'Signature Service Unreachable' error in the NFE system

[Former Member]

Hi Experts,

I have the following landscape: ERP (R3 4.7) --> GRC (with NFE ABAP) --> PI (with NFE Java and Digital Signature service and certificate installed)

When I send an NFE from ERP to GRC system, the NFE goes into an error status '20' - 'Signature Service Unreachable'. I have already performed the following steps:

1. Assigned and granted permission XSecurityRuntimePermission to the bean sap.com_grcnfe_dsigdsigbean.jar

2. Uploaded certificate in key storage

3. In GRC sysetm, SPRO --> SAP GRC NFE --> Configure system response for each tax number, assigned the Key Storage View and Key Storage Element name against the CNPJ entry

4. Created a Configuration Scenario for integration scenario SIGNN_WebAS_Outbound_SignNFe

I am just not able to proceed as the digital signature service seems to be unreachable. I cannot see anything in the SXMB_MONI of the GRC system and of the PI system inspite of putting the logging and tracing on.

PLEASE HELP!!!

Thanks,

Shobhit

[former_member182114 · Accepted solution]

Hi Shobhit,

This is an unusual problem, please check if your SM59 on ERP are point to GRC NFe (ABAP Core) and the destination to PI are really pointing to PI:

> I have the following landscape: ERP (R3 4.7) --> GRC (with NFE ABAP) --> PI (with NFE Java and Digital Signature service and certificate installed)
> 
> When I send an NFE from ERP to GRC system, the NFE goes into an error status '20' - 'Signature Service Unreachable'. I have already performed the following steps:

- Also, check the proxies on SPROXY transaction (maybe you need to regenerate then)

- You can made a quick investigation just executing the /xnfe/nfe_create directly on GRC, the problem is occuring inside:

* start signature process
      CALL FUNCTION lv_funcmod

Probably the error are being raised on call to proxy:

      CALL METHOD lo_clientproxy->execute_asynchronous
        EXPORTING
          output = ls_request.

Also, check the name of permission, you post XSecurityRuntimePermission maybe is a typo but please recheck:

> 1. Assigned and granted permission XSecurityRuntimePermission to the bean sap.comgrcnfedsigdsigbean.jar

Regards, Fernando Da Ró

[Former Member · Accepted solution]

Hi Fernando,

Thanks for your help. As correctly identified by you, the proxy call was erroring as the SLD connection was not up. I corrected the same and now the problem is solved.

Obrigado!!!

Shobhit

[henrique_pinto]

Shobhit,

please notice this forum, though specific to NFe, is for portuguese language only.

For english questions related to NFe, you could use the generic GRC forum:

Anyway, double check whether the Digital Signature web service is reachable through the WebService Navigator (http://<server>:<port>/wsnavigator, look for the DigitalSignature entry). Double check if it's working by testing the service (Test tab) with a user with proper credentials (SAP_J2EE_ADMIN or SAP_J2EE_GUEST roles).

There, you can also check the actual Web Service address in the wsdl (look for the location attribute).

Double check whether this address is correctly set in your communication channel, with a user with the proper credentials.

Best regards,

Henrique.