NDES for MDM and BYOD

Hi,
I have to migrate windows 2003 CA setup to win 2012 set up. I have NDES installed on one of the Sub CA which will be used for Airwatch MDM integration. I have received new request for using NDES for BYOD configuration on CISCo ISE, pls refer to below link:
http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/116068-configure-product-00.html#anc5
This link shows several changes from MDM integration that challenge password need to be disabled, it need server authentication to be enabled in EKU. Also, it will have a separate template which requires full access to service account and that template will
be configured in registry settings.
Please help in identifying whether both of them can be configured simultaneously using same NDES server.
Thanks
Neha Garg

Hi Neha,
Please help in identifying whether both of them can be configured simultaneously using same NDES server.
As the way I see it, disable SCEP Enrollment Challenge Password requirement needs to be done on NDES server, and settings regarding Certificate Template needs to be configured on Certification Authority. Both changes can only be configured on the same server
when Certification Authority and NDES services are collocated on the same server.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

Business Package for MDM and ABAP

Hi,
I understand that Business Packages are provided for standard MDM repositories. For Custom MDM Repositories , iView Wizards are provided. This iView Wizard is leveraged by Java Teams. Is there a similar concept for ABAP teams ?
Thanks for your assistance.
Siva K

Hi Siva,
In MDM 5.5 yes there are similar APIs for ABAP.
This following link leads to a very nicely done introduction to the ABAP APIs https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/media/uuid/00c49ffb-e5e5-2910-73ba-c85af1da5b0a
There is also some more specific requirment information in Chapter 3 of this doucment.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/media/uuid/00c49ffb-e5e5-2910-73ba-c85af1da5b0a
Hope this helps point you in the right direction. JCN

How do I initialize the ItemDetails screen when first presented for MDM WD

Hello everyone!
Iu2019m new to the world of netweaver ce and webdynpro for MDM and need a little help with what Iu2019m sure is a basic code problem for most of you. Please help if you can! I am a developer for MDM 7.1 sp06. We are now experimenting with Enterprise Portal using NetWeaver CE 7.2. I have create and deployed an application using NetWeaver Design Studio 7.2. I have also created some screens in the WD Configuration Manager for MDM.
The 2 interface views I have configured are u201CSEARCHu201D and u201CITEMDETAILSu201D. u201CITEMDETAILSu201D was limited to ADD/CREATE new items in MDM using the WD Configuration Manager options.
When I created the WD application in NWDS I also created a link with buttons between the 2 screens/views. When I then deploy my application and I press the button to go from my u201CSEARCHu201D screen/view to the u201CITEMDETAILSu201D ADD screen/view, All I see is a u201CCREATEu201D button and no other fields.
I expected to see every field without values in them just as I do when I u201CPREVIEWu201D the screen in the WD Configuration Manager . If I continue and press the u201CCREATEu201D button on the the u201CITEMDETAILSu201D view, The screen the then presented as I expected with all fields showing but without any values populated in them. I donu2019t want the user to have to press the create button the first time they are presented with this screen.
Can anyone tell me or give me a sample of code that will initialize the itemDetails view just as it is seen when previewed in the WD Configuration Manager?
Thank you
Steve

Thanks for the reply but I dont have any problem calling the ItemDetailsInterface. My problem is when I call the ItemDetailsInterface the screen that is presented has no data other than the buttons. I would like the ItemDetailsinterface to display exactly as it does when I preview the screen in WD configuration manager.
What I expect to see is... a screen showing all the buttons plus all the ItemDetails Fields but with the fields initilized as null. this would then allow my user to input the fields needed to create a new record. As it works now... when the user is sent to the ItemDetails view... all they see is the "Cancel" and "Create" button. They have to press the "Create" button 1 time inorder to present the screen a second time but this time witlh all fields presented.
I believe I have to set the "LeadSelection" or the "internalID" to -1 the first time thru the ItemDetails "DoInit" section. So far, no luck.

Reagrding MDM and Star Schema

hai
Can any one send the basic theory information for MDM and BW star Schema to [email protected] please
I will assign the points please
thnks
mohammed

Hi Mohammed,
You can read through this document:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/6ce7b0a4-0b01-0010-52ac-a6e813c35a84
Hope this helps...

XI Technical and Business System Definition For MDM 2.0

Hi,
We're trying to define the XI technical and business system definitions for our MDM 2.0 installation to work with SRM 5.0 and PI 7.0.
In the documentation we have we can't find reference to what type of a technical and business system to define. Should they be abap/java/standalone/3rd party?
Does anyone have any install scripts of what they did?
Regards,
Jerry Martinek

You can set it as third party and it will work fine. Because MDM isn't built on the wed application server like the majority of the netweaver apps, it's basically treated like a third party system as far as integration is concerned. Hence you send and receive XML documents to PI and convert them into IDocs to send to R/3
Check the beginning of this document on creating the business and technical systems for MDM
/people/harrison.holland5/blog/2006/12/20/xi-configuration-for-mdm-integration--sample-scenario

Cisco ISE User Authentication Certificates for Wired and Wirless Users (BYOD)

Can any one tell me from where we can purchase User Authentication Certificates for Wired and Wireless Users (BYOD) for Cisco ISE. Also Confirm what certificates we required for the purpose.
Please suggest the Website form where we can purchase and ipmort in Cisco ISE certificate Section.
Thanks.

Dear Mohana,
Thanks for your reply, Can you please confirm me in regards EAP-TLS certificate, which authorities you recomend if i go to Go dadday or very Sign to buy it and then import in ISE.
Looking forward for your reply.
Regards,
Muhammad Imran Shaikh
Resident Engineer, IT Network Section - PPL
Mobile : 0092-312-288-1010
LinkedIn : pk.linkedin.com/pub/muhammad-imran-shaikh/10/471/b47/

Allowing Airwatch MDM access to the Captive-Portal guest users in pre-auth role for android and BB?

Requirement:
How to allow Airwatch MDM access to the Captive-Portal guest users in pre-authentication role for Android and Blackberry devices?
What is Airwatch MDM?
Airwatch MDM is Mobile Device Management. The Airwatch is an enterprise which helps to manage and secure data traveling through the mobile devices like Laptops, Tablets, Android, iPhones, iPads etc.
Solution:
Why we need to allow access to Airwatch MDM?
The network administrator can force the guest users to register to Airwatch MDM before they get authenticated and access the internet. So that the network administrator could manage the guest devices through Airwatch Management tool. This can be achieved by CPPM server. To download the Airwatch MDM app and register with the Airwatch MDM server certain domains should be permitted in the captive portal pre-authentication role. This KB provides the configuration steps to allow the guest users to download the Airwatch MDM app and register with the Airwatch MDM server.
Configuration:
Below is the configuration
Configuration steps:
1. Create the following netdestinations
netdestination Airwatch
name *.awagent.com
name *.awmdm.com
name air-watch.com
netdestination Google-Play
name android.clients.google.com
name .ggpht.com
name gstatic.com
name accounts.google.com
name clients1.google.com
name clients2.google.com
name clients3.google.com
name clients4.google.com
name i.ytimg.com
name google-analytics.com
name .1e100.net
name android.l.google.com
name mtalk.google.com
name clients.l.google.com
name googleapis.com
name gvt1.com
netdestination BlackBerry
name *.blackberry.com
2. Now define the rules in the session acl and map it to the pre-authentication Role of the captive portal.
ip access-list session Airwatch_Access
any   alias Airwatch svc-http permit
any   alias Airwatch svc-https permit
ip access-list session Google-Play-Store
               any   alias Google-Play any permit
ip access-list session BlackBerry-Access
               any   alias BlackBerry any permit
3. Now map the session ACLs to captive-portal pre-authentication Role as follows
user-role Guest-Pre-Auth-Role
access-list session Airwatch_Access
access-list session Google-Play-Store
access-list session BlackBerry-Access
access-list session logon-control
access-list session captiveportal
4. Now whitelist the list of domain names in the Captive Portal profle
aaa authentication captive-portal Airwatch-Captive-Portal-Profile
white-list Airwatch
white-list Google-Play                                                                                ------------>Netdestinations where you defined the Domains.
white-list BlackBerry
Verification
Now the user will be placed under the "Guest-Pre-Auth-Role" before the authentication. The user can now go the Google Play-Store or BlackBerry Appworld to download the Airwatch MDM and register to Airwatch Management Server.

Thanks so much getting these names listed out. I have been working on this very issue for a few weeks and was basing my firewall rules on IP's. It was not going well. Now access is working and testing can commence!  Thanks,Chris

Read data from MDM For Lookup and Flat table using MDM ABAP API

Hi,
I have requriment to read data from MDM from FLAT and Lookup table using MDM ABAP API. My design is like this ,
I have one ITEMS (Main table in MDM) and inside that i have one Lookup flat table ITEM_TYPE , my requriment is to read Item number and its related Item type.
From ABAP.
Please help if any body has any idea.
Regards,
Shyam

HI Guys,
I found my solution by myself. Below is the solution , hope this will help others:-
Retrieve data from MDM using MDM ABAP API.
Step- 1. Create structure in SAP with the same name as that of MDM field code for MDM Main table.
Step-2. Create another structure in SAP having all lookup fields of MDM , fieldname in ECC must be same as that of MDM field
code.
Step-3.Create structure in SAP for individual lookup field(Single Field only)   with the same name as MDM Field code.
Step-4.
DATA: IT_QUERY            TYPE STANDARD TABLE OF MDM_QUERY, "MDM_QUERY_TABLE,
      WA_QUERY            TYPE MDM_QUERY,
      WA_CDT_TEXT         TYPE MDM_CDT_TEXT,
      IT_RESULT_SET_KEY   TYPE MDM_SEARCH_RESULT_TABLE,
      WA_RESULT_SET_KEY   TYPE MDM_SEARCH_RESULT,
      WA_STRING           TYPE STRING.
DATA:<Internal table> TYPE STANDARD TABLE OF <SAP Str Having all LOOKup Fields>
DATA: :<Internal table>TYPE STANDARD TABLE OF <SAP Str one LOOKup field>,
     <Workarea> LIKE LINE OF :<Internal table>.
*PASS LOGICAL OBJECT NAME.
V_LOG_OBJECT_NAME = 'Logical object name defined in Customization'.
Define logon language, country & region for server
WA_LANGUAGE-LANGUAGE = 'eng'.
WA_LANGUAGE-COUNTRY = 'US'.
WA_LANGUAGE-REGION = 'USA'.
TRY.
    CREATE OBJECT LR_API
      EXPORTING
        IV_LOG_OBJECT_NAME = V_LOG_OBJECT_NAME.
ENDTRY.
CONNECT to repository. Apply particular logon language info
CALL METHOD LR_API->MO_ACCESSOR->CONNECT
EXPORTING
    IS_REPOSITORY_LANGUAGE = WA_LANGUAGE.
*NOW PASS ITEM NO AND GET KEY FROM MDM.
CLEAR WA_QUERY.
WA_QUERY-PARAMETER_CODE = <MDM FIELD CODE>. "Field code
WA_QUERY-OPERATOR        = 'EQ'. "Contains
WA_QUERY-DIMENSION_TYPE = 1. "Field search
WA_QUERY-CONSTRAINT_TYPE = 8. "Text search
WA_STRING                = <Field Value>.
GET REFERENCE OF WA_STRING INTO WA_QUERY-VALUE_LOW.
APPEND WA_QUERY TO IT_QUERY.
CLEAR WA_QUERY.
*PASS ITEM NUMBER AND GET RELATED KEY FROM MDM.
TRY.
    CALL METHOD LR_API->MO_CORE_SERVICE->QUERY
      EXPORTING
        IV_OBJECT_TYPE_CODE = <MDM Main Table>
        IT_QUERY            = IT_QUERY
      IMPORTING
        ET_RESULT_SET       = IT_RESULT_SET_KEY.
CATCH CX_MDM_COMMUNICATION_FAILURE .
CATCH CX_MDM_KERNEL .
CATCH CX_MDM_NOT_SUPPORTED .
CATCH CX_MDM_USAGE_ERROR .
CATCH CX_MDM_PROVIDER .
CATCH CX_MDM_SERVER_RC_CODE .
ENDTRY.
Pass record id into keys.
LOOP AT IT_RESULT_SET_KEY INTO WA_RESULT_SET_KEY.
WA_KEYS = WA_RESULT_SET_KEY-RECORD_IDS.
ENDLOOP.
WA_RESULT_SET_DEFINITION-FIELD_NAME = <Look field name>.
APPEND WA_RESULT_SET_DEFINITION TO IT_RESULT_SET_DEFINITION.
CALL METHOD LR_API->MO_CORE_SERVICE->RETRIEVE
EXPORTING
    IV_OBJECT_TYPE_CODE      = <MDM Main Table>
    IT_RESULT_SET_DEFINITION = IT_RESULT_SET_DEFINITION
    IT_KEYS                  = WA_KEYS
IMPORTING
    ET_RESULT_SET            = IT_RESULT_SET.
LOOP AT IT_RESULT_SET INTO
        WA_RESULT_SET.
*PASS KEYS INTO MAIN TABLE TO GET Structure for FALT or Look up Table
TRY.
      CALL METHOD LR_API->MO_CORE_SERVICE->RETRIEVE_SIMPLE
        EXPORTING
          IV_OBJECT_TYPE_CODE = <MDM Main Table>
          IT_KEYS             = WA_KEYS
        IMPORTING
          ET_DDIC_STRUCTURE =<SAP Strct having all Look up fileds of MDM>
ENDTRY.
LOOP AT <SAP Strct having all Look up fileds of MDM> INTO <Work area>.
    CLEAR WA_KEYS.
    APPEND <Work area>-field name TO WA_KEYS.
    CALL METHOD LR_API->MO_CORE_SERVICE->RETRIEVE_SIMPLE
      EXPORTING
        IV_OBJECT_TYPE_CODE = <MDM Lookup table name>
        IT_KEYS             = WA_KEYS
      IMPORTING
        ET_DDIC_STRUCTURE   = <Single Structure in SAP For Lookup field>.
    READ TABLE <Single Structure in SAP For Lookup field>. INTO <Work Area> INDEX 1.
Here you can get the value of realted lookup fields associated with main table data.
ENDLOOP.
ENDLOOP.
LR_API->MO_ACCESSOR->DISCONNECT( ).
Edited by: Shyam Babu Sah on Nov 24, 2009 4:52 AM

Metadata Integrator for ECC and MDM

Hi ,
Please help me choose the correct Metadata Integrator for the following:
1. ECC
2. MDM
Thanks in advance,
Munavar

HI Manoj,
Thanks for your reply. Yes, I am looking for integrators for ECC and MDM.
How do we pull metadata from ECC and MDM into BOMM?
Thanks,
Munavar

Functional specification and technical Specification Templates for MDM

Hi All,
I am looking for some Functional Specification and Technical Specification Templates for MDM project. If anyone have such kind of documents then please send it to me.
Please if any one have any other useful documents for MDM implementation for example, transport strategy then please also send those to my ID [email protected]
Points will be rewarded to the helpful answers.
Thanks,
Shiv.

Hi Shiv
I'd like you to refer these URLs
Re: MDM Implementation Methodology
<a href="http://hosteddocs.ittoolbox.com/RD021507b.pdf">PDF Document</a>
Regards,
Krutarth

MDM Workflow - Split jobs for Adds and Updates

I am trying to set up a workflow where the inbound file contains Adds and Updates. I want the Adds to get added to a new workflow and the updated records to split off into a separate workflow branch where they will be automatically processed.
Any ideas on how to split these records?
Regards,
Brent

Have a Status field in the data model. This status field will have "Add" or "Change" as the possible values.
When record gets added, you set this flag to "Add".
When record gets changed, you set this flag to "Change".
Have a validation step. for Record = Add.
If the validation passes, then it is a "Add scenario". Use the branch step for the validation success branch and the validation failure branch.
You should now have two branches one for add and the other for change.

Data Quality Comparison Report across Systems(MDM and BW)

Hi,
I have a requirement of generating a Data comparison report in Excel using BODS. I need to extract data from SAP MDM and SAP BW and do a comparison on the record basis. For example.I take a material 100 record from MDM and same Material 100 record from SAP BW. I have to compare field by field values between these 2 systems.If there is any contingency,I have provide that record as output in Excel.
I think i need to create a batch job in BODS to run this requirement. Could you please tell me the approach of comparing the records in BODS and give the output of the record in Excel.
I really appreciate your help.
Thanks,
Kumar.

Hi,
The steps are :
To read data from BW need to create a open hub detination based on the datatarget where the data is stored.
Read the MDM data to BODS and then in BODS.
Once both the data from BW and MDM are sotred in BODS then create a pioneer report which is based on excel.

How to Use the language function for assignment and validation

Hi All,
If anyone can explain me in details with example ,how to use the language function for assignments and validations?
Thanks
Arnab

Hi Arnab,
The expression is checked only for the current MDM session.
If u login with the ABC language it will always show the ABC language no matter how many times u execute it.
Try connecting to the DM with the XYZ language.
It should go to the if part rather than else.
Hope it helps.
Thanks,
Minaz

What are the book names for MDM from SAP Education academy

Hi SAP gurus,
Can any one tell the name of the books for MDM from SAP Education academy.
For example in SAP MM (material management) - it is TAMM40(part1,part2,part3,paret4...etc)
So what are the names of the books for MDM from SAP Education academy. Just name and other deails enough.
Thanks in advance.
Vam C

Hi Vamsay,
I am sending you some books names of SAP MDM.
1. SAP MDM Frequently Asked Questions (English)
(Master Data Management Certification Sap Mdm Faq - ISBN: 9781603320153)
Price range: $42.00 - $54.95 from 4 Sellers
Publisher: Equity Pr
Format: Paperback
2. Build Foundations for Continual Improvements with SAP MDM
Enterprise Data Management with SAP NetWeaver MDM
Andrew LeBlanc
3. English Edition
Auszug aus:
SAP NetWeaver Master Data Management
ISBN 978-1-59229-131-1
lieferbar EUR 69,95 CHF 115,00
[In den Warenkorb] [Auf den Merkzettel]
Please rewrds if found helpful.
Regards,
Alok

XI Business content for MDM - Syntax error in IDOC adapter

Hi mates,
I'm trying out the Master Data Harmonization scenario for Vendor data with R/3 as the client system. I'm using SAP delivered XI Business content for MDM. The mapping program is generating ADRMAS and CREMAS IDocs but the IDOC adapter reports that there is a syntax error in ADRMAS IDOC. Find below the details.
<i><SAP:Category>XIAdapter</SAP:Category>
<SAP:Code area="IDOC_ADAPTER">ATTRIBUTE_IDOC_METADATA</SAP:Code>
<SAP:P1>Segment 'E1BPAD1VL', segmentnumber '000001' not correct in structure ADRMAS02</SAP:P1>
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText />
<SAP:ApplicationFaultMessage namespace="" />
<SAP:Stack>Error: Segment 'E1BPAD1VL', segmentnumber '000001' not correct in structure ADRMAS02</SAP:Stack>
<SAP:Retry>M</SAP:Retry></i>
Generated ADRMAS IDOC is
<i> <?xml version="1.0" encoding="utf 8" ?>
<ADRMAS02>
<IDOC BEGIN="1">
<EDI_DC40 SEGMENT="1" />
<E1ADRMAS>
<OBJ_TYPE>LFA1</OBJ_TYPE>
<OBJ_ID>0000500140</OBJ_ID>
<CONTEXT>0001</CONTEXT>
<E1BPAD1VL SEGMENT="1">
<FROM_DATE>00010101</FROM_DATE>
<TO_DATE>99991231</TO_DATE>
<NAME>Swift Transportation</NAME>
<COUNTRY>US</COUNTRY>
<COUNTRYISO>US</COUNTRYISO>
<LANGU>E</LANGU>
<LANGU_ISO>EN</LANGU_ISO>
<SORT1>SWIFT TRANSPORTATION</SORT1>
<TIME_ZONE>CST</TIME_ZONE>
<E1BPAD1VL1 SEGMENT="1">
<LANGU_CR>E</LANGU_CR>
<LANGUCRISO>EN</LANGUCRISO>
<ADDR_GROUP>BP</ADDR_GROUP>
</E1BPAD1VL1>
</E1BPAD1VL>
</E1ADRMAS>
</IDOC>
</ADRMAS02></i>
Strangely, the control record is blank. I looked at the XSLT program, it is coded that way. I do not understand the reason. Is the error pointing to the control record?
Look at the code sample from XSLT mapping program
<xsl:for-each select="IDOC/*/E1ADRMAS">
     <IDOC BEGIN="1">
     
          <EDI_DC40 SEGMENT="1"/>
          <xsl:apply-templates select="."/>
     </IDOC>
</xsl:for-each>
How can an IDOC w/o control record be posted?
Did anyone come across this error? Whats wrong/missing?
I appreciate ur inputs.
thx in adv
praveen

Moorthy,
I tried reloading the IDOC metadata from IDX2. Still I get the same error.
Regd, IDOC w/o control record, can u elaborate on "dynamic value while posting IDOCs". From where, XI message SOAP header with Business System replaced by corresponding logical system names?
Thanks
Praveen

NDES for MDM and BYOD

Similar Messages

Maybe you are looking for