SMP 3.0 WITH SAP WORK MANAGER 6.1

[Former Member]

Hi experts ,

I am trying to configure "SAP WORK MANAGER 6.1" to "SMP 3.0",

I followed the steps in this document : https://www.dropbox.com/s/gojx7y6ptoowoal/InstallWM6.1_SMP3.0.pptx?dl=0 ,

But , I have this error in WPF client .

I use this URL for WorkManager : https://supdevcol:8081/SAPWM

and configuring the next scenarie.

1 ) Aplication SAPWM61 in SMP 3.0

2)  folders in SMP 3.0 Server :

I hope your help .

Regards

Jaime

[Former Member · Accepted solution]

It looks like your client is not validation the certificate.  Please look at the section of the document called "Use the SMP 3.0 generated certificate and install "

[Former Member · Accepted solution]

Hi Stephen , thanks for the request.

I'll try that.

Regards

Jaime

[Former Member · Accepted solution]

Hi stephen ,

I installed the certificate in my SMP 3.0server and my laptop (Where did you run the client Agentry).

but look this problem in log agentry client :

Regards.

[p_willems · Accepted solution]

Hi Jaime,

You need to install the certificate in a trusted archive.

When importing the certificate in Windows there is an option to manually select the archive.

We import the certificate in the 'Trused Root Certification Authorities' archive. (Don't know the exact name of the archive because we got a dutch Windows version).

Regards,

Patrick Willems

[Former Member · Accepted solution]

Hi Patrick

I installed this certificate ,

but now I have the next error in agentry client :

Regards

Jaime

[Former Member · Accepted solution]

Hi Jaime,

i think you miss the smp_cert Certificate Export step. please refer the bellow thread..

http://scn.sap.com/docs/DOC-58531

you miss below step.

3. Export the new certificate for use with your Agentry clients•keytool -keystore smp_keystore.jks -export -alias smp_crt -file smp_crt.cer -rfc -storepass {keystore password} -keypass {keystore password}

i follow the above doc, in my case it is working.. intailly i face same problem after export certificate (Step 3) and install certificate, now it is working...

Note : first Remove the already installed certificate.. for Remove certificate in run command type certmgr.msc, then press ENTER, it will open new windows from there remove your certificate from Trusted Certificates.

Regards,

-Krish

[Former Member · Accepted solution]

@Vinjam,

That is only needed if he creating a new cert, but he is using the default cert of the server.

@Jaime

Can you use the URL you are using for a get the page "I am here"

[Former Member · Accepted solution]

So when exactly do we *have* to create a new certificate?  For EACH SMP server the application is installed on or for the domain?

[Former Member · Accepted solution]

When the SMP 3 Server is installed it will create a certification for the FQDN.  If you need the certificate to be a different name (ie. set as load balance FQDN or an IP address) is when you will change it.

Stephen

[Former Member · Accepted solution]

with SMP 3.0, default certificate will create automatically.. After install SMP 3.0  if you change the System Name(Rename the Computer name) Or System Domine Name is Changed Or  you expose the Same system in Cloud with Public IP, then you need to re generated the certificate.

http://scn.sap.com/docs/DOC-58531

-Krish

[Former Member · Accepted solution]

@stephen , Yes I see this information "I am here" . 

But  I don't understand what is the problem .

Please I hope your help.

[Former Member · Accepted solution]

Hi Stephen and Krish ,

I not changed my domain name, I'm doing it in an internal environment.

And if I'm using the "smp" that comes with the SMP 3.0 .

Please I hope your help . because .

[Former Member · Accepted solution]

Is there any "X" to see the connection error?

Regards

Jaime

[Former Member · Accepted solution]

Thank you for the image of the browser.  It showning it doesn't trust the certificate.  Is the URL you are using the same as it shows on the Certificate that you installed?

Looking at image that you posted before the certificate only says "supdevcol" instead of the FQDN.  Can you just use the following link "https://supdevcol:8081/SAPWM"

Stephen

[Former Member · Accepted solution]

If you want use the URL in the browser you will need to create a new certificate for it 

[Former Member · Accepted solution]

Stephen ,

Look this pictures ::::::

* Agentry client :

* Startup.log

* smpServiceUser

as I can fix this, because This problem is similar to what you say in the following thread. http://scn.sap.com/thread/3558882

Regards

[Former Member · Accepted solution]

Can you add the SMP user to the Machine Key Folder with read write and create permissions.: How to: Change the Security Permissions for the MachineKeys Directory

[Former Member · Accepted solution]

I Solved this problem with the next step :

* The "Log On" sap mobile platform (services ) should be "Local System"

Regards and Thanks for your help .

Jaime

[Former Member · Accepted solution]

Because SMP 3 is uing the smp3Admin account, this may need change would need to happen every time you update your server.  The other option is to make sure the smp3Admin account has Read \ write \ create permissions on the RSA \ machinekey folder

[Former Member · Accepted solution]

Yes, Stephen . I had to do this anyway .

because I put the permissions on that folder to everyoone , smpServiceUser and administratos.

Thanks for your Help Stephen .

Regards

Jaime