SAP

• Ensure the target server IP is accessible from the cloud connector and the port is open.
  1. To SSH into a machine using a specific port, use:

     ssh -p <port_number> <username>@<hostname_or_ip_address>

• If access elevation is set to None, the application or service users must have the necessary read/write permissions to perform CLM actions on the target server. Commands in this case are executed using the following format:

  • su - {sid}adm -c "some_command"

  • If the SAP SID is configured with password authentication, the command will prompt for it. In such cases, ensure the password is provided in the user interface.
• When access elevation is set to sudo or dzdo, the application runs commands using the following format:

  • sudo su - sidadm -c "some_command"

  • This means the current SSH user needs permission to run su - {SAPSID}adm via sudo.
  • Make sure the ssh user is added to the sudoers file to execute the sudo/dzdo command.
  • AppViewX supports both password-enabled and passwordless sudo execution.
• The installation path is based on the user ID. The user ID will be <SAPSID>adm.
• We use SFTP for file transfers (certificate push), so it's crucial to ensure that SFTP is properly configured for the logged-in user
  1. From the cloud connector: You can use the sftp command to test the connection to an SFTP server. Open your terminal and type:

     sftp username@hostname

  2. Use the put command to upload the file to the remote server:

     put localfile /path/to/remote/directory

curl -kv -X POST "https://{ip}}:44313/sap/bc/srt/rfc/sap/zws_update_ssl/300/zws_update_ssl/zbind_update_ssl" \
  -H "Content-Type: text/xml;charset=UTF-8" \
  -H "SOAPAction: urn:sap-com:document:sap:soap:functions:mc-style:ZUpdSslCert" \
  -u <Web Service User ID>:<Web Service Password> \
  --data '<?xml version="1.0" encoding="utf-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
                  xmlns:urn="urn:sap-com:document:sap:soap:functions:mc-style">
  <soapenv:Header/>
  <soapenv:Body>
    <urn:ZUpdSslCert>
      <ImOwncert>X</ImOwncert>
      <ImCert>
        ...root, Intermediate and signed certificate.
      </ImCert>
      <ImPsename>{PSE_FILE_NAME.pse}</ImPsename>
      <ImHost>{HOSTNAME}</ImHost>
      <ImInstanceno>{INSTANCE_ID}</ImInstanceno>
    </urn:ZUpdSslCert>
  </soapenv:Body>
</soapenv:Envelope>'

<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
   <soap-env:Header/>
   <soap-env:Body>
   <n0:ZUpdSslCertResponse xmlns:n0="urn:sap-com:document:sap:soap:functions:mc-style">
      <ExError/>
   </n0:ZUpdSslCertResponse>
   </soap-env:Body>
</soap-env:Envelope>