Configuring SAP License, Operation Modes, SAProuter

You must have an SAP license to work with an SAP system. After installing a primary application server, a temporary license is active for only three months. During this period, you must install a permanent license. If the temporary license expires, only the user SAP* can log on to the SAP system.

You can install several licenses. If you change the installation number, all dependent information, such as SAP Software Change Registration (SAP SSCR) keys, is lost.

Call transaction SLICENSE. The hardware key of the local host is shown on the screen. Use this hardware key to request a license from SAP.

In the AS ABAP-based SAP system, you can use the transaction SLICENSE to determine the hardware key on all SAP system hosts.

You can install a new SAP license on your SAP system using transaction SLICENSE. Select the Install button and upload the license file you received from SAP by mail. Immediately after the license is installed, the license key becomes active.

There are two types of keys that can be installed with transaction SLICENSE. They are delivered together in one license file.

• the license key itself – used to prove, that there is a valid license contract for this SAP system – needed for customizing and development in this SAP system

• the maintenance certificate – used to prove, that there is a valid maintenance contract for this SAP system – needed for patching and upgrading this SAP system

For AS Java- based SAP systems you can use the SAP NetWeaver Administrator (NWA) to install a new license. In older releases of AS Java (older than AS Java 7.10), the Visual Administrator was used for this task.

Start the NWA and search for license. This directs you to the License: Java Licenses screen. Here you can install a new license, using the Install from File button.

You can control the amount of the different work process types during a day using a time table and operation modes.

Load distribution allows you to dynamically distribute the SAP users across the application servers of an SAP system. Logon load balancing increases efficiency with respect to performance and the use of SAP system resources for variously defined workgroups. The efficiency is increased by distributing users across available application servers based on requirements for workgroup service and utilization.

The platform-independent SAP spool system is responsible for the output of forms and documents. All devices, servers, and so on that are involved in printing are defined and managed in spool administration using transaction SPAD.  For more information refer to "SAP Printing Guide" in online documentation.

The SAProuter is an SAP program that acts as an intermediate station or proxy in a network connection between SAP systems or between SAP systems and external networks. SAProuter controls access to your network by using an application level gateway, therefore, it is a useful enhancement to an existing firewall system or port filter.

SAP offers its customers access from their SAP system to SAP Support Portal. This is used for downloading SAP Notes via transaction SNOTE, for example. Therefore, you must set up a remote network connection to SAP.

The SAProuter uses a permission table that contains the host names and port numbers of the predecessor and successor points on the route (from the point of view of SAProuter), as well as the password required to set up the connection. You can also use the SAProuter permission table to specify which connections are allowed and which connections are prohibited by the SAProuter.

You must create a separate route permission table for each SAProuter on your network.

Standard entries in a route permission table appear as P/S/D <source-host> <dest-host> <dest-port> <password>. The entries <source-host> and <dest-host> can be SAProuters.

P(ermit) causes SAProuter to set up the connection. P(ermit) entries can contain a password. SAProuter checks whether this password corresponds to that sent by the client.

S(ecure) only allows connections with the SAP protocol. Connections with other protocols, such as Transmission Control Protocol (TCP) are not allowed. For D(eny) prevents the connection from being established.

SAProuter increases network security and simplifies network configuration.

SAProuter allows you to make indirect network connections. SAProuter software is included in the standard SAP kernel. An additional installation is not required.

SAP Support Portal is the SAP-based service system, which provides the technical link between SAP customers and SAP. SAProuter controls connections from SAP to your SAP system. SAProuter is started as a demon under UNIX and as a service under Windows.

SAP Notes Regarding SAProuter Configuration:

• SAP Note 14716 – Questions on ISDN, remote connection to SAP
• SAP Note 30289 – SAProuter documentation
• SAP Note 46902 – Security aspects with remote access

SAP Note 30289 provides the method to perform the following tasks:

• Install SAProuter
• Configure routing table
• Start SAProuter

For transferring data from SAP to your SAP system, special HTTPS connections are needed. These are used for:

• Transferring of EarlyWatch Alert data

• Exchanging of data using the SAP Notes Assistant

For a detailed description of each step in of guided approach, refer to SAP Note 2836302 – Automated guided steps for enabling Note Assistant for TCI and Digitally Signed SAP Notes

To configure the HTTPS connections refer to:

• SAP Note 2738426 – Automated Configuration of new Support Backbone Communication
• SAP Note 2793641 – Automated Configuration of new Support Backbone Communication - Update 01
• SAP Note 2827658 – Automated Configuration of new Support Backbone Communication - Update 02