Hardware key and web authentication

is there any way to log on a web site using hardware key? any ideas?

Hi Wing,
Got no documentation explicit about this, only personal experience. You can look at note 94998, and perhaps this PDF: https://websmp106.sap-ag.de/~sapidb/011000358700005997252005
Best Regards,
JC Llanes.

Similar Messages

How to get Install number, system number, Hardware key and Application

Hi Experts,
I want to fetch the Install number, system number, Hardware key and Application of sap b1. these values are shown in about menu of SAP B1. where these values are stored like in registry or server?
Please help me out.
Thanking you
vishwajit kumar

Hi
Try this
http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/508623e3-425c-2910-38be-cbe56e65930c
Please check the samples(VS2005) this will provide you all the informations required.
Regards
Arun

BSP Application in Portal and WebAS Authentication popup

Hello,
we have a very well running SAP Portal SP14 and a BSP
application running WebAS 6.20.
SSO between Portal and WebAS works perfect. Profiles are maintained and verify.der is imported.
But:
From time to time we have users which open logon to
portal and execute the bsp application, authentication is successfull, but after a certain period of time or any unknown incident these users get a popup from webas and they are asked(forced) to enter their username and password. It seems to be that their session expired and they have to re-authenticate. But they are still logged on to Portal.
Can we prevent this popup from beeing shown to the user? Problem is, that they enter any password and they et locked
Does anybody have the same problem?
Thanks
Maik

Hello Maik,
i am newbee in SAP.I have little proble with SSO.I am using Ep7.0
Though i have imported the verify.der file and installed the certificate still SSO
doesn't seem to be working.I am getting error as:
"not authorized for executing BSP application".
Do i need to give any particular role to users or is any other setting required?
regards!

Related to HARDWARE KEY and OS

sir,
i am using sap 2005b with 36 patch.
in my server i am using 2003 server with standard eddition but i want to install 2003 server with enterprice eddition so if i am changing this operating system then my hardware key will going to change or not because this hardware key with 25 user license and that are i am going to use.
so please help me
regards,
sandip adhav

Hi,
There's a SAP note (793649) on the things that change the hardware key. Here's the details from the note:
The following actions will change the Hardware Key:
1. Formatting the machine and reinstalling Windows.
2. When changing the computer name.
3. When changing the domain (it will not change back when returning to the previous domain).
4. On Linux - If you change the network card.
The following actions will NOT change the Hardware Key:
1. When adding a login user for the computer.
2. When changing date/time on the computer.
3. When changing the IP.
4. When adding a memory or hard drive to the computer.
Hope this helps. Give points if helpful.
Regards,
Vasu Natari.

Related to hardware key and license

my presnt server name is rackserver3 and i want to change name "rackserver3" to "sapserver" but when i am changing this hardware key key also change and sap can't get chance to login so what is solution for that
regards,
sandip adhav

Hi
The Hardware Key of the B1 Server changes when the Server Name or IP or other related settings change.
The license file has to be downloaded newly for the new Harware Key from the SAP Portal .
Contact your Implementation Partner and ask them to generate a new License File with new Hardware Key of the Server.

Hardware key and license key

Hi All,
I have a question about the HW key and license key for SAP on Solaris.
As currently, we would like to replace the existing hard-disk with a larger one.
And i would like to know that, can we using the same license generated before, or we need to generate a new one?
Regards,
Cheung

Hi Wing,
Got no documentation explicit about this, only personal experience. You can look at note 94998, and perhaps this PDF: https://websmp106.sap-ag.de/~sapidb/011000358700005997252005
Best Regards,
JC Llanes.

Self Signed Certificates vs. GnuPG key and Web of Trust

I'm not totally sure where to ask this question, though this is the best place I can think of.
Wanting to be able to digitally sign my emails, and I can use a self signed certificate, or get one from CAcert.org (which, as far as I can tell, is also a self signature)...
Whereas with GnuPG, the keys are certified based on the web of trust.
Is there any kind of web of trust for the certificates?
Russell

Your private key is stored in the keystore (.pfx or .p12)
file that adt created for you when you created your self-sign
certificate. The file itself is protected by the password you
entered. Don't ever give this file to anyone, and under no
circumstances should you give the password to anyone.
The public key is also stored in the same file. You can
export the public key, embedded in a certificate, from the keystore
file, although you likely won't have any need to do that.
If the resulting .air file is ever modified then the
application won't install. There's no need for users to check the
hash or anything like that to validate the file; it's all done
automatically as part of the installation process.
Hope that helps,
Oliver Goldman | Adobe AIR Engineering

WLC 5508, 7.4.100.0, dot1x and web auth

Release notes for 7.4.100.0 states;
"Security during client authentication is enhanced by applying both 802.1X and Web Authentication for a WLAN."
Anybody know anything about this and how-to's?
Eirik

I know what it is. :-)
Want to test to use web auth after dot1x. Do not trust dot1x alone anymore, now that it is so easy to steal sertificates from laptops...
Would like to force users (after eap-tls with certificate) to logon using their AD cred.
Eirik
Sent from Cisco Technical Support iPad App

Change in hardware key on new installation with same SID

Dear Experts,
Background:
We installed SAP Netweaver 7.3 EHP1 on Microsoft Windows Server 2008 and applied SAP License on it.
So there was a specific SID, Hardware key and Installation No to our installation.
After few months our Server machine got crashed and we formatted it.
Problem:
Now we want to install SAP Netweaver 7.3 EHP1 again on same Server machine.
Here question is:
1. Will the Hardware Key be same if I install SAP Netweaver 7.3 EHP1 with the same SID as it was before ?
Note: We want to apply the same license that was there before the crash. But we can apply same license if and only if after installing with same SID as before, system generates the same Hardware Key as before Crash !!
Other Information:
Information that we got from SAP Note (94998 - Requesting license keys and deleting systems ) that :
" For the following data changes, you require a new license key:
Customer hardware key - database - installation number - system ID.
Thanks in advance for your apt responses.
Muddassar Khan

Hi Muddassar,
With OS reinstallation , the HW Key will change.
I suggest you apply for a new License with the new Hardware Key.
Was this a Test System??
You said after few Months , the system Crashed.
Have you taken a Backup (Windows System State) ??
Regards,
Ashish .A. Poojary

Error installing license - Hardware Key Empty

Hello gurus,
We have our SAP ECC 6 installed in one Server running AIX. It´s working good.
Now, we have installed a cluster service. If the First Server stops, the cluster service (IBM HACMP) move all filesystems to Second server. The cluster moves also users, IP address and hostname. After move all resources, then the service starts ECC in another physical server.
This process is working fine. But when the SAP ECC starts on the second server, I cannot logon in system because the license key is not valid. I can logon only with SAP*.
So, when I call SLICENSE to get all information needed to get another license, the field Hardware Key is empty.
I´ve tried too by operating system (saplicense -get). I have now the hardware key and the new license file. This file was installed, but SAP system is not working yet. For information, the license appears as valid, but the field is empty yet and the system doesn´t work.
Anybody have an idea to solve this problem?
Thanks,
Carlos

Hi Carlos,
Please check the OSS notes: 181543 and 538081.
Regards.
Ruchit.

License & Hardware-Key for CE1

Hi,
where can I see how long the license is valid of the current installation ( CE711SP1_SDN-Preview CE1 ).
And secodly I would like to know how to obtain Hardware-Key and getting installed.
Regards
Alexander
Edited by: AlexanderZiegler on Oct 18, 2009 5:08 PM

I have got it.
Once the CE server is up and running, launch your browser and go to http://localhost:50100/nwa to start SAP NetWeaver Administrator. Log on with username Administrator and the master password you defined during the installation procedure.
Download and install a license key
The first step is to retrieve your systemu2019s hardware key from SAP NetWeaver Administrator. Go to Configuration Management Infrastructure > Licenses. Copy your u201CActive Hardware Keyu201D into the clipboard.
Go to http://www.sap.com/minisap fill out the form, and paste your hardware key from the clipboard. Submit the form.
Edited by: AlexanderZiegler on Oct 19, 2009 8:19 AM

Active Hardware Key field is empty

Dear All,
In my Quality server, in t.code SLICENSE , the active hardware key field is blank.No hardware key information display. When i apply new license at that time, successfully completion message came then also "Active Hardware Key" and "License Expires On" fields are blank. and i am not able to login into server.
Regards,
Nisit

Hi
Just got through this which will be helpfull
http://help.sap.com/saphelp_nw04/helpdata/EN/ae/6a0f69e96e11d18d980000e816c2ff/content.htm
Also ,please run RZ10 and then generate the profile for active servers ,make sure that default profile is active in the system.
Then run slicense -get on command prompt if windows .
What is the error message while you are loggin in. Paste the log here..
Regards
Bhaskar
Edited by: bhaskar1818 on Nov 7, 2008 4:55 PM
Edited by: bhaskar1818 on Nov 7, 2008 4:58 PM

EP6 SP2 hardware key / installation number

Hi all,
unfortunately the license of an EP6 SP2 has expired and I need to find out what are the hardware key and the installation number of this portal in order to renew the license.
As the admin pwd is lost and the sap* user/pwd combination do not work in order to log on to the portal and retrieve the system information via the system admin tab I am wondering if I can find both (hardware key and inst. no.) in the database or on the filesystem. If yes, where??
Any input on this would be greatly appreciated :)!
Thanks alot in advance!
BR Helga

Hi Helga,
One way to enable SAP* is
1. Copy your current sapum.properties.bak to sapum.properties (/usr/sap/XXX/j2ee/cluster/ume)
[ This would only work if this is the original sapum.properties when you initially installed.]
If you copy over the properties from the direct editing
(i.e sapum.properties is in sync with the properties in
the database )tab then set the following properties in the sapum.properties is set.
ume.superadmin.activated=true
2. Restart the server.
Side Effect: You have to redo the UM configuration
Now you can logon as SAP* and get the system information.
Alternative 1:( This may or may not work. I don't have access to the environment or documentation to check out.)
Through Visual Administrator see server license information.
To Access the Admin documentation by the following URL;
http://your portal server:50000/index.html
Hope this helps
Regards
-Venkat Malempati
Message was edited by: Venkat Malempati
Message was edited by: Venkat Malempati

Licence file for new hardware key

Hi everybody.
I plan to migrate mi SBO server to a new machine. In order to test the change process a realise it in a virtual machine. During the install process I have requested a new licence file an finish correctly the new setup and restore the DB without trouble. The problem is that I have received a licence file that expire in 14 days. So when I will make the real new setup in my new machine How could I get a permanent valid file for the new hardware key and disable the orl licence file ?

Go to this link
https://websmp101.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000706510&%20_SCENARIO=01100035870000000183&_ADDINC=011000358700001192682007E&_OBJECT=011000358700001187372008E
click on 'Request licence key'

Publish RD Gateway and Web Access with One-Time Password (OTP) / Two-factor Authentication WITHOUT ISA/TMG server

Hi everybody,
I've been struggeling with this problem for a few weeks now and can't find a way to solve it.
We have an RD farm (Server 2012) which consists of two Remote Desktop Servers with Connection Broker and Web Access.
I've recently published a new server, containing RD Gateway and Web Access in our perimeter network.
Now we've got restrictions that OTP/2FA must be used for the external deployment and we've decided to go for a solution from Gemalto.
The "program" is called IDConfim and the server is called SA Server (Strong Authentication).
Also it's important that NO ISA/TMG server is supposed to be used, the OTP/2FA is supposed to work seamless with the Web Access/Gateway.
After hours discuss we came to a point were their NPS agent setup would be the only way to accomplish our goals.
The setup is supposed to be like this:
LAN:
1 DC (2008 R2)
RD Farm (2012)
1 SA Server (2012)
DMZ:
RD Gateway/Web Access (2012)
Were Gateway and Web Access should forward the authentications with NPS to the NPS agent on the SA server.
When you print your AD account to authenticate you add the 6 digits of OTP which you recieve from you mobile app.
Initially this seems to work, the Gateway forwards the request to the remote NPS server, BUT only if you write the correct AD password
(without the OTP extension).
If you write the correct AD password the authentication is forwarded to out SA Servern and it's beeing rejeced because the password doesn't
contain the correct OTP extension.
The problem comes here.
When you write you AD password along with the OTP extension you get a Windows Security error in the eventlog (On thw Gateway server) like this:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: user
Account Domain: domain
Failure Information:
Failure Reason: Unknown username or password.
Status: 0xc000006d
Sub Status: 0x0
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: server
Source Network Address: 192.168.x.x
Source Port: 63003
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
What i can see it's a NTLM error, but hey?! aren't we supposed to forward all authentication handeling to the remote NPS server?
The problem is that no matter what i try the above problem stays there.
Is it not possible to just forward ALL authentication handeling to a remote server?
The only solution I've found to get it working someday in the future is this:
"Remote Desktop Pluggable Authentication and Authorization", which is supposed to be introduced in 2012 R2.
Also this link describes it:
http://archive.msdn.microsoft.com/Release/ProjectReleases.aspx?ProjectName=rdsdev&ReleaseId=3745
Please, bring me some answers before my head explodes! :)
PS, long question = maybe some errors, ask me if something is unclear.

Hi,
Based on our experience, if the NTLM error occurs, please check the password.
Regards,
Mike
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hardware key and web authentication

Similar Messages

Maybe you are looking for