FAQ: BC-SSF (Secure Store & Forward)
Version: 20060317
Q: Where can i find more information to the BC-SSF interface ?
A: Have a look on our ICC webpage in the SDN:
SAP NetWeaver - Secure Store & Forward and Digital Signatures (BC-SSF) [original link is broken]
Q: What costs are arising when we want our product to be certified ?
A: See also out SDN page under the headline "Price List".
Q: Is there a link/page for the already certified products for this interface ?
A: Sure, have a look on our ICC page under the headline "Certified Solutions"
Q: Who can we ask in case of general question ?
A: Have a look at our general ICC forum:
SAP Integration and Certification Center (SAP ICC)
Of course, if you have urgent requests you can send them also directly to our local ICC's:
ICC Walldorf in Germany: [email protected]
ICC Palo Alto in USA: [email protected]
ICC Bangalore in India: [email protected]
Q: Who can we ask in case of technical questions ?
A: This depends on the state of your certification project.
1.) If the certification contracts have been signed then you can ask in this forum and if this does not solve your question go back to your assigned integration consultant.
2.) When the certification contracts have not been signed then you can ask questions in this forum.
Q: Can we just implement our own Hash algorithms or do we need to implement MD5 and SHA1 also ?
A: Both hash algorithms are mandatory for getting certified. This means you have to implement MD5 and SHA1 for the certification.
Q: There is a conflict between our signaturealgorithm and the MD5 and/or SHA1 hashalgorithm in the way that they are not allowed to be used together. What can we do ?
A: If this is the case then get in contact with your assigned integration consultant to find a way out of this situation.
I have generate the Security certificate using STRUST.
I am calling function SSF_SIGN_BY_USER to digitally sign the document.
But I am getting CRC = 1 in return.
can anybody help me to assign SSF data to the User in su01.
I have to fill some fields by usign security certificate :
fields are : SSF ID , SSF ID Part2 , SSF Profile
Certficate is :
Owner : CN=DEB, OU=I0020538104, OU=Server, O=SAP Trust Community, C=DE
Issuer : CN=Server CA, OU=Server, O=SAP Trust Community, C=DE
Serial Number : 6B2CA5FC7E69D658100301001819
How to relate this. Please help
Similar Messages
-
Secure Store for Passwords Anyone?
I'd like to use the Secure Store to store passwords for use in mappings for web services and the like, but documentation on how to store and access passwords is a bit lacking - i.e. Refer to the following link:
http://help.sap.com/saphelp_webas630/helpdata/en/2f/aaa1701494c043830b1945264b2624/frameset.htm
Unfortunately, the library is not readily available within Custom Function Mapping (the import doesn't work) so I'm wondering if anyone else has had any luck with this?
FYI - The reason I want to do this is because if payload security is activated; then this will ensure that the password remains hidden from everyone and that the password can be set differently in each system (dev, qa, production).
Thanks,
Matt
ps. My only thought is to write a Web Dynpro app to store any password, and then get the passwords via an API in a JAVA mappinghi,
>>>>so I'm wondering if anyone else has had any luck with this?
I had a little luck with it
/people/michal.krawczyk2/blog/2007/05/09/xipi-secure-storage-service-with-user-defined-funtions
Regards,
michal
<a href="/people/michal.krawczyk2/blog/2005/06/28/xipi-faq-frequently-asked-questions"><b>XI / PI FAQ - Frequently Asked Questions</b></a> -
Error while accessing secure store
Hi Team,
We are on EP 7.0 on SQL server 2005 . Iam facing one problem , in sometimemy IRJ pOrtal site stops giving error " Java iView Runtime " .At this time what happens that in my usr/sap drive , the sap folder is not shown as shared its share goes away and that time when i connect to visual admin tool the authentication fails and that time config tool gives error
#1.5#00188B417A01007E0160B338000008FC00045DE876A4C303#1229152911187#com.sap.engine.services.dbpool.spi.ManagedConnectionFactoryImpl##com.sap.engine.services.dbpool.spi.ManagedConnectionFactoryImpl#Guest#2####f168def0c8c411dd9a2100188b417a01#SAPEngine_Application_Thread[impl:3]_29##0#0#Error##Plain###ManagedConnectionFactoryImpl.createManagedConnection(): SQLException occured while creating ManagedConnection: com.sap.sql.log.OpenSQLException: Error while accessing secure store: File "
musaprd
sapmnt
PWC
SYS
global
security
data
SecStore.properties" does not exist although it should..#
#1.5#00188B417A010085015AAAF5000008FC00045DE876A4C207#1229152911187#com.sap.sql.connect.OpenSQLDataSourceImpl##com.sap.sql.connect.OpenSQLDataSourceImpl#Guest#2####09e36ed0c8c711dd93b200188b417a01#SAPEngine_Application_Thread[impl:3]_39##0#0#Error#1#/System/Database/sql/connect#Java#com.sap.sql_0019##Exception of type com.sap.sql.log.OpenSQLException caught: Error while accessing secure store: File
When i check in this path SecStore.properties is there , also i have checked the permissions .....................please revert the reason of this error .
Main part of this all is that after taking a reboot everything becomes fine , this happens every few days .
Please revert to this .
Regards,
SomyaHi,
This error crops up when the the folder usr/sap folder sharing is lost . We have recently faced this problem this is Windows OS level problem you can ask your OS admin. Applying a security patch will do.
Regards,
Vamshi. -
Error while accessing secure store: File "SecStore.properties" does not exi
Hi ,
I have a java desktop application, and i am trying to get a connection from a datasource deployed on one SAP AS Java, I can get the datasource succsfullly but when i try to get a connection from the DS, it throughs this exception, I put the secstore..properties file in the classpath even after that it is not happy,
any solution/hint/light please!!!!
com.sap.sql.log.OpenSQLException: Error while accessing secure store: File "SecStore.properties" does not exist although it should..
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:106)
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:145)
at com.sap.sql.connect.OpenSQLDataSourceImpl.setDataSourceName(OpenSQLDataSourceImpl.java:226)
at com.sap.sql.connect.OpenSQLDataSourceImpl.setDataSourceName(OpenSQLDataSourceImpl.java:197)
at com.sap.customcode.ConflictingActionFixture.(ConflictingActionFixture.java:53)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
at java.lang.reflect.Constructor.newInstance(Unknown Source)
at java.lang.Class.newInstance0(Unknown Source)
at java.lang.Class.newInstance(Unknown Source)
at fit.FixtureClass.newInstance(Unknown Source)
at fit.FixtureLoader.instantiateFixture(Unknown Source)
at fit.FixtureLoader.instantiateFirstValidFixtureClass(Unknown Source)
at fit.FixtureLoader.disgraceThenLoad(Unknown Source)
at fit.Fixture.loadFixture(Unknown Source)
at fit.Fixture.getLinkedFixtureWithArgs(Unknown Source)
at fit.Fixture.doTables(Unknown Source)
at fit.FitServer.process(Unknown Source)
at fit.FitServer.run(Unknown Source)
at fit.FitServer.main(Unknown Source)
Caused by: com.sap.security.core.server.secstorefs.FileMissingException: File "SecStore.properties" does not exist although it should.
at com.sap.security.core.server.secstorefs.StorageHandler.openExistingStore(StorageHandler.java:372)
at com.sap.security.core.server.secstorefs.SecStoreFS.openExistingStore(SecStoreFS.java:1946)
at com.sap.sql.connect.OpenSQLConnectInfo.getStore(OpenSQLConnectInfo.java:802)
at com.sap.sql.connect.OpenSQLConnectInfo.lookup(OpenSQLConnectInfo.java:783)
at com.sap.sql.connect.OpenSQLDataSourceImpl.setDataSourceName(OpenSQLDataSourceImpl.java:209)
... 18 more
caused bythe SecStore.key file was not there, I changed the passwd and checked the 'Encryption' on, after that my sever instance is not starting.
Any idea?
-Puneet -
The Secure Store Service application Secure Store Service Proxy is not accessible
I am working on setting up a new SharePoint 2013 Farm for our external web site which is currently running on 2010 SharePoint. Because this is an External Website for our organization we have an internally available Publishing Site and there is an Web App
Extension to provide Anon Access to users using the www address. Currently I am doing everything on a single server for testing with HOSTS entries to loop back so I can test with real host headers and not impact the 2010 prod environment. We will be setting
up 2 more WFEs with a NLB before moving this into prod but it isn't there yet. We brought the Site Collection Databases over but are still running in 2010 mode for now.
I migrated a copy of the Secure Store Database over from 2010 and had it put on the 2013 Farm's Database Server. Set up Secure Store and the Secure Store Proxy. I went into the Secure Store Proxy in CA and refreshed the Key with the proper Pass Phrase. After
doing that I could see the Target Application IDs listed. Everything was looking good so I went off to test. If I am on the publishing site I can go to a page that has the solution on it and it operates as expected. It does a query to a non SharePoint database
and returns information filtered based on the search parameters. The only odd thing I see is if I click on the "Site Actions" I get a message "An error has occurred with the data fetch. Please refresh page and retry." Need to look into
that more but it only happens on pages that have these solutions. Maybe a clue. If I go to the Anonymous Access page (www......) and try and use the solution, it immediately (way too quick to appear like it is doing anything) comes back with "The security
token request cannot be completed."
If I dig through the usage logs I am finding the following.
The Secure Store Service application Secure Store Service Proxy is not accessible. The full exception text is: The security token request cannot be completed.
Unexpected exception from endpoint address : https://[Servername]:32844/4e87fd3aabb640fb8cc3ed52188cf5c0/SecureStoreService.svc/https
Logging unknown/unexpected client side exception: InvalidOperationException. This will cause this application server to be removed from the load balancer queue. Exception: System.InvalidOperationException: The security token request cannot be completed.
at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForServiceContext(Uri contextUri) at Microsoft.SharePoint.SPChannelFactoryOperations.InternalCreateChannelActingAsLoggedOnUser[TChannel](ChannelFactory`1 factory, EndpointAddress
address, Uri via) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.GetChannel(Uri address) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName,
Boolean validateCanary, ExecuteDelegate`1 operation).
Initially I was fighting a firewall issue because it wasn't working (different errors) on both sides. Had Network Engineers open firewall ports needed and now it works on the publishing side. Still the same error on the Anon side. I suspect I have missed
something when it comes to configuring the Secure Store to allow access to anonymous connections.
Let me know if you need any more information but that should paint a pretty good picture as to how things are set up.
Thanks for any help on this one. Searches haven't found much that has helped so far.Hi Sennister,
I recommend to verify the things below:
Did this issue occur with all the pages in the anonymous side?
Check if the Claims to Windows Token Service is started.
Change the <identity impersonate="true" /> in the web.config to see if the issue still occurs.
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support -
After sucessfulling installing the SharePoint Foundation 2013, when i try to access the Secure Stored Service Application i get the below error
11/16/2012 18:13:02.84 w3wp.exe (0x1774) 0x15E8 Secure Store Service
Secure Store g0n6 High The trial period for this product has expired or this feature is not supported in this SKU. b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84 w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
General 8nca Medium Application error when access /_admin/sssvc/ManageSSSvcApplication.aspx, Error=The
trial period for this product has expired or Secure Store Shared Service is not supported for this SKU. at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1
operation) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated() at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy
proxy, String& errorMessage) at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView() at Microsoft.Office.SharePoi... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
General 8nca Medium ...nt.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.OnLoad(EventArgs
e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84 w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
Runtime tkau Unexpected Microsoft.Office.Server.ProductExpiredException: The trial period for this product
has expired or Secure Store Shared Service is not supported for this SKU. at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1 operation)
at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated() at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy
proxy, String& errorMessage) at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView() at Microsoft.Office.SharePoint.ClientExtensions.SecureSto... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
Runtime tkau Unexpected ...reAdministration.ManageSSSvcApplication.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84 w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
General ajlz0 High Getting Error Message for Exception System.Web.HttpUnhandledException
(0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Office.Server.ProductExpiredException: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.Execute[T](String operationName, Boolean validateCanary, ExecuteDelegate`1 operation) at Microsoft.Office.SecureStoreService.Server.SecureStoreServiceApplicationProxy.IsMasterSecretKeyPopulated()
at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.SSSAdminHelper.EnsurePrerequisite(SecureStoreServiceApplicationProxy proxy, String& errorMessage) at Microsoft.Office.Sha... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
General ajlz0 High ...rePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.InitializeGridView()
at Microsoft.Office.SharePoint.ClientExtensions.SecureStoreAdministration.ManageSSSvcApplication.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint,
Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.HandleError(Exception e) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequest(HttpContext context)
at System.Web.Htt... b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.84* w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
General ajlz0 High ...pApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) b3b6e19b-7de2-e016-ad32-0fc975829ef0
11/16/2012 18:13:02.86 w3wp.exe (0x1774) 0x15E8 SharePoint Foundation
General aat87 Monitorable b3b6e19b-7de2-e016-ad32-0fc975829ef0
Is it a bug or any issue in configuration?
Raghavendra Shanbhag | Blog: http://moss-solutions.blogspot.com
Please click "Propose As Answer " if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
Disclaimer: This posting is provided "AS IS" with no warranties.Hello
something should be related wuith this service, take a llok at my visual studio output whne I try to deplay and autohosted sharepoint app: (anyone can help)
1>------ Build started: Project: MySharePointAppWeb, Configuration: Debug Any CPU ------
1> MySharePointAppWeb -> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\bin\MySharePointAppWeb.dll
2>------ Build started: Project: MySharePointApp, Configuration: Debug Any CPU ------
2>C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\Web.Debug.config(34,4): warning : No element in the source document matches '/configuration/connectionStrings'
2> Transformed Web.config using C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\Web.Debug.config into obj\Debug\TransformWebConfig\transformed\Web.config.
2> Auto ConnectionString Transformed obj\Debug\TransformWebConfig\transformed\Web.config into obj\Debug\CSAutoParameterize\transformed\Web.config.
2> Copying all files to temporary location below for package/publish:
2> obj\Debug\Package\PackageTmp.
2> Packaging into C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.zip.
2> Adding sitemanifest (sitemanifest).
2> Adding IIS Application (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Creating application (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding virtual path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\en).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\en\Microsoft.IdentityModel.resources.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.IdentityModel.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.IdentityModel.Extensions.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.SharePoint.Client.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\Microsoft.SharePoint.Client.Runtime.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\MySharePointAppWeb.dll).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\bin\MySharePointAppWeb.pdb).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\packages.config).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Pages).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Pages\Default.aspx).
2> Adding directory (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\jquery-1.7.1.js).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\jquery-1.7.1.min.js).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Scripts\_references.js).
2> Adding file (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp\Web.config).
2> Adding ACL's for path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding ACL's for path (C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointAppWeb\obj\Debug\Package\PackageTmp)
2> Adding declared parameter 'IIS Web Application Name'.
2> Package "MySharePointApp.Web.zip" is successfully created as single file at the following location:
2> file:///C:/_works/visual%20studio%202012/Projects/MySharePointApp/MySharePointApp/obj/WebDeploy
2> To get the instructions on how to deploy the web package please visit the following link:
2> http://go.microsoft.com/fwlink/?LinkId=124618
2> Sample script for deploying this package is generated at the following location:
2> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.deploy.cmd
2> For this sample script, you can change the deploy parameters by changing the following file:
2> C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\obj\WebDeploy\MySharePointApp.Web.SetParameters.xml
2> Successfully created package at: C:\_works\visual studio 2012\Projects\MySharePointApp\MySharePointApp\bin\Debug\app.publish\1.0.0.0\MySharePointApp.app
3>------ Deploy started: Project: MySharePointApp, Configuration: Debug Any CPU ------
3>Active Deployment Configuration: Deploy App for SharePoint
3>Uninstall app for SharePoint:
3> Skipping the uninstall step because the app for SharePoint is not installed on the server.
3>Install app for SharePoint:
3> Uploading the app for SharePoint...
3> Creating a trusted root authority in SharePoint for IIS Express.
3> Installation is in progress (00:00:00)
3> Installation is in progress (00:00:01)
3> Installation is in progress (00:00:02)
3> Installation is in progress (00:00:03)
3> Installation is in progress (00:00:05)
3> Installation is in progress (00:00:06)
3> App failed to install, cleaning up...
3> App installation cleanup failed due to errors. Please see the app on the SharePoint site’s “Site Contents” page for details.
3> App installation encountered the following errors:
3>
3> @"Error 1
3> CorrelationId: ceeeafab-3834-40ea-b360-c29d103e2248
3> ErrorDetail: The remote hosting service is not configured.
3> ErrorType: Configuration
3> ErrorTypeName: Configuration
3> ExceptionMessage: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
3> Source: RemoteWebSite
3> SourceName: Remote Web Site Deployment
3>
3> @"Error 2
3> CorrelationId: ceeeafab-3834-40ea-b360-c29d103e2248
3> ErrorDetail: The remote hosting service is not configured.
3> ErrorType: Configuration
3> ErrorTypeName: Configuration
3> ExceptionMessage: The trial period for this product has expired or Secure Store Shared Service is not supported for this SKU.
3> Source: RemoteWebSite
3> SourceName: Remote Web Site Deployment
3>Error occurred in deployment step 'Install app for SharePoint': Failed to install app for SharePoint. Please see the output window for details.
========== Build: 2 succeeded, 0 failed, 0 up-to-date, 0 skipped ==========
========== Deploy: 0 succeeded, 1 failed, 0 skipped ========== -
Secure Store Service Application takes a lot of time and does not create the database
Hi everybody,
I was trying to configure sharepoint performance point and I was following the instruction. After I created the performance point services application I tried to creat the secure store service application. When I do this, the progress window stays open forever
even after 2 hours. If I close the window, I will see that the secure store service and proxy app is created and the application pool also is created in IIS but the database is not and the application service is stopped. even when I want to delete it, it's
the same story and the progress window stays until I close it manually. Nothing has been logged in the event viewer because it doesn't throw any exceptions.
I don't think that I have permission issues on the database server side because I have created the performance point service app and the database is there. I have used the same credentials to crete the secure store.
I have restarted the secure store service and IIS for many times and even the server itself.
I'm wondering if anybody has had this issue because I couldn't find anything on the web.
Thanks,
EdwinAlex, please ignore my previous answer. I found more information in the ULS. At the time that I started creating the service application by power shell these things are logged and they are repeated several times:
it starts with:
11/13/2013 15:19:55.52 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esj6 High
Creating Secure Store Service Application 'Secure Store Service Application'.
c402af0c-5ff6-4995-83b8-3f95210a8b3d
11/13/2013 15:19:55.54 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esj9 Medium
Creating "database object" 'SP_SecureStore' for application. At this time database is not created.
c402af0c-5ff6-4995-83b8-3f95210a8b3d
11/13/2013 15:19:55.54 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esk0 Medium
Saving "database object" 'SP_SecureStore' in the config db.
c402af0c-5ff6-4995-83b8-3f95210a8b3d
11/13/2013 15:19:55.83 w3wp.exe (0x0944)
0x0DB4
Secure Store Service
Secure Store
d4gx Verbose
BackgroundTasks instance accesed.
11/13/2013 15:19:55.83 SPUCWorkerProcessProxy.exe (0x13A0)
0x02B0
Secure Store Service
Secure Store
d4gx Verbose
BackgroundTasks instance accesed.
11/13/2013 15:19:55.83 PowerShell.exe (0x1698)
0x1740
Secure Store Service
Secure Store
f7wk Verbose
StartTracker called for secure store ''
11/13/2013 15:19:55.83 PowerShell.exe (0x1698)
0x1740
Secure Store Service
Secure Store
f7wl Verbose
Tracker not started because call not made from Service Host.
11/13/2013 15:19:55.83 WebAnalyticsService.exe (0x0A6C)
0x1B88 Secure Store Service
Secure Store
f7wk Verbose
StartTracker called for secure store ''
Finally it says:
11/13/2013 15:19:55.90 PowerShell.exe (0x1698)
0x170C
Secure Store Service
Secure Store
esk9 High
Secure Store Service Application 'Secure Store Service Application' created.
c402af0c-5ff6-4995-83b8-3f95210a8b3d -
RDBMS Security Store supporting multiple domains
Can one instance of the RDBMS Security Store be utilized to support multiple WLS 10.3.2 domains?
I have several 10.3.2 domains, all of which have clusters and role requirements? The documentation 'suggests' one Store per domain, but all of the tables in the schema contain DOMN (domain) and REALMN (realm) columns that would seem to indicate domain independence. It would be nice to be able to manage one Store schema that supports several Domains.Hi,
The document which you are referring is for WLS 10.0 and RDBMS security is introduced from WLS 10.3.0 onwards.
The reason why RDBMS security store should not be stored between two domains is RDBMS security store is used by authorization, role mapping, credential mapping, and certificate registry providers.
Once the RDBMS security store is configured in a domain, an instance of any of the preceding security providers that has been created in the security realm automatically uses only the RDBMS security store as a datastore, and not the embedded LDAP server.
It is just the replacement for Embedded LDAP.
Thanks & Regards,
Murali.
============ -
Get Current UserName in Infopath always returns the secure store service credential name
I followed the 3 page tutorial here to get the current Display Name in an infopath textbox.https://spvee.wordpress.com/2013/04/10/auto-populate-user-information-in-infopath-with-claims-based-authentication-part-1-of-3/
After several tries I narrowed down the problem to something very specific.
It always shows the Display Name of the user used in the Credentials in the secure store service application. It doesnt use the current user.
I do have access to the farm, but I didnt not install it, so am not aware if something is wrong on IIS/App Pools or service applications.
Any idea??
Follow me on Twitter
levalencia BlogI followed the 3 page tutorial here to get the current Display Name in an infopath textbox.https://spvee.wordpress.com/2013/04/10/auto-populate-user-information-in-infopath-with-claims-based-authentication-part-1-of-3/
After several tries I narrowed down the problem to something very specific.
It always shows the Display Name of the user used in the Credentials in the secure store service application. It doesnt use the current user.
I do have access to the farm, but I didnt not install it, so am not aware if something is wrong on IIS/App Pools or service applications.
Any idea??
Follow me on Twitter
levalencia Blog -
Configuring Database Security Store is failing
Guys,
I am trying to configure Database Security Store while installing 11gR2 (OIM, OAM, SOA) and wlst.sh script is failing. Here is the format I am giving.
$MW_HOME/oracle_common/common/bin/wlst.sh $ORACLE_HOME/common/tools/configureSecurityStore.py -d $IAM_DOMAIN_LOCATION -m create -c IAM -p $ORA_PASS
Here is the error message i am getting.
Problem invoking WLST - Traceback (innermost last):
File "/apps/Oracle/Middleware/Oracle_IDM1/common/tools/configureSecurityStore.py ", line 15, in ?
ImportError: no module named security
Please let me know how to resolve this issue.
PS: I created a new domain with 7002 for OIM, OAM & SOA as 7001 is being used by OID domain. And trying to run the above command with 7002 domain name and getting this error.This is a bug.
Run a search for wlst.sh in your environment and call the wlst.sh from oracle_common/common/bin not from wl_server/common/bin.
You can look for this (Doc ID 1493576.1) in Oracle support.
Thanks,
Ram -
Configtool Secure Store JDBC password - Error while connecting to DB
Hi All
I was following the note 701654 which asked to update the config tool secure store pssword. I changed the JDBC password too instead admin password alone. Now the problem is the config tool is not able to connect to the database and this lead to the jcontrol.exe to be stopped. We tried to give back the DB password we remembered unfortunately none of them worked. Please guide me to get around this.
Should I need to change the DB password if so please let me know the procedure and the places I need to do the change.
Thanks, RajThe problem was fixed. I changed the DB password directly in the SQL server and updated it in the secure store and it worked.
Note 997510 gave a good idea on the error and the solutions.
Thanks, Raj -
Secure Store and Excel Services
Greetings,
I have an Excel workbook that connects to an external SQL database. A simple stored procedure is executed and the data displayed in a sheet. This is a simple connection and works without issue when I open the workbook in Excel itself.
I now want to display this workbook in Excel Services, so I performed the following:
I created a Secure Store Service (no issues) and added a new target application.
In the target application, I selected Individual as the target application type.
On the next page, I used the correct credentials.
Saved the new target application entry in secure store services.
Then I updated the Excel workbook data connection to use the Target Application ID I just created in Secure Store Service.
When I refresh the data, while the workbook is open in Excel, all works without issue.
However, when I open the workbook in Excel Services, the data refresh fails; External Data Refresh Failed - An error occurred while accessing the application id from Secure Store Service.
Can anyone tell me what the conditions are that would cause this?
Thank you!Hi Bob,
Whats up, how are you? Do you want to send me an email or give me a call, Ill send you a copy of our Book Business Intelligence in SharePoint 2013 and walk through the Excel Services Issue..
Take the Application ID and add it to the Excel Services Service Application, Global Settings, Application ID.
While still in Global Settings Set the File Access Method to Process Account
Please make sure the Library you are using for the Excel Workbook, and the Data Connection Library are both in a trusted locations.
In the ODC File make sure you have set Data Connection Authentication to None and specify in Excel to Always use this Office Data Connector
Cheers,
-Ivan -
SAML authentication Secure store service target ID Project server integration with excel service
I installed and configured share Point 2013 Project server 2013, and Created web application Trusted Identity Provider (SAML 2.0) ,it is working as we expected means
..end user are able to access application(User Login through email and alies(account NAME) )
My problem here CA is working NTLM authentication ,Web application is working SAML
while creating service application(LIKE SSSA Excel Performance ... ( it automatically take NTLM) I CREATED TARGET ID in secure store service application ,I chooser "GROUPS" under SSSA,and
we added members "group to account and email id.
I configure Excel service application and i SSSA Target ID in this excel service application also added trusted location for PWA site
while opening excel sheet under Project server (An error occurred while accessing application id ProjectServerApplication from Secure
Store Service. The following connections failed to refresh)
I tried target ID choose option " Group Ticket"
Is it CA required for SAML authentication? .. (extend web application
How Service application like SSSA will work for SAML authentication?Hi SridharMandipudi,
as i know, usually when the error appear, you need to check the member.
The domain group that was specified the Secure Store Service ID ProjectServerApplication did not have any members in the group.
and please also have a try in a testing secure store service application:
Created new secure store service application with new target application ID. and added this ID in excel service application -----global settings----Application ID.
went to Central admin---manage web application---selected web application ---click on Service Connection---associated newly created secure store service application.
edited data connection string of excel file.
went to site and tried refresh that excel file and able to refresh the file.
Regards,
Aries
Microsoft Online Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Hi,
I follow up the book "Professional SharePoint 2013 Administration" to build the SharePoint 2013 BI include Excel Services. and created the Secure Store services to save the user SP_Install for member.
For Now, I can upload the worksheet and open it in browser, but when I tried to refresh it, the SP 2013 show error "Error occurred while accessing application id Excel services application unattended service account from secure store service".
does anybody can help ? and do I need to turn on C2WTS ?
Thanks
James LiangHi James,
Excel Services can be used with Secure Store in three primary scenarios:
Unattended Service Account
Embedded Connections
External Data Connections
If you haven't configure unattended service account yet, you could refer to the article below:
http://technet.microsoft.com/en-us/library/hh525344(v=office.15).aspx
More information:
http://technet.microsoft.com/en-us/library/ff191191(v=office.15).aspx
Regards,
Rebecca Tu
TechNet Community Support -
Encryption is not possible in this installation! - in "Create Secure Store"
Hi,
We are in the middle of upgrade and While doing UNICODE conversion of SRM5 system, During IMPORT, one of the phase is "Create Secure Store". UNICODE import gives ERROR in "Create Secure Store" phase.
Below given is ERROR Detail:
[root@fsp67001] /unicode/import_uc/sapinst_instdir/SRM05/LM/COPY/ORA/SYSTEM/CENTRAL/AS>
>cat SecureStoreCreate.log
SAP Secure Store in the File System - Copyright (c) 2003 SAP AG
Usage:
SecStoreFS status <standard>
SecStoreFS exists <standard>
SecStoreFS create <standard> -noenc
SecStoreFS create <standard> -enc -p "<key phrase>" [-nostore]
SecStoreFS insert <standard> <key> <value>
SecStoreFS encrypt <standard> -p "<key phrase>" [-nostore]
SecStoreFS updatep <standard> -p "<key phrase>" [-nostore]
where <standard> is [-s <SID>] [-f <data filename> -k <key filename>]
Encryption is not possible in this installation!
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Log Details:
When you look at command which gets executed in background(Which is
failing) is given below.
/usr/java14_64/bin/java -
classpath /unicode/import_uc/sapinst_instdir/SRM05/LM/COPY/ORA/SYSTEM/CENTRAL/AS/install/sharedlib/launcher.jar -Xmx256m -Xj9
com.sap.engine.offline.OfflineToolStart
com.sap.security.core.server.secstorefs.SecStoreFS /unicode/import_uc/sapinst_instdir/SRM05/LM/COPY/ORA/SYSTEM/CENTRAL/AS/install/lib/iaik_jce.jar:/unicode/import_uc/sapinst_instdir/SRM05/LM/COPY/ORA/SYSTEM/CENTRAL/AS/install/sharedlib/exception.jar:/unicode/import_uc/sapinst_instdir/SRM05/LM/COPY/ORA/SYSTEM/CENTRAL/AS/install/sharedlib/logging.jar:/unicode/import_uc/sapinst_instdir/SRM05/LM/COPY/ORA/SYSTEM/CENTRAL/AS/install/sharedlib/tc_sec_secstorefs.jar create -s RSP -
f /sapmnt/RSP/global/security/data/SecStore.properties -
k /sapmnt/RSP/global/security/data/SecStore.key -enc -p XXXXXX
Request If anybody in the forum has faced similar problem, pls respond back.
VijayHi
<b>Please go through the SAP OSS Notes, which will help -></b>
Note 501710 - Error when accessing the "secure storage"
Note 750779 - Safety and Security of User Mapping Data
Note 1071472 - FileSystem SecureStore connection issues
Note 914791 - SQL Command console does not work with automatic config
Related Notes
Note 520039 - Analysis report for "secure storage"
Note 516835 - Error SECSTORE023 with secure storage
Note 502422 - Long texts for error messages SECSTORE021 to SECSTORE031
Note 501486 - Work process termination when using the "secure storage"
Do let me know.
Regards
- Atul
Maybe you are looking for
-
Since 10.0.9 FCPX crashes at "Import Media"
Hi, it never happend before, the problem has shown up after i updated fcpx. I tried to import my footage, it´s from a panasonic hmc 151. 1080/50i, AVCHD. I never had a problem before. It was always the some work around. Open FCPX, insert SD-Card into
-
How do i fix [The iPod "iPod" could not be restored. an unknown error occured -1]
I've been looking through all the discussions regarding similar problems (with different error codes), but all i know is that I cannot restore, I cannot turn on/off my iPod, and I cannot find a discussion to fix this issue. Any insight would be grea
-
Can I create a form that works on android devices?
I am trying to create an equipment inspection form that uses radio buttons and drop-downs that I can email to customers, download to a server and add attachments such as photos. I would have an employee inspecting between 1 and 50 peices of equipmen
-
I am unable to update my itouch software
When I am trying to update my Itouch software, I am getting an error message as " There was a problem downloading the software for the ipod . Network connection timed out:. " Need someones help in fixing this.
-
MGCP and H.323 gateways not working together
We have a 3640 in Mexico defined to our Call Manager here in Atlanta as a H.323 gateway. Also in the same Call Manager is a T1 PRI defined to our PBX as a MGCP gateway. When people in Mexico call phones connected to our PBX we get one way conversatio