Activation of SAP WebGui

To be able to benefit from SAP WebGui, you have to execute some initial configuration steps. These steps ensure that the services and the ICF nodes are correctly configured and mime files like JS, CSS, images are available and accessible by WebGui. More information about the necessary ICF configuration steps for WebGui can be found at SAP Help.

The services listed there for WebGui are:

  • /default_host/sap/public/bc/its/mimes
  • /default_host/sap/bc/gui/sap/its/

The URL to access SAP WebGui is: http(s)://<server>:<port>/sap/bc/gui/sap/its/webgui

For some reason the above linked SAP Help page is not listing all ICF nodes and steps needed to execute successfully WebGui. Especially when you have to set up a fresh installed NetWeaver system, several additional steps have to be executed to be able to use WebGui. In total, the steps involved in having a working WebGui are:

  • Base ICF nodes
  • Icons
  • Mime
  • Webgui
  • Publish services

Pre-requisites

The base ICF nodes must have been activated before.

Activate ICONS

  • Tx: SICF
  • Virtual host: DEFAULT_HOST
  • Service Patch: /sap/public/bc/icons

Filter

Activate

Activate MIMES

  • Tx: SICF
  • Virtual host: DEFAULT_HOST
  • Service Patch: /sap/public/bc/its/mime

Filter

Service

Activate Service

Yes

Activate WebGui

  • Tx: SICF
  • Virtual host: DEFAULT_HOST
  • Service Patch: /sap/bc/gui/sap/its/webgui

Filter

Service

Activate Service webgui

Publish services

The ICF nodes are activated, but that does not mean they are also executable in a fresh installed NetWeaver ABAP system. This is caused by that services are not automatically published to ITS after a system is newly installed. You have to do this manually. See
SAP Note 790727
for more on this. Luckily, SAP delivers a transaction that publishes all ITS services: SIAC_PUBLISH_ALL_INT

  • Tx: SIAC_PUBLISH_ALL_INTERNAL

Run it, nothing else to than to wait until the report finishes. You will get an overview presented.

Too much information? No worry, the most important part is the summary of number of messages in each category.

411 times no problems reported!

Test service

http://nw75.tobias.de:8000/sap/bc/gui/sap/its/webgui

Initial setup of SAP NetWeaver ABAP ICM for HTTP

SAPGui is just one way to access an SAP system. A more and more common way to interact and work with SAP is through a browser. As with all web sites, a web server must handle the browser requests. For SAP NetWeaver ABAP, the web server is ICM. ICM is integrated with NW ABAP, no need to install it as an additional package. The only task to be execute by BASIS is to configure ICM. First step is to validate that ICM is working and no errors are occurring. For a browser to be able to access NW ABAP through HTTP, ICM must be up and running and listening on a HTTP port. Without this port, no communication from a browser to NW ABAP is possible. To see the configured HTTP port of ICM, you can either look at the profile parameter or use SMICM to see the service information.

Check ICM HTTP Port configuration

  • Tx: SMICM

Goto -> Services

This shows the active services handled by ICM. As you can see, HTTP is just one of several possible services. SMTP is available, as can be telnet too! For each service you can see additional information like host name, and port. Port is given a 0. Check the ICM parameters to find out why. Also, take a look at SAP Help about this.

“Default Values AS ABAP

icm/server_port_0 = PROT=HTTP , PORT=0 , TIMEOUT=30 , PROCTIMEOUT=60

Outbound connections across HTTP and SMTP are possible with default values, but no ports for inbound connections are open.”

Configure ICM HTTP Port

Security first. That`s how SAP rolls. To allow someone accessing your SAP ABAP system via HTTP, you must explicitly activate this. Gives you also a hint if or if not SAP sees HTTP based access in ABAP as an equal citizen compared to SAPGui. To see the (default) parameter used by ICM, select:

Goto -> Parameters -> Display.

This will show you the parameters used by ICM. The ICM server parameters are given by icm/server_port_X.

Default parameter for HTTP is icm/server_port_0. Value for port is PORT=0. 0 meaning no incoming communication possible. A browser won`t be able to connect to NW ABAP. You have two options to change this: temporarily or permanent.

Change the HTTP port temporarily

  • Tx: SMICM

Goto -> Services

Select the service: Service -> Change.

In the dialog, enter the new parameters. For port, you can use 8080. Confirm the data to start the service.

This _should_ start the HTTP service using the informed port. In my case – obviously – this did not work.

Change the HTTP port permanently

As the above solution is only a temporary workaround, the error message can be ignored (well, not sure if it is an error message, looks green, OK, and so). To change the profile parameter of ICM, RZ10 is used. This makes the HTTP port change permanent.

  • Tx: RZ10
  • Profile: Default
  • Type: extended maintenance

Select create parameter

Values

  • icm/server_port_0
  • PROT=HTTP,PORT=80$$

Copy the parameter

The comment line changes and includes a change value. Also shows who did the change (blame).

Back at the parameter list, you can now see that the added parameter is listed.

Save the changes to the profile file.

Select yes to activate the new profile.

Confirmation that everything worked.

Note that you`ll have to restart your NW ABAP server to take effect.

Restart NW ABAP.

Test ICM HTTP Port

Did it work? How to test it? Easy: take a look at ICM service and access a service using a web browser. First, let`s see if ICM is listening on port 80$$ (btw: $$ is the ID).

SMICM

  • Tx: SMICM
  • Path: Goto -> Services

  • ICM is listening on port 8000 for HTTP connections!

SICF

Very easy to test. Just access a ICF node using your web browser.

Initial Setup of NetWeaver ABAP System

After installing a SAP NetWeaver ABAP system you have to carry out several initial configuration steps to get working system. You can do these manually or simplify your life and use the “new” configuration wizard that aids you through this. Right after finishing the installation of a NW ABAP system, sapinst shows you a confirmation dialog, which includes a link to an SAP Note: 1923064. This note explains how to execute the initial configuration wizard.

Don`t be too excited about the note. It does nothing more than redirect you to Configuration Guide available on SAP Market Place. There is some documentation about his available on SCN [1] and [2]. The wizard is available with NetWeaver ABAP 7.4/7.5 and is executed via the ABAP task manager. Two transactions are important to know:

  • STC01: ABAP task manager
  • STC02: Task list monitor

Task manager contains a list of tasks you have to execute and means that you will save time and won`t miss an important configuration step. The above linked guide shows how to assign the right permissions to a user. To run the wizard, go to the ABAP task manager.

Transaction: STC01

In a base NW 7.5 system, 60 tasks are available. Enough to get you started setting up a system.

For the initial setup for a NW ABAP system, out of the 60 tasks, SAP_BASIS_SETUP_INITIAL_CONFIG needs to be selected.

Task list: SAP_BASIS_SETUP_INITIAL_CONFIG

Select the tasks you want to run.

Note

The PSE file is created and configured by this task too. Default values are pretty weak/compatible. 1024 bits and SHA-1. I think it is a good idea and time to change this to somewhat more secure:

Execute

Appendix

[1] http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/90829a05-f29d-3010-209d-ee50240e7efd?QuickLink=index&overridelayout=true&59661390714528

[2] http://scn.sap.com/docs/DOC-41405