now Generated.

27. Click on Back. Then choose the User tab. Enter the username (e.g. GW_USER) to be assigned as a Gateway enduser in the User ID column.


September 2011 13

28. Click on the button User Comparison. Choose Complete Comparison on the pop-up.

29. Save the settings.

30. Go back to PFCG. Edit the role SAP_BC_WEBSERVICE_CONSUMER. Go to the User tab and assign GW_USER and GW_ADMIN to this role as well.

31. Remember to click on User Comparison Complete Comparison and Save. Creating Connection: Gateway to Consumer 32. In the Gateway system, go to SPRO SAP Reference IMG.


September 2011 14

33. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration Connection Settings SAP NetWeaver Gateway to Consumer Define Settings for

Idempotent Services. Click on the Activity button next to it.

34. Configure as: 6 for Period Hours in Document, and 12 for Period Hours in Document ID. Click on Schedule.

35. To test it, go to SM37. Enter SAP_BC_IDP_WS_SWITCH* as the Job name and * as the User name. Click on Execute. You should see SAP_BC_IDP_WS_SWITCH_BD and SAP_BC_IDP_WS_SWITCH_BDID are on the list.


September 2011 15

36. Before registering the RFC destination, you need to make sure you have a RFC server group

created. Go to transaction RZ12. If you don’t have a server group created. Create one like below. Remember to click on Copy and then Save.

37. Go back to SPRO SAP Reference IMG. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration Connection Settings SAP NetWeaver Gateway to Consumer Create RFC Destination for Outbound Queues.

38. Click on the Create button. Enter the followings: RFC Destination: IWFND_BGRFC_DEST

Connection Type: 3 Description 1: RFC Destination for Outbound Queues


September 2011 16

39. Hit Enter and then select the Special Option tab. In the Transfer Protocol field, choose “Classic

with bgRFC”. Save the settings and click on Yes to accept.

40. Click on the Connection Test button to test it. 41. Go back to SPRO and click on SAP Reference IMG. Open SAP Customizing Implementation

Guide SAP NetWeaver Gateway Configuration Connection Settings SAP NetWeaver Gateway to Consumer Register RFC Destination for Outbound Queues. Click on the Activity button next to it.

42. Click on the tab Define Inbound Dest. Then click on the Create button.

43. In the Define Inbound Dest. field, enter IWFND_BGRFC_DEST. Hit Enter and then click on Save.

44. In the New Prefix field, enter IWFND_CNP and click on Create. Repeat the same step for IWCNT_WF. Then click on Save.


September 2011 17

45. Click on the tab Scheduler: Destination. Click on Create and choose Inbound on the pop-up

dialog.

46. Enter IWFND_BGRFC_DEST in the Destination field. Click on Save.

47. Click Save to save all settings.

48. Go back to SPRO and open SAP Reference IMG. Open SAP Customizing Implementation

Guide SAP NetWeaver Gateway Configuration Connection Settings SAP NetWeaver Gateway to Consumer Create bgRFC Supervisor Destination. Click on the Activity button next to it.

49. Click on the tab Define Supervisor Dest. Then click on Create.


September 2011 18

50. Enter BGRFC_SUPERVISOR as the Destination Name. Enter bgrfc_user as the User Name and provide a password (e.g. “sap123456”). Select the checkbox of Create User. Then click on Save.

51. Click on Save button to save all settings.

52. Now we need to do a check on the bgRFC configuration. Go back to SPRO and open SAP Reference IMG. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway

Configuration Connection Settings SAP NetWeaver Gateway to Consumer Check bgRFC Configurations. Click on the Activity icon next to is.


September 2011 19

53. A dialog below will be displayed after the check. Click on Continue.

54. We now need to create an RFC Destination for the WSIL service. Still in SAP Reference IMG, open SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration

Connection Settings SAP NetWeaver Gateway to Consumer Create RFC Destination for WSIL service. Click on the Activity icon next to it.

55. Click on Create and enter: RFC Destination: IWFND_WSIL_LOCAL_DEST

Connection Type: H Description 1: RFC Destination for WSIL Service

56. Hit Enter and confirm. On the Technical Settings tab, enter the host of Gateway in the Target

Host field. In the Service No. field, enter the HTTP port of the Gateway host (to find out the http port, go to SMICM Goto Service).

57. Enter the WSIL path (e.g. /sap/bc/srt/wsil)in the Path Prefix field. (Make sure in SICF that the path is activated). Save the settings.

58. Click on Connection Test to test the destination. A successful test has a HTTP response of 200.


September 2011 20

Defining Gateway connection to SAP Backend (SCL to SAP Systems) 59. We now need to define the Trust relationship between Gateway and the Backend (i.e. Backend

as the trusting system and Gateway as the trusted system).

60. Before configuring anything, we need to make sure the Beckend system has users with exactly the same names as those in the Gateway system (in this case, GW_ADMIN and GW_USER). And these users need to have the authorization object S_RFCACL assigned.

61. Logon to the Backend system. Go to PFCG. Create a new role (e.g. Z_GATEWAY). Go to the

Authorizations tab and click on Change Authorization Data.

62. Click on Edit Insert authorizations Manual input. Then enter S_RFCACL to Authorization Object.

63. Configure the authorization object accordingly like below.


September 2011 21

64. Click on Generate and then Save.

65. Click on Back and go to the User tab. Add GW_ADMIN and GW_USER to the list. Click on User Comparison and then Save.

66. We can now create the RFC destination. Still in the Backend system, go to transaction SM59. Click on Create.

67. Enter the following:

RFC Destination: <SID of Gateway>CLNT<Client> (e.g. T2DCLNT001) Connection Type: 3 Description 1: RFC Destination to Gateway server

68. Hit Enter. Under the Technical Settings tab, enter the Gateway host to the Target Host field and its instance number to the System Number field. Click on Save.


September 2011 22

69. Go to transaction SMT1. Click on Create. 70. Enter the destination you have just created in the Destination field. Click on Continue.

71. Logon to the Gateway system using the GW_ADMIN user.

72. The info of trusted system is displayed. Click on Save.

73. Now, we need to create a type 3 RFC destination on Gateway to the Backend. Logon to the

Gateway system. Go to SPRO SAP Reference IMG. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration Connection Settings

SAP NetWeaver Gateway to SAP System Manage RFC Destinations. Click on the Activity icon next to it.

74. Click on Create. Enter the following info: RFC Destination: <SID of Backend>CLNT<Client> (e.g. EC6CLNT001) Connection Type: 3 Description 1: RFC Destination to Backend


September 2011 23

75. Hit Enter. Under the Technical Settings tab, enter the backend’s host to the Target Host field and its instance number to the System Number field.

76. Click on the Logon & Security tab. Enter the client number of the Backend. Click on the checkbox of Current User. And select Yes for Trust Relationship.

77. Save the settings. Configuring Single Sign-On 78. In the Backend system, go to RZ10 and verify the following in the DEFAULT profile.

login/accept_sso2_ticket 1

login/create_sso2_ticket 2


September 2011 24

79. Go to transaction SSO2. In the RFC Destination field, press F4 and choose T2DCLNT001. Then click on Execute.

80. Logon using a common user that setup for both Gateway and Backend (e.g. GW_ADMIN or GW_USER).

81. The following report will be shown. Click on Activate.


September 2011 25

82. Logon to the Gateway system and go to RZ10. Make sure the following are in the DEFAULT profile.

login/accept_sso2_ticket 1

login/create_sso2_ticket 2

83. Go to transaction SSO2. Press F4 in the RFC Destination field and choose EC6CLNT001. Click

on Execute.

84. The SSO administration report will be shown. Click on Activate.

Define System Alias 85. In the Gateway system, go to SPRO SAP Reference IMG. Open SAP Customizing

Implementation Guide SAP NetWeaver Gateway Configuration Connection Settings SAP NetWeaver Gateway to SAP System Manage SAP System Aliases. Click on the

Activity icon next to it.


September 2011 26

86. Click on New Entries. And enter it like below. Save the settings. Create a customizing request

when needed.

87. Go back to SPRO SAP Reference IMG. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway Administration General Settings Manage GSDO Groups. Click on the Activity icon next to it.

88. Select IW_WF on the list. Then double click Assign SAP System Aliases.

89. Click on New Entries.

90. Press F4 on User Role and choose Z_GW_ENDUSER. Press F4 on SAP System Alias and

choose EC6_001. Save the settings.

91. Double click on Manage GSDO Groups and make sure the checkbox for IW_WF is checked.


September 2011 27

92. Go back to SPRO SAP Reference IMG. Open SAP Customizing Implementation Guide SAP NetWeaver Gateway Configuration Connection Settings SAP NetWeaver Gateway to SAP System Check SAP System Aliases. Click on the Activity icon next to it.

93. You should see a status report like below.

94. Open a web browser and access the URL below. Logon as GW_ADMIN when prompted. http://<Gateway host>:<port>/sap/opu/sdata/iwfnd/SampleUserProcessing?$format=xml

Activate Project Gateway 95. In the Gateway system, go to SPRO and click on SAP Reference IMG. Open SAP Customizing

Implementation Guide SAP NetWeaver Gateway Configuration Activate or Deactivate SAP NetWeaver Gateway. Click on the Activity icon next to it.

96. Click on Activate on the pop-up dialog.

97. You should see a message “SAP NetWeaver Gateway is active” displayed.


September 2011 28

4.4 Installing the Backend system for Workflow scenario

1. You will need to install BEP to the Backend system in order to do the workflow scenario. Go to SAINT and install the package accordingly.

2. After a successful installation, go through the document “How to enable Business Workflow for SAP NetWeaver Gateway” to test out the workflow scenario.

www.sdn.sap.com/irj/sdn/howtoguides

install config gateway 20

Documents

party web

fundamental

sap reference

user id column

target host

change authorization

technical

system number