{"type":"doc","content":[{"type":"layoutSection","content":[{"type":"layoutColumn","attrs":{"width":66.66},"content":[{"type":"paragraph","content":[{"text":"Java connector is a component used for authentication and communication with remote services using JDBC drivers or Java SDKs. It runs as an independent OS process and can be configured and controlled through transaction ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"By default, the Java connector is deployed directly on the SAP ABAP application server and can be managed from the SAP GUI.","type":"text"},{"type":"hardBreak"},{"text":"If the operating system of the application server is Linux x64 or Windows x64, the setup is straightforward.","type":"text"},{"type":"hardBreak"},{"text":"If SAP runs on a different operating system or architecture, please make sure to follow additional steps in ","type":"text"},{"text":"Using custom Java Runtime","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"layoutColumn","attrs":{"width":33.33},"content":[{"type":"paragraph","content":[{"text":"In this section:","type":"text","marks":[{"type":"strong"}]}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"children","parameters":{"macroParams":{},"macroMetadata":{"macroId":{"value":"7f440084-1af4-4ad3-ad62-599318173cfa"},"schemaVersion":{"value":"2"},"title":"Child pages (Children Display)"}},"localId":"7d8a06a7-610b-4015-bfe9-e76c188b3a12"}}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":959,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":959,"alt":"image-20240226-092415.png","id":"133a2b41-4dcc-47ca-94d3-8c7e0e53a170","collection":"contentId-4510357085","type":"file","height":366}}]},{"type":"paragraph","content":[{"text":"Transaction /DVD/JCO_MNG","type":"text","marks":[{"type":"em"}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]},{"text":" is the interface for the Java Connector (JCO) management.","type":"text"},{"type":"hardBreak"},{"text":"When the transaction is opened for the first time, a pop-up window asks whether the JCO is going to be deployed locally or if there is a standalone JCO installation that is only going to be monitored.","type":"text"},{"type":"hardBreak"},{"text":"The crucial configuration parameter is the SAP RFC destination which will be used as a communication channel between SAP and JCO.","type":"text"},{"type":"hardBreak"},{"text":"In the case of a standalone JCO, the interface only allows checking whether the JCO is up and connected. Still, the configuration and operation are done remotely (for more information, see the chapter ","type":"text"},{"text":"Standalone Java Connector","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357681/SM-2402+Standalone+Java+Connector"}}]},{"text":").","type":"text"},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"Table of Contents:","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Prerequisites","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Prerequisites"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SAP RFC role and user","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#SAP-RFC-role-and-user"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java Connector RFC","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Java-Connector-RFC"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SAP Gateway Access (reginfo)","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#SAP-Gateway-Access-(reginfo)"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Initial setup","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Initial-setup"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Advanced parameters description","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Advanced-parameters-description"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Using custom Java Runtime","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Using-custom-Java-Runtime"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java runtime environment (JRE)","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Java-runtime-environment-(JRE)"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SAP Java Connector Library","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#SAP-Java-Connector-Library"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Central Java instance","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Central-Java-instance"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Setting up the connection via proxy server","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Setting-up-the-connection-via-proxy-server"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Custom destination for JCO lock file","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Custom-destination-for-JCO-lock-file"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SNC configuration","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#SNC-configuration"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Sample JCo configuration files with SNC enabled","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Sample-JCo-configuration-files-with-SNC-enabled"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Upgrading Java connector","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Upgrading-Java-connector"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Automatic Java connector startup after SAP system restart","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Automatic-Java-connector-startup-after-SAP-system-restart"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Copying Java connector","type":"text","marks":[{"type":"link","attrs":{"href":"https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/4510357085/SM-2402+Java+Connector+Setup#Copying-Java-connector"}}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"SAP RFC role and user","type":"text"}]},{"type":"paragraph","content":[{"text":"Java connector uses a dedicated user in the SAP system for registration on the SAP gateway and further communication between ABAP and Java.","type":"text"},{"type":"hardBreak"},{"text":"This user should be created with the type ","type":"text"},{"text":"System","type":"text","marks":[{"type":"code"}]},{"text":" and authorizations limiting his privileges to basic RFC communication.","type":"text"}]},{"type":"paragraph","content":[{"text":"Predefined role ","type":"text"},{"text":"/DVD/JCORFC","type":"text","marks":[{"type":"code"}]},{"text":" is included in the software and can be used as is, or as a template for the custom role.","type":"text"}]},{"type":"paragraph","content":[{"text":"The required authorization object is ","type":"text"},{"text":"S_RFC","type":"text","marks":[{"type":"code"}]},{"text":" with these settings:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"ACTVT = 16","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RFC_NAME = RFC1, RFC_METADATA, SDIFRUNTIME, SYST","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RFC_TYPE = FUGR","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Java Connector RFC","type":"text"}]},{"type":"paragraph","content":[{"text":"Java Connector RFC is used to reference the Java service registered on the SAP gateway. Use the template below as a reference.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":50.0},"content":[{"type":"media","attrs":{"width":693,"id":"092e19ed-3075-45a5-b3d1-c28c480724f7","collection":"contentId-4510357085","type":"file","height":805}}]},{"type":"paragraph","content":[{"text":"Settings:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Connection Type","type":"text","marks":[{"type":"code"}]},{"text":": T for TCP/IP Connection","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Activation Type","type":"text","marks":[{"type":"code"}]},{"text":": Select Registered Server Program","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Program ID","type":"text","marks":[{"type":"code"}]},{"text":": Name of the program how JCO will identify itself when logged on to SAP gateway (Example: SNP_CONNECTOR)","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"SAP Gateway Access (reginfo)","type":"text"}]},{"type":"paragraph","content":[{"text":"External communication with the SAP system goes through the SAP gateway. If the SAP system parameter ","type":"text"},{"text":"gw/acl_mode","type":"text","marks":[{"type":"code"}]},{"text":" is enabled, there are files ","type":"text"},{"text":"reginfo","type":"text","marks":[{"type":"code"}]},{"text":" that limit the access of external programs.","type":"text"},{"type":"hardBreak"},{"text":"In this case, a program needs to have granted access either by wildcard definition or by explicitly defining the program registration name (in our example it is ","type":"text"},{"text":"SNP_CONNECTOR","type":"text","marks":[{"type":"code"}]},{"text":").","type":"text"}]},{"type":"paragraph","content":[{"text":"More information on the SAP gateway ACL topic can be found on the SAP website ","type":"text"},{"text":"Gateway Security Files secinfo and reginfo","type":"text","marks":[{"type":"link","attrs":{"href":"https://help.sap.com/saphelp_nw73/helpdata/en/e2/16d0427a2440fc8bfc25e786b8e11c/content.htm?no_cache=true"}}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Initial setup","type":"text"}]},{"type":"paragraph","content":[{"text":"For local JCO deployment switch to the local management by clicking the ","type":"text"},{"text":"Deploy local JCO","type":"text","marks":[{"type":"strong"}]},{"text":" button in the toolbar.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the latest JCO version by double-clicking the row on the left side of the screen.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Switch to ","type":"text"},{"text":"Edit mode.","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Fill default values.","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Fill in ","type":"text"},{"text":"RFC Destination","type":"text","marks":[{"type":"code"}]},{"text":" in the ","type":"text"},{"text":"General","type":"text","marks":[{"type":"code"}]},{"text":" tab.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":376,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":376,"alt":"image-20240226-094326.png","id":"14e90169-329e-48cc-b2a1-4e06c2b0bfc8","collection":"contentId-4510357085","type":"file","height":153}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Fill in ","type":"text"},{"text":"Technical user Credentials","type":"text","marks":[{"type":"code"}]},{"text":" in the ","type":"text"},{"text":"Config","type":"text","marks":[{"type":"code"}]},{"text":" tab. ","type":"text"},{"type":"hardBreak"},{"text":"Optionally, customize the ","type":"text"},{"text":"Install directory","type":"text","marks":[{"type":"code"}]},{"text":". Logical path ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" translates to ","type":"text"},{"text":"/usr/sap///work/dvd_conn/.","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"If multiple application servers are used, the installation directory must contain to enable deployment to the appropriate path containing the INSTANCE directory on each app. server.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":598,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":598,"alt":"image-20240226-094511.png","id":"09c590aa-8c66-4dd8-94d4-6572a48620ad","collection":"contentId-4510357085","type":"file","height":197}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Select the latest library bundle in ","type":"text"},{"text":"Libraries","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":603,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":603,"alt":"image-20240226-094434.png","id":"92d1cf5c-2afd-42d9-b6e3-611d6be71f5b","collection":"contentId-4510357085","type":"file","height":132}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Go back to the ","type":"text"},{"text":"General","type":"text","marks":[{"type":"code"}]},{"text":" tab, ","type":"text"},{"text":"Save,","type":"text","marks":[{"type":"code"}]},{"text":" and click ","type":"text"},{"text":"Restart","type":"text","marks":[{"type":"code"}]},{"text":" to deploy the JCO.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":616,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":616,"alt":"image-20240226-094729.png","id":"371c34b6-ec6d-4941-b8e6-664d42e4fb47","collection":"contentId-4510357085","type":"file","height":262}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"In a scenario with multiple SAP application servers, the initial deployment must be done locally on each app. server.","type":"text"},{"type":"hardBreak"},{"text":"Switch to the respective application server using transaction SM51.","type":"text"}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"panel","attrs":{"panelIconId":"atlassian-note","panelIcon":":note:","panelColor":"#F4F5F7","panelType":"custom"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Advanced parameters description","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OS Command for starting Java service: ","type":"text","marks":[{"type":"strong"}]},{"text":"Name of an OS command for starting Java service (SM69).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OS Command for setting access permissions: ","type":"text","marks":[{"type":"strong"}]},{"text":"Name of an OS command for setting execution rights (SM69).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OS Command for 7Zip: ","type":"text","marks":[{"type":"strong"}]},{"text":"Name of an OS command for unpacking libraries and embedded JRE (only if embedded JRE is chosen) (SM69).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Max RAM used: ","type":"text","marks":[{"type":"strong"}]},{"text":"Maximum amount of system memory used by Java service (heap size).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Additional Java starting arguments: ","type":"text","marks":[{"type":"strong"}]},{"text":"Additional arguments used to start the Java service.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Repository destination: ","type":"text","marks":[{"type":"strong"}]},{"text":"Client destination from which repository should be obtained (always defaults to ABAP_AS_WITH_POOL).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Work thread MIN: ","type":"text","marks":[{"type":"strong"}]},{"text":"Number of threads Java Virtual Machine always runs with.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Work thread MAX: ","type":"text","marks":[{"type":"strong"}]},{"text":"Maximum number of threads that the Java Virtual Machine can spawn.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Connection count: ","type":"text","marks":[{"type":"strong"}]},{"text":"Number of connections registered at SAP gateway. The default is 10 and the maximum number of connections per JCO instance is 100.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Peak limit: ","type":"text","marks":[{"type":"strong"}]},{"text":"Limit of JCO connections at peak.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Log4j log level: ","type":"text","marks":[{"type":"strong"}]},{"text":"Level of messages collected in logs, default is INFO.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Log4j log deletion: ","type":"text","marks":[{"type":"strong"}]},{"text":"JCO log retention period in days.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Log files path: ","type":"text","marks":[{"type":"strong"}]},{"text":"Directory where the log files will be saved.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"JAR path: ","type":"text","marks":[{"type":"strong"}]},{"text":"Path where the JCO JAR file will be created.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Log4j config path: ","type":"text","marks":[{"type":"strong"}]},{"text":"Path where the log4j config file will be created.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Server config path: ","type":"text","marks":[{"type":"strong"}]},{"text":"Path where the JCO server config will be created.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Destination config path: ","type":"text","marks":[{"type":"strong"}]},{"text":"Path where the JCO destination config will be created.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Avoid JCO config file creation","type":"text","marks":[{"type":"strong"}]},{"text":": Special option that prevents automatic overwrite of existing configuration files during JCO start. Useful for cases when manual modification of configuration files is needed (troubleshooting).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use JCO dir for parquet conversion","type":"text","marks":[{"type":"strong"}]},{"text":": If required, JCO performs data conversion into PARQUET format. This is by default done in memory; when this option is active, conversion is done using temporary files in the /parquet subdirectory. This may be necessary if the memory allowance for JCO is limited.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Embedded JRE","type":"text","marks":[{"type":"strong"}]},{"text":": Path to embedded JRE (nested in Install directory in Config Tab ).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use custom JRE","type":"text","marks":[{"type":"strong"}]},{"text":": Checkbox whether or not to use custom JRE for JCo, if the checkbox is not checked, then embedded JRE is used.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Custom JRE","type":"text","marks":[{"type":"strong"}]},{"text":": Path to custom JRE, executable by adm user. ","type":"text"}]}]}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"The Java service is started with a system command. You can adjust the name of this command in the table Advanced tab. The default name of the command is ZDVD_START_JAVA. In the case the system command doesn't exist, it is created automatically. You can view the system commands through the transaction SM69. On Linux, another system command is required, which sets executable rights for the configuration files (chmod 755 ). Its name can be adjusted in the Advanced tab.","type":"text"}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"The following authorizations are required for the automatic start of the Java process:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"S_RFC_ADM (Administration for RFC Destination): ACTVT = 03, RFCTYPE = * , RFCDEST = , ICF_VALUE = *","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"S_DATASET (Authorization for file access): PROGRAM =/DVD/*, ACTVT = *, FILENAME = *","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"S_LOG_COM (Authorization to Execute Logical Operating System Commands): COMMAND = ZDVD*, OPSYSTEM = * , HOST = *","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"Management of JCO config versions (upload/download) also requires S_GUI (Authorization for GUI activities) with ACTVT = 61,60","type":"text"}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Using custom Java Runtime","type":"text"}]},{"type":"paragraph","content":[{"text":"As of SNP Reuse Library version 22.08, the SNP Java connector comes with regularly updated embedded Java runtime (Adoptium 11) for ","type":"text"},{"text":"Linux 86_x64","type":"text","marks":[{"type":"strong"}]},{"text":" and ","type":"text"},{"text":"Windows x64","type":"text","marks":[{"type":"strong"}]},{"text":" and no manual setup is required in this regard.","type":"text"}]},{"type":"paragraph","content":[{"text":"If the SAP system runs on different operating system (Solaris, AIX, HPUX, etc.), or it is not desired to use the embedded JRE, then custom JRE and libsapjco3 libraries need to be deployed to the application server(s) manually.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Java runtime environment (JRE)","type":"text"}]},{"type":"paragraph","content":[{"text":"Recommended JRE is ","type":"text","marks":[{"type":"strong"}]},{"text":"the latest version of ","type":"text"},{"text":"OpenJDK 11","type":"text","marks":[{"type":"strong"}]},{"text":". OpenJDK JRE can be downloaded from the ","type":"text"},{"text":"Adoptium download site","type":"text","marks":[{"type":"link","attrs":{"href":"https://adoptium.net/temurin/releases/?version=11"}}]},{"text":" for most architectures.","type":"text"}]},{"type":"paragraph","content":[{"text":"Not to interfere with possible Java installation already present on the SAP application server, the archive can be simply unpacked into any directory accessible to adm, e.g. ","type":"text"},{"text":"/sapmnt//global/JRE_11/","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"The option to choose between embedded JRE and custom JRE can be found in the Advanced Tab of ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]},{"text":" transaction:","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":699,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":699,"alt":"image-20240226-100245.png","id":"27b6c7c2-7452-4aad-82ca-462c1f24a9b9","collection":"contentId-4510357085","type":"file","height":83}}]},{"type":"paragraph","content":[{"text":"Parameters:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Embedded JRE","type":"text","marks":[{"type":"strong"}]},{"text":": Path to embedded JRE Java binary. It is by default nested in the JCO Installation directory defined in the Config Tab.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use custom JRE","type":"text","marks":[{"type":"strong"}]},{"text":": Checkbox whether or not to use custom JRE. In the default configuration, the checkbox is unchecked, so embedded JRE will be extracted in the default path.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Custom JRE","type":"text","marks":[{"type":"strong"}]},{"text":": Path to custom JRE Java binary.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"SAP Java Connector Library","type":"text"}]},{"type":"paragraph","content":[{"text":"Java Connector uses a shared library published by SAP named ","type":"text"},{"text":"libsapjco3.so","type":"text","marks":[{"type":"code"}]},{"text":" (or ","type":"text"},{"text":"sapjco3.dll","type":"text","marks":[{"type":"code"}]},{"text":" on Windows OS). ","type":"text"},{"type":"hardBreak"},{"text":"Starting with SNP JCo version 229, the library is included in SNP transports for ","type":"text"},{"text":"Linux 86_x64 and Windows x64","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"If the system hosting JCo is running on an OS ","type":"text"},{"text":"other","type":"text","marks":[{"type":"strong"}]},{"text":" than Linux 86_x64 and Windows x64, it is necessary to ","type":"text"},{"text":"manually download and replace the library","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"after the first attempt to start the JCo","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"The first start attempt will fail due to incompatibility, but it will deploy all other libraries and configuration files needed for the JCo run. The location of the libraries is ","type":"text"},{"text":"//lib/","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"The SAP Java connector library can be downloaded at ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://support.sap.com/en/product/connectors/jco.html"}},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"Once uploaded to the application server(s), after the first startup attempt (see below), simply replace the library and change the ownership to adm:sapsys, for example:","type":"text"}]},{"type":"codeBlock","content":[{"text":"cp libsapjco3.so /usr/sap/NSD/DVEBMGS01/work/dvd_conn/jco2402/lib/\nchown nsdadm:sapsys /usr/sap/NSD/DVEBMGS01/work/dvd_conn/jco2402/lib/libsapjco3.so","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Central Java instance","type":"text"}]},{"type":"paragraph","content":[{"text":"It is possible to deploy a single JCO instance, instead of running one on every application server. To set up such a scenario, follow these steps:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the Java connector is already running on several application servers, stop all instances.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":45.0},"content":[{"type":"media","attrs":{"width":674,"id":"fa790e98-538a-41ea-9d5f-9eafae7b4dc5","collection":"contentId-4510357085","type":"file","height":83}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Open the Java RFC destination and fill in the Gateway options valid for the desired instance.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":672,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":672,"alt":"image-20240226-101149.png","id":"47329e55-3ac9-44f9-b4ad-8193f086b2b3","collection":"contentId-4510357085","type":"file","height":818}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"When the transaction ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]},{"text":" is reloaded, only buttons next to the application server hosting the JCO are functional and all the other app. servers will be using this connection.","type":"text"},{"type":"hardBreak"},{"text":"When the JCO is started, all rows in the ","type":"text"},{"text":"Connection","type":"text","marks":[{"type":"code"}]},{"text":" column should be green, indicating that every application server can reach the JCO via the designated RFC destination.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":40.0},"content":[{"type":"media","attrs":{"width":659,"id":"5441e7c4-2e92-4d54-bcf9-5d273e07fcd8","collection":"contentId-4510357085","type":"file","height":250}}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Setting up the connection via proxy server","type":"text"}]},{"type":"paragraph","content":[{"text":"Sometimes communication with a service outside the corporate network needs to be routed through a proxy server to comply with company security standards.","type":"text"}]},{"type":"paragraph","content":[{"text":"To achieve this, the following parameters need to be added to the ","type":"text"},{"text":"Additional Java starting arguments","type":"text","marks":[{"type":"code"}]},{"text":" field in the ","type":"text"},{"text":"Advanced","type":"text","marks":[{"type":"code"}]},{"text":" tab of ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"codeBlock","content":[{"text":"-Dhttps.useProxy=true\n-Dhttps.proxyHost=\n-Dhttps.proxyPort=","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":50.0},"content":[{"type":"media","attrs":{"width":711,"id":"2f57bd75-ebe4-4463-b4a2-8c511e29fd74","collection":"contentId-4510357085","type":"file","height":262}}]},{"type":"paragraph","content":[{"text":"There is a chance that the proxy server is configured to communicate in plain HTTP protocol. In that case, the parameters need to reflect that, using:","type":"text"}]},{"type":"codeBlock","content":[{"text":"-Dhttp.useProxy=true\n-Dhttp.proxyHost=\n-Dhttp.proxyPort=","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Custom destination for JCO lock file","type":"text"}]},{"type":"paragraph","content":[{"text":"The lock file is used to prevent the accidental start of multiple JCO instances. By default, the lock file is created in the Installation directory. ","type":"text"},{"type":"hardBreak"},{"text":"If needed, the directory can be changed, using the parameter ","type":"text"},{"text":"-DremoteLockFileDir=","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"SNC configuration","type":"text"}]},{"type":"paragraph","content":[{"text":"If the SAP system is hardened by enabled Secured Network Communication (system parameter ","type":"text"},{"text":"snc/enable = 1","type":"text","marks":[{"type":"em"}]},{"text":"), there are additional configuration steps.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The first step is the creation of a Personal Security Environment (PSE) for the JCO. This is to be done under ","type":"text"},{"text":"adm","type":"text","marks":[{"type":"strong"}]},{"text":" user.","type":"text"},{"type":"hardBreak"},{"text":"PSE should be stored together with other SAP PSE files, by default on path ","type":"text"},{"text":"/usr/sap///sec","type":"text","marks":[{"type":"strong"}]},{"text":", referenced by the environment variable ","type":"text"},{"text":"$SECUDIR","type":"text","marks":[{"type":"strong"}]},{"text":". ","type":"text"},{"type":"hardBreak"},{"text":"Commands to create the PSE, with an example of system ID NSD with csh as nszadm’s shell:","type":"text"},{"type":"hardBreak"},{"text":"su - nsdadm","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"setenv SECUDIR /usr/sap/NSD/D00/sec","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"cd $SECUDIR","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"sapgenpse gen_pse -v -p SNPJCO.pse","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"A passphrase can optionally protect PSE. The mandatory input parameter is the Distinguished name of the PSE owner, in our example, it’s ","type":"text"},{"text":"CN=SNPJCO, OU=SNP, C=DE","type":"text","marks":[{"type":"code"}]}]},{"type":"codeBlock","content":[{"text":"nsd:nsdadm 98> sapgenpse gen_pse -v -p SNPJCO.pse\nGot absolute PSE path \"/usr/sap/NSD/D00/sec/SNPJCO.pse\".\nPlease enter PSE PIN/Passphrase:\nPlease reenter PSE PIN/Passphrase:\n!!! WARNING: For security reasons it is recommended to use a PIN/passphrase\n!!! WARNING: which is at least 8 characters long and contains characters in\n!!! WARNING: upper and lower case, numbers and non-alphanumeric symbols.\n\nget_pse: Distinguished name of PSE owner: CN=SNPJCO, OU=SNP, C=DE\n Supplied distinguished name: \"CN=SNPJCO, OU=SNP, C=DE\"\n Creating PSE with format v2 (default)\n succeeded.\n certificate creation... ok\n PSE update... ok\n PKRoot... ok\nGenerating certificate request... ok.\nCertificate Request:\n Signed Part:\n Subject: CN=SNPJCO, OU=SNP, C=DE\n Key: rsaEncryption (2048 bits)\n Attributes: None\n Signature:\n Signature algorithm: sha256WithRsaEncryption (1.2.840.113549.1.1.11)\n Signature: \n\nPKCS#10 certificate request for \"/usr/sap/NSD/D00/sec/SNPJCO.pse\":\n\n-----BEGIN CERTIFICATE REQUEST-----\nMIICcjCCAVoCAQAwLTELMAkGA1UEBhMCREUxDDAKBgNVBAsTA0RWRDEQMA4GA1UE\n################################################################\n################################################################\n################################################################\nPxmDNQSCYvLxURXcP+vQxDSOq5QYgQf4g4egjVXRcyQwOJNZRpHlP1olXc4Aa675\n-----END CERTIFICATE REQUEST-----\nnsd:nsdadm 99>","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The second step is to export the certificate with the public key from the newly created PSE, using the command:","type":"text"},{"type":"hardBreak"},{"text":"sapgenpse export_own_cert -v -p SNPJCO.pse -o SNPJCO.crt","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"This produces SNPJCO.crt file.","type":"text"},{"type":"hardBreak"}]},{"type":"codeBlock","content":[{"text":"nsd:nsdadm 99> sapgenpse export_own_cert -v -p SNPJCO.pse -o SNPJCO.crt\n\n Opening PSE \"/usr/sap/NSD/D00/sec/SNPJCO.pse\"...\n No SSO credentials found for this PSE.\n PSE (v2) open ok.\n Retrieving my certificate... ok.\n Writing to file (PEM-framed base64-encoded)... ok.\n\nnsd:nsdadm 100>","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Now import the SNP JCO certificate file into the SAP system’s Trust manager. ","type":"text"},{"type":"hardBreak"},{"text":"Run transaction ","type":"text"},{"text":"STRUST","type":"text","marks":[{"type":"strong"}]},{"text":" > switch to ","type":"text"},{"text":"Edit","type":"text","marks":[{"type":"strong"}]},{"text":" mode > double-click ","type":"text"},{"text":"SNC PSE node","type":"text","marks":[{"type":"strong"}]},{"text":" > in the lower part of the screen click on the ","type":"text"},{"text":"Import certificate","type":"text","marks":[{"type":"strong"}]},{"text":" icon, locate the certificate file, confirm file selection > click ","type":"text"},{"text":"Add to Certificate List","type":"text","marks":[{"type":"strong"}]},{"text":" > ","type":"text"},{"text":"Save","type":"text","marks":[{"type":"strong"}]},{"text":" (Ctrl+S)","type":"text"},{"type":"hardBreak"},{"text":"NOTE: You may need to download the certificate file to your front end to be able to select it.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":690,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":737,"alt":"image-20240226-133037.png","id":"1f0c5745-29ee-4763-b106-94752de1b4b9","collection":"contentId-4510357085","type":"file","height":801}}]},{"type":"paragraph"}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"We have imported the JCO certificate to SAP. To create two-way trust between SAP and JCO, we now need to import the SAP system’s certificate to JCO PSE.","type":"text"},{"type":"hardBreak"},{"text":"Export SAP’s certificate, similarly as in step 3. Run ","type":"text"},{"text":"STRUST","type":"text","marks":[{"type":"strong"}]},{"text":" and select the ","type":"text"},{"text":"SNC PSE node","type":"text","marks":[{"type":"strong"}]},{"text":", but double-click on ","type":"text"},{"text":"Own certificate,","type":"text","marks":[{"type":"strong"}]},{"text":" and at the bottom of the screen click the icon ","type":"text"},{"text":"Export certificate","type":"text","marks":[{"type":"strong"}]},{"text":". Choose ","type":"text"},{"text":"Base64","type":"text","marks":[{"type":"strong"}]},{"text":" format, path, and filename to save the .crt file. Upload the file to the application server, ideally to ","type":"text"},{"text":"$SECUDIR","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To import the SAP certificate to JCO PSE, run the command:","type":"text"},{"type":"hardBreak"},{"text":"sapgenpse maintain_pk -v -a SAP.crt -p SNPJCO.pse","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"}]},{"type":"codeBlock","content":[{"text":"nsd:nsdadm 104> sapgenpse maintain_pk -v -a NSD.crt -p SNPJCO.pse\n\n Opening PSE \"/usr/sap/NSD/D00/sec/SNPJCO.pse\"...\n No SSO credentials found for this PSE.\n PSE (v2) open ok.\n retrieving PKList\n Adding new certificate from file \"NSD.crt\"\n----------\nSubject : CN=NSD, OU=SNP, C=DE\nIssuer : CN=NSD, OU=SNP, C=DE\nSerialno : 0A:20:21:01:24:10:44:01\nKeyInfo : RSA, 2048-bit\nValidity - NotBefore: Sun Jan 24 11:44:01 2021 (210124104401Z)\n NotAfter: Fri Jan 1 01:00:01 2038 (380101000001Z)\nKeyUsage : none\nExtKeyUsage : none\nSubjectAltName : none\n----------------------------------------------------------------------------\n\n PKList updated (1 entries total, 1 newly added)\n\nnsd:nsdadm 105>","type":"text"}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To allow JCO to run under adm user using the credentials stored in the PSE, SSO credentials must be created in the ","type":"text"},{"text":"cred_v2","type":"text","marks":[{"type":"strong"}]},{"text":" file.","type":"text"},{"type":"hardBreak"},{"text":"It is advised to back up the cred_v2 file before proceeding.","type":"text"},{"type":"hardBreak"},{"text":"The file should already exist in ","type":"text"},{"text":"SECUDIR","type":"text","marks":[{"type":"strong"}]},{"text":" and will be updated using the command:","type":"text"},{"type":"hardBreak"},{"text":"sapgenpse seclogin -p SNPJCO.pse -O nsdadm","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"If the SAP system is distributed, the PSE file and SSO credentials allowing access to it in cred_v2 need to be present on ","type":"text"},{"text":"each application server","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"codeBlock","content":[{"text":"nsd:nsdadm 105> cp -p cred_v2 cred_v2.bkp\nnsd:nsdadm 106> sapgenpse seclogin -p SNPJCO.pse -O nsdadm\n\n running seclogin with USER=\"nsdadm\"\n creating credentials for yourself (USER=\"nsdadm\")...\n Added SSO-credentials for PSE \"/usr/sap/NSD/D00/sec/SNPJCO.pse\"\n\nnsd:nsdadm 107>","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"NOTE: If JCO is deployed in a ","type":"text"},{"text":"Windows","type":"text","marks":[{"type":"strong"}]},{"text":" environment, allow access to the PSE file also for user ","type":"text"},{"text":"SAPService","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"example: ","type":"text"},{"text":"sapgenpse seclogin -p SNPJCO.pse -O SAPServiceNSD","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"Available SSO credentials can always be checked using the command:","type":"text"},{"type":"hardBreak"},{"text":"sapgenpse seclogin -l","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Now that the security environment is prepared, configure JCO SNC in transaction ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"strong"}]},{"text":" in the Config Tab:","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":591,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":591,"alt":"image-20240226-132043.png","id":"45b2d511-6e03-4d71-8abf-d7d9486dc650","collection":"contentId-4510357085","type":"file","height":132}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SNC enabled","type":"text","marks":[{"type":"strong"}]},{"text":": Once activated, user and password fields will be greyed out and have no effect on JCO configuration.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SNC QoP Level","type":"text","marks":[{"type":"strong"}]},{"text":": SNC Quality of Protection, needs to be the same level as set in system parameter ","type":"text"},{"text":"snc/data_protection/use","type":"text","marks":[{"type":"em"}]},{"text":" (default = 3).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SNC name","type":"text","marks":[{"type":"strong"}]},{"text":": Distinguished name chosen during the creation of JCO PSE (step 1).","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SNC-enabled GW port","type":"text","marks":[{"type":"strong"}]},{"text":": SAP gateway port used for secure communication. Do not change the default value ","type":"text"},{"text":"48$$","type":"text","marks":[{"type":"strong"}]},{"text":", $$ is automatically translated to the instance number of a particular application server.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SNC partner name:","type":"text","marks":[{"type":"strong"}]},{"text":" Distinguished name of SAP system, pre-filled from SAP profile parameter ","type":"text"},{"text":"snc/identity/as.","type":"text","marks":[{"type":"em"}]}]},{"type":"paragraph","content":[{"text":"Save the configuration when completed, but ","type":"text"},{"text":"do not start","type":"text","marks":[{"type":"strong"}]},{"text":" the JCO yet.","type":"text"},{"type":"hardBreak"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"There are two more configuration pieces to complete before JCO can properly start and register on the SAP gateway.","type":"text"},{"type":"hardBreak"},{"text":"In ","type":"text"},{"text":"SU01","type":"text","marks":[{"type":"strong"}]},{"text":", activate SNC for ","type":"text"},{"text":"RFC user","type":"text","marks":[{"type":"strong"}]},{"text":" dedicated to JCo communication, filling in the ","type":"text"},{"text":"SNC name","type":"text","marks":[{"type":"strong"}]},{"text":" dedicated to JCo.","type":"text"},{"type":"hardBreak"},{"text":"Despite the user no longer being configured in /DVD/JCO_MNG, it is used by matching the SNC name entered here and the Distinguished name configured in JCo PSE.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":621,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":621,"alt":"image-20240226-132409.png","id":"c7c8794e-4931-477c-a6ab-d2bf55ad321a","collection":"contentId-4510357085","type":"file","height":260}}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Secondly, via ","type":"text"},{"text":"SM59","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"activate SNC ","type":"text","marks":[{"type":"strong"}]},{"text":"in the RFC destination dedicated to communication between SAP and JCO and fill in the JCo Distinguished name again in the ","type":"text"},{"text":"Logon & Security","type":"text","marks":[{"type":"strong"}]},{"text":" tab (SNC options button):","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":968,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":968,"alt":"image-20240226-132645.png","id":"93909c88-7f83-4b38-8f28-cf044859c8a1","collection":"contentId-4510357085","type":"file","height":614}}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Having all SNC prerequisites met, Java Connector can be started.","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Sample JCo configuration files with SNC enabled","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"If the JCo is deployed in a ","type":"text"},{"text":"Windows","type":"text","marks":[{"type":"strong"}]},{"text":" environment, the path to the cryptographic library may contain \\usr or a similar path segment with ","type":"text"},{"text":"\\u","type":"text","marks":[{"type":"strong"}]},{"text":" character.","type":"text"},{"type":"hardBreak"},{"text":"That may result in an error during JCo startup:","type":"text"},{"type":"hardBreak"},{"text":"Exception in thread \"main\" java.lang.IllegalArgumentException: Malformed \\uxxxx encoding.","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"To circumvent this, every \\u character in the configuration files must be preceded by an additional backslash → ","type":"text"},{"text":"\\\\u","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"To prevent the automatic overwrite of manually modified configuration files during JCO start, the option ","type":"text"},{"text":"Avoid JCO config files creation","type":"text","marks":[{"type":"strong"}]},{"text":" of /DVD/JCO_MNG needs to be selected:","type":"text"}]}]},{"type":"paragraph","content":[{"text":"Configuration files example:","type":"text"}]},{"type":"codeBlock","content":[{"text":"nsd:/usr/sap/NSD/D00/work/dvd_conn/jco2402 # cat config.jcoServer\nversion=2402\njco.server.gwhost=127.0.0.1\njco.server.gwserv=4800\njco.server.connection_count=10\njco.server.progid=SNPJCO\njco.server.repository_destination=ABAP_AS_WITH_POOL\njco.server.worker_thread_min_count=5\njco.server.worker_thread_count=20\njco.server.snc_mode=1\njco.server.snc_qop=3\njco.server.snc_myname=p:CN=SNPJCO, OU=SNP, C=DE\njco.server.snc_lib=/sapmnt/NSD/exe/uc/linuxx86_64/libsapcrypto.so\n\nnsd:/usr/sap/NSD/D00/work/dvd_conn/jco2402 # cat config_as.jcoDestination\njco.client.client=001\njco.client.sysnr=00\njco.client.peak_limit=10\njco.client.ashost=127.0.0.1\njco.client.snc_mode=1\njco.client.snc_qop=3\njco.client.snc_myname=p:CN=SNPJCO, OU=SNP, C=DE\njco.client.snc_partnername=p:CN=NSD, OU=SNP, C=DE\njco.client.snc_lib=/sapmnt/NSD/exe/uc/linuxx86_64/libsapcrypto.so","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Upgrading Java connector","type":"text"}]},{"type":"paragraph","content":[{"text":"This is a list of steps to do when you update your SNP software and you would like to switch to a new version of the Java connector.","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"With SAP JCO version 3.1, additional authorization is required for JCO’s RFC user, which allows the execution of function modules in function group RFC_METADATA.","type":"text"},{"type":"hardBreak"},{"text":"Please make sure the RFC user has all authorizations listed in the ","type":"text"},{"text":"SAP RFC role and user","type":"text","marks":[{"type":"strong"}]},{"text":" section of this page.","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Open transaction ","type":"text"},{"text":"/DVD/JCO_MNG","type":"text","marks":[{"type":"code"}]}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":901,"id":"1a4525f8-13eb-4a6a-b7c7-b66482a20726","collection":"contentId-4510357085","type":"file","height":260}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Double-click the current working connector and click ","type":"text"},{"text":"Stop all","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":905,"id":"544691d2-d068-4f3e-9abd-49f3cc8e949e","collection":"contentId-4510357085","type":"file","height":266}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"After the current version of the SNP Java connector is disconnected, click ","type":"text"},{"text":"Copy config","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":899,"id":"8a0aa978-34cc-4a39-89b0-185d1eb1fe49","collection":"contentId-4510357085","type":"file","height":254}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Double-click the new version of the connector, enter ","type":"text"},{"text":"Edit mode","type":"text","marks":[{"type":"code"}]},{"text":", then click ","type":"text"},{"text":"Paste config","type":"text","marks":[{"type":"code"}]},{"text":", then fill the ","type":"text"},{"text":"RFC Usage","type":"text","marks":[{"type":"code"}]},{"text":" field with the same RFC that was used with the old connector.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":901,"id":"5e1e6af7-4ebf-4212-9e6a-0d93f70aa8e9","collection":"contentId-4510357085","type":"file","height":258}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Switch to the ","type":"text"},{"text":"Config","type":"text","marks":[{"type":"code"}]},{"text":" tab adjust the Install directory to match the current ID of SNP Java Connector and click on the ","type":"text"},{"text":"Generate paths","type":"text","marks":[{"type":"code"}]},{"text":" button.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":761,"id":"5b711360-5413-4af8-a9b0-b524e46fcbac","collection":"contentId-4510357085","type":"file","height":293}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Switch to the ","type":"text"},{"text":"Libraries","type":"text","marks":[{"type":"code"}]},{"text":" tab and make sure you are using the latest libraries for your connector.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":731,"id":"5dbe8a64-d5ba-40f6-a682-6f755aee265b","collection":"contentId-4510357085","type":"file","height":169}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Switch back to the ","type":"text"},{"text":"General","type":"text","marks":[{"type":"code"}]},{"text":" tab and click ","type":"text"},{"text":"Restart","type":"text","marks":[{"type":"code"}]},{"text":" for every Application server.","type":"text"},{"type":"hardBreak"},{"text":"It is important to start each JCO instance being logged onto the respective application server (SM51) to make sure the directories, libraries, and configuration files are deployed locally.","type":"text"},{"type":"hardBreak"},{"text":"This requirement is valid only for initial deployment, later operation (Stop/Start) is possible remotely, from any application server.","type":"text"},{"type":"hardBreak"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":65.0},"content":[{"type":"media","attrs":{"width":898,"id":"10e4fd03-57c0-4552-89b7-c33fd2b8d050","collection":"contentId-4510357085","type":"file","height":257}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"Restarting the connector can cause running Glue/Outboard jobs to fail. Therefore it is recommended to perform the upgrade during a quiet period and have Glue/Outboard jobs suspended.","type":"text"}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Automatic Java connector startup after SAP system restart","type":"text"}]},{"type":"paragraph","content":[{"text":"For the automatic start of the Java connector after the SAP system restarts, schedule a periodic job with program ","type":"text"},{"text":"/DVD/JCO_WATCH_DOG","type":"text","marks":[{"type":"code"}]},{"text":" with start condition: “SAP_SYSTEM_START“.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":568,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":468,"id":"1f62b751-db68-4c61-a8d7-9c92076a6f79","collection":"contentId-4510357085","type":"file","height":278}}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"Setting up the automatic start of Java Connector after SAP system restart is not mandatory. Java Connector is normally started when it is needed.","type":"text"}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Copying Java connector","type":"text"}]},{"type":"paragraph","content":[{"text":"Sometimes it may be needed to COPY the JCO instance and create a version from it.","type":"text"},{"type":"hardBreak"},{"text":"When the JCO is copied, the separate JCO installation directory is used; the new JCO instance thus has its own space for configuration and logs.","type":"text"}]},{"type":"paragraph","content":[{"text":"Possible use cases for JCO COPY:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Vertical scaling: When more JCO instances are needed.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Versioning: When the JCO is needed for a different purpose.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"JCO testing: To make different instances for testing purposes.","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"With JCO COPY functionality the new JCO copy/instance is created with an increased subversion ID number.","type":"text"}]},{"type":"paragraph","content":[{"text":"For example when copying from ID 240, then a JCO copy is created with ","type":"text"},{"text":"ID: 240.1","type":"text","marks":[{"type":"strong"}]},{"text":". The next copy will have ","type":"text"},{"text":"ID: 240.2","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Open transaction ","type":"text"},{"text":"/DVD/JCO_MNG.","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":1065,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1065,"alt":"image-20240226-134217.png","id":"8c80ed9b-0de7-4f02-9122-5cd0692cbd36","collection":"contentId-4510357085","type":"file","height":375}}]},{"type":"orderedList","attrs":{"order":2},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Click ","type":"text"},{"text":"Copy JCO","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":560,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":560,"alt":"image-20240226-134316.png","id":"69a27303-b7e8-4505-b2f2-dc49c1da5e25","collection":"contentId-4510357085","type":"file","height":217}}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Copy config from Java RFC","type":"text","marks":[{"type":"strong"}]},{"text":": Copies JCO configuration from the JCO configured with selected RFC destination.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Copy config from version ID","type":"text","marks":[{"type":"strong"}]},{"text":": Copies JCO configuration from given JCO ID.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use default values","type":"text","marks":[{"type":"strong"}]},{"text":": Uses defaults for the new JCO.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Java version","type":"text","marks":[{"type":"strong"}]},{"text":": Read-only field as a newly created copy of JCO will be created from a particular Java version.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Description: ","type":"text","marks":[{"type":"strong"}]},{"text":"Description of a newly created copy of JCO.","type":"text"}]}]}]},{"type":"orderedList","attrs":{"order":3},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Example of the JCO copy, reconfigured with appropriate parameters - most importantly ","type":"text"},{"text":"RFC destination","type":"text","marks":[{"type":"strong"}]},{"text":" and ","type":"text"},{"text":"Installation directory","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":963,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":963,"alt":"image-20240226-134920.png","id":"eba8c7e7-d432-4148-a35d-8e61ff9ac57c","collection":"contentId-4510357085","type":"file","height":328}}]},{"type":"mediaSingle","attrs":{"layout":"align-start","width":956,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":956,"alt":"image-20240226-135013.png","id":"690627e1-70e4-43a1-90ba-3bc0733b1fa4","collection":"contentId-4510357085","type":"file","height":284}}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}],"version":1}

Browser not supported