Installing SAP Cryptolib

[jay_b2]

We have newly configured 7.3 Java only EP server & 6.05 ECC.. This is about which download should I use for sapcryptolib

I wanted to know in what scenarios do we use the SAPCryptolib under -

1. SWDC --> SAP Cryptographic Software" SAPCryptolib for Installation" SAPCRYPTOLIB 5.5.5

2. SWDC --> SAP Cryptographic Software" SAPCryptolib for Updates" SAPCRYPTOLIB FOR 7.20

I dont know when would Updates be applicable.. because in either of the cases... what you get is a library file (libsapcrypto.o for AIX), an application sapgenpse & a ticket file (which is said to be NOT required for the new release)

Should I use the first path for installation ? In that case, when should we use the second one ?

[JPReyes]

Hi Jay,

In my opinion you should use SAPCryptolib for your current kernel. Use the 720 or 70_EXT (if usinging and EXT Kernel)

You can read,

Note 510007 - Setting up SSL on Web Application Server ABAP

Note 455033 - SAPCRYPTOLIB versions, bugs and fixes

Theres a reference to the EXT SAPcryptolib for 720_EXT kernel in,

Note 1553301 - 7.20 EXT Kernel - Usage

Theres also a comment for NW 7.3 SAPCrytolib in,

Note 1403832 - Central Note: Upgrade Systems on SAP NetWeaver 7.3

Regards, Juan

[jay_b2]

Hi

I've gone through 1553300 but dont understand in what scenarios do we use EXT kernel.

I'm running on AIX 6.1.0.0 & db2 9.5.0.8.

Informational tokens are "DB2 v9.5.0.8", "special_27408", "IP23263_27408", and

Fix Pack "8".

I'm using DB2 v 9.7 & v10 on some other SAP systems as well.

If both standard & ext kernels are available for my servers, which ones should I use ? & how do they help ? (as in what is different in those kernels).

Further, is ext kernel an extension or independent component as against standard kernel ?

Thanks

[Former Member]

Juan - You are welcome to add if I am going some where wrong or add to more

In the note if we see to the section "Reason and Prerequisites" we come to know why the EXT kernel is introduced by SAP.

As SAP kernel is build using compilers, once these compilers got rectified with there bugs or enhanced (due to different requirements), SAP also releases kernel according to.

and now which Kernel should we use on our systems?, my strategy would be in general go to advavce one if my OS/DB/SAP (Ehp's), or on advanced/latest.

Also the main reason: Getting official support.

Regards,

Sreenivas .Y

[jay_b2]

Hi Sreenivas

Thank you for responding. I am still not clear on this..

In the reasons and prerequisites for 1553300 they say "When the OS or the compiler which are used during the builds run out of vendor support customers could run into a support problem. SAP therfore needs to provide a newer kernel which is built with the newer / supported version of the OS and compiler. Against this background, an update of the SAP kernel make environment is required from time to time resulting in newer kernels being made available for the customer."

If SAP is looking forward to provide kernel extensions for those OS/DB combinations (where compilers have changed & thus are not supported with Kernel 720)... how is it that we find several configurations supported with both 720 & 720_EXT. Further, if I have one such setup that supports both, what should I use... what additional benefit will I get with 720_EXT ?

I'm asking this because I am presently on 720 (not using EXT). I wanted to install Cryptographic libraries on my system (that was not done during installation). Now based on my kernel, I'll have to decide on crypto libraries. That is, if it is advisable to continue using 720, I'll use SWDC-->SAPCrypto Libs for Installations --> AIX 64 bit.

If it is advisable to use 720_EXT, I will use SWDC-->SAPCrypto Libs for Updates --> AIX 64 bit.

Hope this clarifies...

Thanks

[JPReyes]

Hi Jay,

You are drowning on a glass of water. I mentioned that there was a reference to Sapcryptolib for 720_EXT simply to support my statement.

If you are using kernel 720 use the Sapcryptolib 720.

Regards, Juan