cancel
Showing results for 
Search instead for 
Did you mean: 

SAPCRYPTOLIB not installed

Former Member
0 Kudos

Hi,

I need to set up SSL, but I found with in tcode STRUST when I execute Environment>SSL Client Identities I get this error message "SAPCRYPTOLIB not installed" Message no. TRUST059.

I follow the steps that indicates to copy the sapgenpse,sapcrypto.dll on path sidexe and add some parameters, after that I´d the restart the system, but I get the same message.

What can i do? Or which blog, thread i can follow?

More thanks

Accepted Solutions (0)

Answers (4)

Answers (4)

0 Kudos

Do you need SAPCryptolib for CFDi?

Former Member
0 Kudos

Login into SIDADM

Download SAPCrypto from SAP Market Place

Copy it to SAP Kernel Directory

Use SAPCAR –xvf name.sar            (name=filename) (here= SAPCRYPTOLIB_36-10010888)

Check the system architecture using (cmd-systeminfo)

If your architecture is x64 copy from the appropriate folder mentioned below

After extracting copy the files from nt-x86_64 folder.

Paste it into run directory

Then create Environment Variable in user_variable as “SECUDIR”

Give the path as “C:\usr\sap\NSP\DVEBMGS00\sec”

Also copy the ticket file extracted from SAPCrypto to sec path mentioned above and overwrite it.

Delete all pse files. We will be able to create it later.

Go to Instance Profile in RZ10:

Set the following parameters mentioned below:

icm/server_port_2          VALUE: PROT=HTTPS,PORT=8100,TIMEOUT=60,PROCTIMEOUT=60

icm/HTTPS/verify_client          VALUE= 1

Save and activate profile.

Go to Default Profile:

ssl/ssl_lib                      VALUE: D:\usr\sap\NSP\SYS\exe\uc\NTAMD64\sapcrypto.dll

ssf/ssfapi_lib                 VALUE: D:\usr\sap\NSP\SYS\exe\uc\NTAMD64\sapcrypto.dll

sec/libsapsecu                VALUE: D:\usr\sap\NSP\SYS\exe\uc\NTAMD64\sapcrypto.dll

ssf/name                         VALUE: SAPSECULIB

icm/HTTPS/verify_client        VAULE: 1

SAVE AND ACTIVATE PROFILE.

Restart the System

Go to STRUST

In the left side you will see multiple identity files which is not created

Right click and create all parameters with default values.

Save it.

Go to SMICM and see the status of HTTPS.

Former Member
0 Kudos

Hi Ruben,

Please check if you have set the environment variables such as SECUDIR and DIR_LIBRARY.

Also check if you have put the cryptographic files in SECUDIR. This variable should point to /usr/sap/..../sec

Also set the profile parameters required for SSL.

Then restart the instance.

STRUST should work fine.

Best Regards

Raghu

Former Member
Former Member
0 Kudos

Hi Ruben,

Please recheck these parameters if they have been set properly.

ssl/ssl_lib , sec/libsapsecu , ssf/ssfapi_lib , ssf/name

Which OS your SAP system is running on ??

Also can you see any error ICM trace ??

Please paste ICM trace if there are any errors.

Best Regards

Raghu

Former Member
0 Kudos

Hi, I have similar issue. ICM trace here http://img25.imageshack.us/img25/8523/tracekw.jpg

I created SAPSSLS.pse file in sec directory but nothing has changes. Any ideas?

Edited by: pw.skiba on May 28, 2010 3:38 PM

JPReyes
Active Contributor
0 Kudos

Read,

Note 510007 - Setting up SSL on Web Application Server ABAP

And all the related notes attached to the note above.

Regards

Juan

Former Member
0 Kudos

If I set up the SSL with this note I´ll resolve the sapcryptolib error?????

Thanks

JPReyes
Active Contributor
0 Kudos

Have you read the note?....

Regards

Juan

Former Member
0 Kudos

Yes, I followed this note for setting ssl. For this I get the doubt.

JPReyes
Active Contributor
0 Kudos

Can you post the full error on STRUST/STRUSTSSO2 and SM21?

Regards

Juan

Former Member
0 Kudos

This is the message error:

SAPCRYPTOLIB not installed

Message no. TRUST059

Diagnosis

The SAP Cryptographic Library (SAPCryptolib) is not installed on the application server. It is therefore not possible to maintain PSEs that allow encryption.

Procedure

Download the SAP Cryptographic Library from the SAP Service Marketplace (Alias Security).

I´ll back to revise all the steps from the note.

Former Member
0 Kudos

Hi,

Did you restart the ICM after installing the SAP Cryptolib ? It is mandatory.

If you check the ICM trace after the restart, you should find this kind of messages :

[Thr 77148] =================================================

[Thr 77148] = SSL Initialization on PC with Windows NT

[Thr 77148] = (700_REL,Nov 18 2008,mt,ascii,SAP_UC/size_t/void* = 8/64/64)

[Thr 77148] profile param "ssl/ssl_lib" = "D:\usr\sap\XXX\SYS\exe\run\sapcrypto.dll"

resulting Filename = "D:\usr\sap\XXX\SYS\exe\run\sapcrypto.dll"

[Thr 77148] = found SAPCRYPTOLIB 5.5.5C pl24 (Jun 11 2008) MT-safe

[Thr 77148] = current UserID: xxxxxxx\SAPServiceXXX

[Thr 77148] = found SECUDIR environment variable

[Thr 77148] = using SECUDIR=D:\usr\sap\XXX\WebDisp\sec

Regards,

Olivier