1 create folder <e>:/usr/sap/saprouter ----> folder ---> on system where u are installing sap router 2 Paste saprouter.

exe and niping.exe & sapgen.exe ----> these 3 exe's 3 inside which paste these 3 files 1.LEGAL.TXT 2. ticket 3. LICENSE.txt 4. saprouttab inside which ----> paste this SNC folder by name --->ntintel (Both sent by me) ----> these are SNC files ---> down load them and uncar them. 4 The environment variable SNC_LIB needs to be set for the user account SAProuter is running under. variable Name : SNC_LIB Variable Value : e:\usr\sap\saprouter\ntintel\sapcrypto.dll 5. set the environment SECUDIR = <directory_of_saprouter> variable Name : SECUDIR Variable Value : e:\usr\sap\saprouter Microsoft Windows [Version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp. C:\Documents and Settings\s11adm>cd \ C:\>e: E:\>cd E:\usr\sap\saprouter E:\usr\sap\saprouter>sapgenpse get_pse -v -r certreq -p local.pse "CN=pclsolman, OU=0000807938, OU=SAProuter, O=SAP, C=DE" Got absolute PSE path "E:\usr\sap\saprouter\local.pse". Please enter PIN: Please reenter PIN: Supplied distinguished name: "CN=pclsolman, OU=0000807938, OU=SAProuter, O=SAP, C=DE" Generating key (RSA, 1024-bits) ... succeeded. certificate creation... ok PSE update... ok PKRoot... ok Generating certificate request... ok.

If sap has registered your system in their system based on the document sent by you ---> you can go to this link. goto http://service.sap.com/saprouter-sncadd ----> Click apply now --> button ----> look for entry of your machine name next to Option button (Provided in the Application form) select the option button , click on continue button. Copy contains of <e>:\usr\sap\saprouter\certreq & paste in it. Click continue, . you will get ---> a para of junk character in the next page of the site. Copy that from top to bottom ... Create a file in <e>:/usr/sap/saprouter folder by name --->"srcert" and past the contents --> save E:\usr\sap\saprouter>sapgenpse import_own_cert -c E:\usr\sap\saprouter\srcert -p local.pse Please enter PIN: CA-Response successfully imported into PSE "E:\usr\sap\saprouter\local.pse" E:\usr\sap\saprouter>sapgenpse seclogin -p local.pse running seclogin with USER="S11adm" Please enter PIN: Added SSO-credentials for PSE "E:\usr\sap\saprouter\local.pse" "CN=pclsolman, OU=0000807938, OU=SAProuter, O=SAP, C=DE" E:\usr\sap\saprouter>sapgenpse get_my_name -v -n Issuer Opening PSE "E:\usr\sap\saprouter\local.pse"... PSE open ok. ok. Retrieving my certificate... ok. Getting requested information... ok. SSO for USER "S11adm" with PSE file "E:\usr\sap\saprouter\local.pse" Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

E:\usr\sap\saprouter>saprouter -r -K "p:CN=pclsolman, OU=0000807938, OU=SAProuter, O=SAP, C=DE" -V 2 trcfile dev_rout no logging active WARNING: wildcard character used in route target

SAP ROUTER
Go to the Trust Center Service - Download Area and get the "Distinguished Name" for your SAProuter from the list of SAP routers registered for your installation. 1.As user <snc>adm set the environment System variables SECUDIR = <directory_of_saprouter> --

SECUDIR = C:\USR\SAP\SAPROUTER SNC_LIB = C:\USR\SAP\SAPROUTER\SAPCRYPTO.DLL 2. Alternatively use the two commands: sapgenpse get_pse -v -noreq -p local.pse "<Your Distinguished Name>" eg--> sapgenpse get_pse -v -noreq -p local.pse "CN=HOSTNAME, OU=0000XXXXXX, OU=SAProuter, O=SAP, C=DE" sapgenpse get_pse -v -onlyreq -r certreq -p local.pse 3. Display the output file "certreq" and with copy & paste insert the certificate request into the text area of the same form on service.sap.com/TCS from which you copied the Distinguished Name

4. In response you will receive the certificate signed by the CA in the Service Marketplace, copy & paste the text to a local file named srcert

5. With this in turn you can install the certificate in your saprouter by calling sapgenpse import_own_cert -c srcert -p local.pse

6. now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account) sapgenpse seclogin -p local.pse

7. This will create a file called cred_v2 in the same directory.

8. Check if the certificate has been imported correctly sapgenpse get_my_name -v -n Issuer The name of the Issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE If this is not the case, delete the files cred_v2, local.pse and start over at Item 4. If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands

Few additional commands sapgenpse get_my_name -v -n validity (for checking validity of SAProuter) saprouter -r -V3 -T log (for detailed error log)