SAP NetWeaver 7.0 Dual Stack Refresh Procedure -Part 2
8 Refresh Process Flow
8.1 Pre-steps
8.1.1 Environment Cleanup
• Before attempting to run SAPINST on either the Source System or the Target System, be sure to remove or comment out any lines similar to the following.setenv DISPLAY `who am i | cut -d\( -f2 | cut -d\) -f1`:0.0
• Double check the environment and profile files for errors or inconsistencies.
• Remove the pack directory from the SDM location
rm –rf /usr/sap/<SID>/<INSTANCE>/SDM/program/pack
8.1.2 Export data from Target System
• Perform the setup and export steps of the scj_refresh.pl script.
• Save off information regarding the login module for “evaluate_assertion_ticket” and “ticket” from the Visual Administrator Security Provider Service
Ticket :-
• CN=SBI, OU=I0020065832, OU=SAP Web AS, O=SAP Trust Community, C=DE
• CN=PM1, OU=I0020157833, OU=SAP Web AS,O=SAP Trust Community, C=DE
Evaluate_assertion_ticket:
• CN=SBI, OU=I0020065832, OU=SAP Web AS, O=SAP Trust Community, C=DE
• Export the certificates from the Key Storage service
. Select the Key Storage service from the left panel in the Visual Administrator
. Select the TicketKeystore view
. Select each entry in the resulting list and click the export button
. Change the directory to save the files into the /home/<sid>adm directory
Export the private certificate for SAP Logon Ticket Key pair as well and assign it a password. The password will be needed later to reinstall the key. Keys stored in the home directory.
This step avoids the process of recreating the certificates and distributing them to each system for each refresh.
Will update soon... Check next post...
