Issue with RFC passwords during Netweaver Refreshes

[Former Member]

Hello,

This was regarding an issue during the refreshes for ECC 6.0/Netweaver systems.

As a security measure SAP prevents the import of RFC passwords, even if we try to a transport request exported earlier containing entries of tables RFCDES, RFCDOC etc.

Is it possible to export-import the RFC passwords at the database level for e.g. database like DB2 v 9.7?

Thanks & Regards,

Kunal Patel.

[Former Member]

Kunal,

Yes it is possible. You export the contents of the tables which are behind SECSTORE tcode prior to refresh and import them back after refresh. We have been doing this successfully over the years as part of our system refresh activities.

Here is the high level procedure

Prior to Refresh, Export the contents of the following tables using R3trans

select * from RFCATTRIB

select * from RFCDES

select * from RFCDOC

select * from RFCSYSACL

select * from RSECACHK

select * from RSECACTB

select * from RSECTAB

As part of Post-restore, Delete the contents from the copy of production after restore

--Delete RFC tables (SM59)

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rfcdes;

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rfcsysacl;

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rfcattrib;

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rfcsysacl;

-- Delete secure store tables

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rsecachk;

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rsecactb;

IMPORT FROM /dev/null OF DEL REPLACE INTO sapr3.rsectab;

Import the pre-snapshot information using R3trans...

Hopefully this information helps.