SAP NetWeaver 2004s: Setting Up BEx Web – Problem Analysis

This short document contains all screenshots required by SAP to support a problem regarding BI and Portal integration.

If you create a problem message, please provide all screenshots below. This helps SAP to understand the current situation of your system.

Please replace screenshots below by screenshots of your own installation and send this document back to SAP!

Please see table in section Status Overview for details about required screenshots!

You can help us to accelerate solving your problem, if you check especially the blue remarks on your own!

For general questions, please read note 917950.

For specific communication and Single Sign-On (SSO) problems, please read note 888687.

Information about Installation........................................................................................2Status Overview.............................................................................................................3Step 1 Create RFC Destination in J2EE Engine............................................................4Step 2 Create RFC Destination for Portal......................................................................5Step 5 Export BI Certificate into Portal.........................................................................7Step 6 Import BI Certificate to Portal............................................................................8

Step 6.1 Import BI Certificate into Portal..................................................................8Step 6.2 Enter BI Certificate into Evaluate Ticket Login Module.............................9Step 6.3 Enter BI Certificate into Evaluate Assertion Ticket Login Module..........11

Step 7 Create BI System in Portal................................................................................12Step 8 Configure User Management in Portal.............................................................16Step 9 Export Portal Certificate to Portal.....................................................................18Step 10 Import Portal Certificate to BI........................................................................19Step 12: Maintain User Assignment in Portal Step......................................................22Step 14 Security Settings for BEx Web Applications (Java).......................................23

Information about Installation

Which type of installation do you have?

[ ] Application Server ABAP (AS-ABAP with own system ID and instance number)

[ ] Application Server Java (AS-Java with own system ID and instance number)

[ ] Double-Stack (ABAP and Java combined on one server with identical system ID and instance number)

In case of Double-Stack installation, did you performed an Add-In installation?(i.e. upgrade of ABAP stack and than Add-In installation of Java stack)

[ ] Yes [ ] No

BI System (Usage Type AS-ABAP)

System ID: [ ]Client: [ ]

Portal (Usage AS-Java, EP and BI-Java)

System ID: [ ]

Status Overview

Report RSPOR_SETUP (transaction SE38)

Please apply the following two notes before you check the configuration with report RSPOR_SETUP:

916571 RSPOR_SETUP: Adjustments for Template Installer 928332 RSPOR_SETUP: (Part 2) Adjustments for Template Installer

This screenshot of Status Overview is always required!

Please press button Overview and click on the marked third line to download the complete output of report RSPOR_SETUP to a text file (If the third line is not marked, please apply note 935177) Please send attach this text file to your message or mail!

Is there any failed step (marked red)? Search for notes with error message! Read the “Checks for Step …” section at the bottom of each steps for hints to analyze a problem!

In case of error messages, please provide the following screenshots For example, if step 12 failed, please provide screenshot of step 5, 6, 8, 9 and 10.

Failed Step(s) Required Screenshots

Status 1: Create RFC Destination in J2EE Engine Step 1, 2

Status 2: Create RFC Destination for Portal Step 1, 2

Status 3: Maintain Portal Server Settings for Portal

Status 4: Maintain Single Sign-On in BI

Failed Step(s) Required Screenshots

Status 5: Export BI Certificate into BI

Status 6: Import BI Certificate into Portal

Status 7: Create BI Sytem in Portal

Status 8: Configure User Management in Portal

Status 9: Export Portal Certificate into Portal

Status 10: Import Portal Certificate into BI Step 9

Status 11: Set Up Repository Manager for BI in Portal

Status 12: Maintain User Assignment in Portal Step 5, 6, 8, 9, 10

Status 13: Import SAP NetWeaver Plug-In into BI

Status 14 - Security Settings for BEx Web Applications

Step 1 Create RFC Destination in J2EE Engine

SAP J2EE Visual Administrator (\usr\sap\<PORTAL_SID>\JC<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID> / Server<#> / Services / Jco RFC Provider / RFC Destination

The icon “Running man” must be visible in the list of “Available RFC Destinations” next to the name of Program ID

Step 2 Create RFC Destination for PortalTransaction in BI SystemDisplay and Maintenance of RFC Destinations (SM59) / TCP/IP Connection

Screenshot of register Technical Settings (Gateway Host and Gateway service must be visible on screenshot) Screenshot of Logon & Security Program ID, Gateway Host and Gateway Service must be identical to Step 1 Send SAP Logon Ticket must be checked on

Step 5 Export BI Certificate into Portal

Transaction in BI SystemTrust Manager for Single Sign-On with Logon Ticket (STRUSTSSO2)

Double click on Own Certificate / Owner to show information about own certificate in the Certificate section (middle)

See step 6 for check

Step 6 Import BI Certificate to Portal

Step 6.1 Import BI Certificate into Portal

SAP J2EE Visual Administrator (\usr\sap\<PORTAL_SID>\JC<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID> / Server<#> / Services / Key Storage / TicketKeystore / Views / Load

Detailed information of the CERTIFICATE must be identical with screenshot of step 5:

Step 6.1 Step 5[DN] Owner[issuerDN] Issuer[validNotBefore] Valid From[validNotAfter] to[fingerprint] Check Sum

Step 6.2 Enter BI Certificate into Evaluate Ticket Login Module

SAP J2EE Visual Administrator (\usr\sap\<PORTAL_SID>\JC<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID> / Server<#> / Services / Security Provider / Components / ticket / Authentification /com.sap.security.core.server.jaas.EvaluateTicketLoginModule

Name of Login Module must be com.sap.security.core.server.jaas.EvaluateTicketLoginModule trustedsys1 must be ABAP system ID and client (see status line of screenshot in step 5; sample BR9 (2) 000; (2) indicates only the number of open SAP GUI windows connected to the system) trustediss1 must be identical with Owner in step 5 trusteddn1 must be identical with Issuer in step 5

Number behind trustedsys, trustediss and trusteddn must be identical Number must be identical with number in step 6.3 First number must start with 1, than 2, 3 and so on

Step 6.3 Enter BI Certificate into Evaluate Assertion Ticket Login ModuleSAP J2EE Visual Administrator (\usr\sap\<PORTAL_SID>\JC<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID> / Server<#> / Services / Security Provider / Components / ticket / Authentification / com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule

Name of Login Module must be EvaluateAssertionTicketLoginModule See step 6.2 for other checks

Step 7 Create BI System in Portal

iView in PortalSystem Administration / System Configuration / System Landscape

Property Category: BI / Business Intelligence Property Category: BI KM / Business Intelligence KM Integration Property Category: Connector Property Category: User Management

Property BI Master System must be selected Property Authentication Ticket Type must be SAP Assertion Ticket Property Logon Method must be SAPLOGONTICKET

Step 8 Configure User Management in Portal

iView in PortalSystem Administration / System Configuration / Configuration for User ManagementTab Page Security Settings

Screenshot of register Data Sources Screenshot of register SAP System Screenshot of register Security Settings (property SAP Reference System must be visible)

Property SAP Reference System (under register Security Settings) must be set (to BI system or to any other SAP system with same users as BI system)

Step 9 Export Portal Certificate to Portal

SAP J2EE Visual Administrator (\usr\sap\<PORTAL_SID>\JC<SYSTEM_NUMBER>\j2ee\admin\go.bat)

<SID> / Server<#> / Services / Key Storage / Views / TicketKeystore / SAPLogonTicketKeypair-cert / Export

Select SAPLogonTicketKeypair-cert(This allows us to see the values of the certificate, CN=…)

See step 10 for check

Step 10 Import Portal Certificate to BI

Transaction in BI SystemTrust Manager for Single Sign-On with Logon Ticket (STRUSTSSO2)

Double-click on Portal certificate in Certificate List (This allows us to see the values of the certificate, CN=…) Select Portal SID in Certificate List Select Portal SID in Access Control List (ACL)

Portal certificate must be part of Certificate List Double-click on Portal certificate in Certificate List and compare fields with the detailed information of the CERTIFICATE of certificate SAPLogonTicketKeypair-cert (see step 9):

Step 10 Step 9Owner [DN]Issuer [issuerDN]Valid From [validNotBefore]to [validNotAfter]

Portal certificate must be in Access Control List (ACL) Compare fields with

System Portal System ID (default value, if login.ticket_issuer is not existing; see second screenshot below)

Cl. (Client) 000 (default value if login.ticket_client is not changed)Certificate Owner [DN] (see step)

For verification of the correct parameters (System ID and Client) in the Access Control List (ACL), please perform the following steps.

Config Tool (see folder \usr\sap\...\JC…\j2ee\configtool; start configtool.bat)

Use default DB settingsCluster-data / Global server configuration / Services / com.sap.security.core.ume.service

Select key login.ticket_client(if key login.ticket_issuer is existing, please ensure that this key is visible)

Step 12: Maintain User Assignment in Portal Step

Please check step 5, 6, 8, 9 and 10!

Step 14 Security Settings for BEx Web Applications (Java)

iView in PortalSystem Administration / Permissions / Portal PermissionsPortal Content / Content Provided by SAP / Platform Add-Ons / Business Intelligence / iViews / BEx Launcher

pcd:portal_content/com.sap.pct/platform_add_ons/com.sap.ip.bi/iViews/com.sap.ip.bi.bex

In row Everyone, the column Administrator must be Read and column End User must be checked on Icon of Everyone must be the Group icon; column Description must be Built-in Group Everyone