Step By Step Guide To Install SAProuter

SAProuter as all the technical heads know is used to connect different IP Networks or you can
say it acts as an intermediary proxy in a network connection between SAP systems or SAP
systems and external networks. It is a very advantageous enhancement to a pre-existing firewall
system because it control access to the user’s network.

In more general terms it works like any router to direct traffic and is particularly utilized to route
traffic of any sort between SAP and the local systems of the customers. SAProuter can be
utilized to do the following:

 To control and log the connection to a customer’s SAP system.

 To enhance network security with the help of a password (which protects the customer’s
connection and data from unwanted/unauthorized external access), permitting access from one
specific SAProuter, permitting only one encrypted connection from a known partner (using the
SNC layer).
 To setup an indirect connection in case when the program used in the connection is unable to
communicate with each other because of network configuration. The reasons are generally
restrictions arising from the firewall systems or address conflicts when using non-registered
configuration.
 Enhancing the stability and performance by lowering down the workload on SAP system within
a LAN when communicating with a WAN.

Some Key Points:

 SAProutertraffic communicates by default on TCP port 3299. This is generally a configurable

option.
 SAProuter executable /binary must be running for SAProutertow work. There is no start on call
options.
 SAProuter is required to get service from SAP.

SAP Router Installation step by step

You first need to convey a message to SAP support and ask to register your hostname and IP of
your new SAProuter. The thing to remember here is that you have to register your SAProuter
with an official IP address because no internal IPs are allowed. Once you have received the
confirmation from SAP regarding your SAProuter request you now can begin configuring your
SAProuter.
If you have SAProuter directory C:usrsapsaprouter, these are the steps to follow.
Note: You will be prompted for a PIN code so decide your own 4 digit pin and you have to use
the same PIN every time you are asked to do so.

1. You have to set 2 environment variables: SECUDIR and SNC_LIB according to the
guide you have downloaded.

2. Download the SAP Crypto Library. Now unpack the and unpack i SAP Crypto Library into
C:usrsapsaprouter

3. Now to create a certificate request, run the command:

sapgenpse get_pse -v -r C:usrsapsaproutercertreq -p
C:usrsapsaprouterlocal.pse “”

4. Afterwards you have stick to the guide and request the certificate from
http://service.sap.com/tcs -> Download Area -> SAProuter Certificate

5. Generate a file C:usrsapsaproutersrcert and copy the requested certificate into this file. Now
run the command: sapgenpse import_own_cert -c C:usrsapsaproutersrcert -p
C:usrsapsaprouterlocal.pse

6. To create credentials for the user who is running the SAProuter service, run command:
sapgenpse seclogin -p C:usrsapsaprouterlocal.pse -O
(this will create the file “cred_v2″)

7. Check the configuration by running command: sapgenpse get_my_name -v -n Issuer

(This must always provide the answer “CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE”)

8. Generate SAProuter service on Windows with the command:

ntscmgr install SAProuter -b C:usrsapsaproutersaprouter.exe -p“service -r -R
C:usrsapsaproutersaprouttab -W 60000 -K^p:^”

9. Now edit the Windows Registry key as follows:

MyComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSAProuterImage
Path –> Change both ^ to “

10. Start the SAProuter service

11. Now fill in the required parameters in OSS1 -> Technical Settings

Note: SAProuter requires msvcr71.dll, a Microsoft C runtime library file in order to run or else it
would show an error popup saying “The program can’t start because msvcr71.dll is missing from
your computer. Try reinstalling the program to fix this problem”. If you do not have the file, you
can download from here and place it at the same location as SAProuter.