Pre-requisites for e-Discovery from SharePoint Online to Exchange Online and On-prem

Hi,
I want to setup an O365 e-discovery site for SharePoint Online, Exchange Online and Exchange On-prem. My understanding is that to have e-Discovery from SPOnline to Exchange Online & Exchange On-prem, we need to setup Exchange hybrid with OAuth. Please correct
me if I am missing something. I have few questions regarding this setup -
1) Do we need to have Exchange 2013 On-premise for this setup? Or can it be done with Exchange 2010 too?
2) Is OAuth absolutely necessary for e-discovery to work between Exchange Online & On-prem? Or hybrid environment will work?  Can OAuth be configured between Exchange 2010 On-prem and Exchange Online for e-discovery?
3) Any other pre-requisites?
Thanks.

Yes, you will need Exchange 2013 SP1 or later with OAuth configured to cross-premises eDiscovery searches in Exchange.
Additional information: 
http://technet.microsoft.com/en-us/library/dn497703(v=exchg.150).aspx
Joseph Palarchio http://www.itworkedinthelab.com

Similar Messages

  • Pre-requisites for Drill-Down from Hyperion Planning to Oracle GL

    I am using Hyperion Planning 11.1.2 for maintaining budgets. I do comparison of actual vs budget in Hyperion. I export actual results from Oracle General Ledger (11.5.10) in flat file and upload to Hyperion planning using FDM. I maintain mapping in FDM for flat file and the Hyperion members.
    Q1) Is it possible to drill down actual numbers from Hyperion planning to Oracle General Ledger via FDM?
    Q2) If yes, what are prerequisites for using drill-down functionality?
    Can anyone please answer and refer some link/material that may help me in setting this up?
    Thanks in advance.

    Thanks
    But when i try to log in i m getting error bellow"
    Failure of server APACHE bridge: No backend server available for connection: timed out after 10 seconds or idempotent set to OFF."
    So do u have any other reference plz
    thanks

  • ADFS SSO and SharePoint 2013 on-premise Hybrid outbound search results from SharePoint Online - does it work?

    Hi, 
    I want to setup an outpund hybrid search for SharePoint 2013 on-premise to SharePoint Online.
    But I'm not shure if this works with ADFS SSO.
    Has somebody experience with this setup?
    Here's my guide which I'm going to use for this installation:
    Introduction
    In this post I'll show you how to get search results from your SharePoint Online in your SharePoint 2013 on-premise search center.
    Requirements
    User synchronisation ActiveDirectory to Office 365 with DirSync
    DirSync password sync or ADFS SSO
    SharePoint Online
    SharePoint 2013 on-premise
    Enterprise Search service
    SharePoint Online Management Shell
    Instructions
    All configuration will be done either in the Search Administration of the Central Administration or in the PowerShell console of your on-premise SharePoint 2013 server.
    Set up Sever to Server Trust
    Export certificates
    To create a server to server trust we need two certificates.
    [certificate name].pfx: In order to replace the STS certificate, the certificate is needed in Personal Information Exchange (PFX) format including the private key.
    [certificate name].cer: In order to set up a trust with Office 365 and Windows Azure ACS, the certificate is needed in CER Base64 format.
    First launch the Internet Information Services (IIS) Manager
    Select your SharePoint web server and double-click Server Certificates
    In the Actions pane, click Create Self-Signed Certificate
    Enter a name for the certificate and save it with OK
    To export the new certificate in the Pfx format select it and click Export in the Actions pane
    Fill the fields and click OK Export to: C:\[certificate
    name].pfx Password: [password]
    Also we need to export the certificate in the CER Base64 format. For that purpose make a right-click on the certificate select it and click on View...
    Click the Details tab and then click Copy to File
    On the Welcome to the Certificate Export Wizard page, click Next
    On the Export Private Key page, click Next
    On the Export File Format page, click Base-64 encoded X.509 (.CER), and then click Next.
    As file name enter C:\[certificate
    name].cer and then click Next
    Finish the export
    Import the new STS (SharePoint Token Service) certificate
    Let's update the certificate on the STS. Configure and run the PowerShell script below on your SharePoint server.
    if(-not (Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue)){Add-PSSnapin "Microsoft.SharePoint.PowerShell"}
    # set the cerficates paths and password
    $PfxCertPath = "c:\[certificate name].pfx"
    $PfxCertPassword = "[password]"
    $X64CertPath = "c:\[certificate name].cer"
    # get the encrypted pfx certificate object
    $PfxCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $PfxCertPath, $PfxCertPassword, 20
    # import it
    Set-SPSecurityTokenServiceConfig -ImportSigningCertificate $PfxCert
    Type Yes when prompted with the following message.
    You are about to change the signing certificate for the Security Token Service. Changing the certificate to an invalid, inaccessible or non-existent certificate will cause your SharePoint installation to stop functioning. Refer
    to the following article for instructions on how to change this certificate: http://go.microsoft.com/fwlink/?LinkID=178475. Are you
    sure, you want to continue?
    Restart IIS so STS picks up the new certificate.
    & iisreset
    & net stop SPTimerV4
    & net start SPTimerV4
    Now validate the certificate replacement by running several PowerShell commands and compare their outputs.
    # set the cerficates paths and password
    $PfxCertPath = "c:\[certificate name].pfx"
    $PfxCertPassword = "[password]"
    # get the encrypted pfx certificate object
    New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $PfxCertPath, $PfxCertPassword, 20
    # compare the output above with this output
    (Get-SPSecurityTokenServiceConfig).LocalLoginProvider.SigningCertificate
    [/code]
    ## Establish the server to server trust
    [code lang="ps"]
    if(-not (Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue)){Add-PSSnapin "Microsoft.SharePoint.PowerShell"}
    Import-Module MSOnline
    Import-Module MSOnlineExtended
    # set the cerficates paths and password
    $PfxCertPath = "c:\[certificate name].pfx"
    $PfxCertPassword = "[password]"
    $X64CertPath = "c:\[certificate name].cer"
    # set the onpremise domain that you added to Office 365
    $SPCN = "sharepoint.domain.com"
    # your onpremise SharePoint site url
    $SPSite="http://sharepoint"
    # don't change this value
    $SPOAppID="00000003-0000-0ff1-ce00-000000000000"
    # get the encrypted pfx certificate object
    $PfxCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $PfxCertPath, $PfxCertPassword, 20
    # get the raw data
    $PfxCertBin = $PfxCert.GetRawCertData()
    # create a new certificate object
    $X64Cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
    # import the base 64 encoded certificate
    $X64Cert.Import($X64CertPath)
    # get the raw data
    $X64CertBin = $X64Cert.GetRawCertData()
    # save base 64 string in variable
    $CredValue = [System.Convert]::ToBase64String($X64CertBin)
    # connect to office 3656
    Connect-MsolService
    # register the on-premise STS as service principal in Office 365
    # add a new service principal
    New-MsolServicePrincipalCredential -AppPrincipalId $SPOAppID -Type asymmetric -Usage Verify -Value $CredValue
    $MsolServicePrincipal = Get-MsolServicePrincipal -AppPrincipalId $SPOAppID
    $SPServicePrincipalNames = $MsolServicePrincipal.ServicePrincipalNames
    $SPServicePrincipalNames.Add("$SPOAppID/$SPCN")
    Set-MsolServicePrincipal -AppPrincipalId $SPOAppID -ServicePrincipalNames $SPServicePrincipalNames
    # get the online name identifier
    $MsolCompanyInformationID = (Get-MsolCompanyInformation).ObjectID
    $MsolServicePrincipalID = (Get-MsolServicePrincipal -ServicePrincipalName $SPOAppID).ObjectID
    $MsolNameIdentifier = "$MsolServicePrincipalID@$MsolCompanyInformationID"
    # establish the trust from on-premise with ACS (Azure Control Service)
    # add a new authenticatio realm
    $SPSite = Get-SPSite $SPSite
    $SPAppPrincipal = Register-SPAppPrincipal -site $SPSite.rootweb -nameIdentifier $MsolNameIdentifier -displayName "SharePoint Online"
    Set-SPAuthenticationRealm -realm $MsolServicePrincipalID
    # register the ACS application proxy and token issuer
    New-SPAzureAccessControlServiceApplicationProxy -Name "ACS" -MetadataServiceEndpointUri "https://accounts.accesscontrol.windows.net/metadata/json/1/" -DefaultProxyGroup
    New-SPTrustedSecurityTokenIssuer -MetadataEndpoint "https://accounts.accesscontrol.windows.net/metadata/json/1/" -IsTrustBroker -Name "ACS"
    Add a new result source
    To get search results from SharePoint Online we have to add a new result source. Run the following script in a PowerShell ISE session on your SharePoint 2013 on-premise server. Don't forget to update the settings region
    if(-not (Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue)){Add-PSSnapin "Microsoft.SharePoint.PowerShell"}
    # region settings
    $RemoteSharePointUrl = "http://[example].sharepoint.com"
    $ResultSourceName = "SharePoint Online"
    $QueryTransform = "{searchTerms}"
    $Provier = "SharePoint-Remoteanbieter"
    # region settings end
    $SPEnterpriseSearchServiceApplication = Get-SPEnterpriseSearchServiceApplication
    $FederationManager = New-Object Microsoft.Office.Server.Search.Administration.Query.FederationManager($SPEnterpriseSearchServiceApplication)
    $SPEnterpriseSearchOwner = Get-SPEnterpriseSearchOwner -Level Ssa
    $ResultSource = $FederationManager.GetSourceByName($ResultSourceName, $SPEnterpriseSearchOwner)
    if(!$ResultSource){
    Write-Host "Result source does not exist. Creating..."
    $ResultSource = $FederationManager.CreateSource($SPEnterpriseSearchOwner)
    $ResultSource.Name = $ResultSourceName
    $ResultSource.ProviderId = $FederationManager.ListProviders()[$Provier].Id
    $ResultSource.ConnectionUrlTemplate = $RemoteSharePointUrl
    $ResultSource.CreateQueryTransform($QueryTransform)
    $ResultSource.Commit()
    Add a new query rule
    In the Search Administration click on Query Rules
    Select Local SharePoint as Result Source
    Click New Query Rule
    Enter a Rule name f.g. Search results from SharePoint Online
    Expand the Context section
    Under Query is performed on these sources click on Add Source
    Select your SharePoint Online result source
    In the Query Conditions section click on Remove Condition
    In the Actions section click on Add Result Block
    As title enter Results for "{subjectTerms}" from SharePoint Online
    In the Search this Source dropdown select your SharePoint Online result source
    Select 3 in the Items dropdown
    Expand the Settings section and select "More" link goes to the following URL
    In the box below enter this Url https://[example].sharepoint.com/search/pages/results.aspx?k={subjectTerms}
    Select This block is always shown above core results and click the OK button
    Save the new query rule

    Hi  Janik,
    According to your description, my understanding is that you want to display hybrid search results in SharePoint Server 2013.
    For achieving your demand, please have a look at the article:
    http://technet.microsoft.com/en-us/library/dn197173(v=office.15).aspx
    If you are using single sign-on (SSO) authentication, it is important to test hybrid Search functionality by using federated user accounts. Native Office 365 user accounts and Active Directory Domain Services
    (AD DS) accounts that are not federated are not recognized by both directory services. Therefore, they cannot authenticate using SSO, and cannot be granted permissions to resources in both deployments. For more information, see Accounts
    needed for hybrid configuration and testing.
    Best Regards,
    Eric
    Eric Tao
    TechNet Community Support

  • How can I send an email from Sharepoint Online using sandbox solution?

    How can I send an email from Sharepoint Online using sandbox solution?
    If possible I do not want to use workflow.
    Is It possible to do it without using workflow?

    hello Steven Andrews,
    when any user sends a message using contact us page in SharePoint online.
    1. We are inserting item in Contact Us List . - This is working fine
    for anonymous users also. We have used Office365 anonymous codeplex wsp and it is working fine. Anonymous user is able to insert new record in the Contact Us List.
    2. Once, new record is inserted in Contact Us list, we want to fire email notifying thanks to the user on his email id as well as to our company x person for notification of new inquiry. 
    We tried using Workflow having impersonation step for  anonymous user but it is not working for Anonymous users. Workflow is able to sent the email if someone logged into system but not working for Anonymous user although workflow is getting started
    but not able to send email although used Imperonsation step.
    We are stuck into implementing second step.

  • Cross domain call to Azure ASPX from SharePoint Online Site Collection

    We have a ASPX page hosted on Azure that is creating a Zip of documents from a SharePoint Document Library against IDs that we are passing it through query string. Next we are flushing this ZIP as a download response to the client
    browser so that user can save it somewhere on his machine. This is working as expected.
    Next we are calling this ASPX from our SharePoint Online Site Collection. Sometime it takes time to create the ZIP & return to the client and therefore we want to implement a Progress Image showing something is happening at the server. We
    have used window.open() method to call this ASPX and at the same time we are showing up the Progress Image. But due to same origin policy we are not able to track any window specific events in Internet Explorer to close the Progress Image when the response
    returns to the client.
    Please suggest a suitable workaround for this scenario. Any help would be greatly appreciated.
    Thank you in advance!
    Jitendra

    Hi Jitendra,
    According to your description, my understanding is that you want to call a aspx page hosted on Azure from SharePoint Online site and implement a progress image to show the progress happening at the server.
    In your scenario, if you want to call the aspx page on Azure to create zip and return to the client, the better way is createing a web service and call it in clinet side. You can add the progress status in the custom code and then judge the status to
    show correponding progress image.
    Here is a detailed article for your reference:
    How to Create and Deploy a Cloud Service
    Best Regards
    Zhengyu Guo
    TechNet Community Support

  • Retriving documents from Sharepoint online by BTS2013 R2

    We are trying to retrieve documents from Sharepoint online by BTS2013 R2  but we are receiving the below error:
    Error:
    The adapter "Windows SharePoint Services" raised an error message. Details "The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for
    communication because it is in the Faulted state.".
    I have crossed checked and user credential is correct. Also the account host instances are running is having access.
    We are facing couple of issues and not sure if we missed an steps to configure.
    If anyone could help us or point through right documentation it would be of great help.

    Hi Rama,
    "The communication object, System.ServiceModel.Channels.ServiceChannel, cannot be used for communication because it is in the Faulted state.".”
     This is quite unhelpful because it does not give a clue of what is going wrong. You get this error because a .NET exception happens on the server side (SharePoint), and nothing catches and handles it. The solution is to check your settings.
    The problem could be with the password of the SharePoint Online Username that is set wrong in the BizTalk adapter.
    Refer:
    BizTalk integration with SharePoint 2013 Online – Troubleshooting
    Also refer:
    SharePoint 2013 and Biztalk 2013 (On-Premise)
    Alternatively, try re-registering the WCF using the below command:
    On x86 environment:
    %Windir%Microsoft.NetFrameworkv3.0Windows Communication FoundationServiceModelReg.exe -r
    On x64 you can re-register WCF using the command:
    %Windir%Microsoft.NetFramework64v3.0Windows Communication FoundationServiceModelReg.exe -r
    Refer:
    VSeWSS 1.3 Deploy fails with "Faulted state"
    Rachit
    Please mark as answer or vote as helpful if my reply does

  • Communicate (CRUD) with CRM Online from SharePoint Online

    Hi,
    I'm working on an offer to a client where I'm considering if I'll recommend SharePoint Online.
    Most of the requirements from the client are out of the box SharePoint and doesn't affect the decision to go for SharePoint Online. However, the client has one requirement, which is that they need to be able to update Entities/records in their CRM Online
    solution from SharePoint. I'm not sure how those updates should be triggered, but my guess is it should be triggered when an item in a list/document library changes it's status (a status field). This would probably require custom development of some sort (Event
    Receiver? Workflow?) which uses the CRM web services.
    Is this even possible in SP Online?
    I've done a lot of searching for this in Google, but haven't found anything interesting yet. I come across solutions for integration the other way though (FROM CRM to SharePoint), but I need integration with CRM FROM SharePoint.
    Thanks!

    Hi,
    According to your post, my understanding is that you want to communicate SharePoint Online and CRM Online.
    We can use the Business Connectivity Services (BCS) to communicate SharePoint Online (SPO) to CRM Online.
    The following blog for your reference:
    http://blogs.msdn.com/b/girishr/archive/2013/05/13/connecting-sharepoint-online-and-crm-online-using-bcs-2013-edition.aspx
    Best Regards
    Dennis Guo
    TechNet Community Support

  • Document Retreival from SharePoint Online with in Folders

    In Requirement to retrieve a document from SharePoint Online, using CSOM, I came across a scenario where I need to retrieve a document (Excel, pdf, txt etc) . If the document is the Library level (https://XXX.Sharepoint.com/Sites/Site/DocumentLibrary),
    I could successfully retrieve it, but if there are folders at 2 levels (https://XXX.Sharepoint.com/Sites/Site/DocumentLibrary/Folder1/Folder2/excel.xslx), My code
    fails in reading the document.
    Interesting part is if the file is .docx, its being fetched at any level of Document. I see this issue for formats other than docx
    Any help or suggestions would be of great help!!
    TIA,
    Tasaduq

    Hi,
    Here are two threads for your reference:
    Displaying SSRS reports in SharePoint online 2013
    http://community.office365.com/en-us/f/154/t/236914.aspx
    Deploying 2012 SSRS Report to Azure SSRS? o365 SharePoint Online options?
    http://stackoverflow.com/questions/16446146/deploying-2012-ssrs-report-to-azure-ssrs-o365-sharepoint-online-options
    As this question is more relate to Office 365, I suggest you post it to Office 365 Forum, you will get more help and confirmed answers from there.
    http://community.office365.com/en-us/forums/default.aspx
    Best Regards
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • How to get Client ID and Client Secret for Office App for Word which accessing SharePoint Online

    we currently implementing an Office App for MS Word which access SharePoint list and get data from lists. Our aim is any user can get this app from Office App store and enter their SharePoint URL and browse their own SharePoint lists and use those. When
    I was checking mechanisms which you used to access SharePoint, in some of them have used ClientId and Client Secret to authenticate with SharePoint. I have following questions.
    1.If I want to sell my app using Office app store where can I get those clientId and client secret which is used to  get the access tokens.
    2.Is it possible to create SharePoint app and publish it to SharePoint app store and get clientId and client secret and use it when accessing through office. So users first download our SharePoint app install it to their SharePoint environment then get out
    Office App from Office app store and add it to word. Will this work?

    Hi,
    >> We are planning to develop an Office app to access SharePoint Online and SharePoint on Premise from Microsoft word.
    I’m not very familiar with SharePoint development, so please correct me if I have any misunderstandings about your requirement.
    The basic components of an app for Office are an XML manifest file and the default webpage of your app (server side).
    >> If I'm publishing my Office App for Word in to the Microsoft office app store, how do I get the ClientId and ClientSecret which I need to pass to authenticate with SharePoint online?
    As far as I know, when register your web app to SharePoint Online, you will get the ClientId and ClientSecret from the Azure Active Directory. And you need to store the Client ID and Client
    Secret on the app server side.
    For details, you could reference the article
    Building an Office 365 ASP.NET MVC app.
    >> If ClientId and ClientSecret not providing when we publishing Word Office App to the app store how what the ways which we can use to authenticate with SharePoint using Word Office app?
    You don’t need to provide the ClientId and ClientSecret when publishing your App to App Store. They are stored on your app server side.
    By the way, if you have the question about how to access the SharePoint resource in a Web Application, I will suggest you posting the questions to
    SharePoint Development Forum. For this forum, we mainly discuss the questions about using the Office JavaScript API to develop Apps for Office.
    Regards,
    Jeffrey
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Pre-requisites for OS X 10.9 Upgrade??

    Hello. I am considering an upgrade to my Mac OS (on both a Mac and a Mac Air). The details of my Mac are:
    Processor  2.5 GHz Intel Core i5
    Memory  4 GB 1333 MHz DDR3
    Graphics  AMD Radeon HD 6750M 512 MB
    Serial Number  C02H9SRGDHJF
    Software  Mac OS X Lion 10.7.5 (11G63)
    At present the OS on both my Mac and MacAir is OS X Lion 10.7.5.
    I have been considering purchasing OS X10.8 Mountain Lion but decided to wait until OS X 10.9 Mavericks was issued. This was because I did not see the point in purchasing OS X 10.8 just before it was about to be superseded by a new version OS (in this case OS X 10.9); and I was unable to ascertain whether OS 10.8 would be an essential pre-requsite for OS X 10.9 or not.
    I have now seen that I can upgrade (free) to OS 10.9 Mavericks – straight onto my existing OS X Lion 10.7.5. This implies that I do not need to upgrade to OS 10.8 Mountain Lion beforehand. If OS X 10.8 it is not an essential pre-requisite for OS X, it seems to me that there is no advantage gained by purchasing it.
    Please can someone advise me if there is any advantage in upgrading to OS 10.8 before going on to further upgrade to OS 10.9? Does OS 10.8 have any additional features that OX 10.9 Mavericks does not have, or needs in order to be fully enabled? In short, do I need OS X10.8 beforehand to take full advantage of the OS X 10.9 upgrade?
    Any advice appreciated.

    Apple User7 wrote:
    Please can someone advise me if there is any advantage in upgrading to OS 10.8 before going on to further upgrade to OS 10.9?
    Nothing. OS X Mavericks has got the same features if you upgrade from OS X Lion instead of OS X Mountain Lion apart from the features that need a specific computer, so don't worry about it. Upgrading to Mountain Lion first would be a waste of money.
    Open the Mac App Store and download OS X Mavericks. If your computer isn't supported, the Mac App Store will give you an error message. Make a backup of your files with Time Machine and check that your apps are compatible > http://www.roaringapps.com

  • Pre requisites for installing SAP Router

    Hi Friends,
    As i am going through the implementation phase, I have to install sap router which i am new at. Also i am doing it because i have to connect Maintenance Optimizer to Sap service Market place for which Router would be essentially required.
    I have some questions to put forth.
    1. what are the pre requisites for SAP Router
    2. Do we require Public IP and what would be the use of this ip
    3. how to configure the SAP Router
    4. Can i install the SAP router on the same host on which we have Solution manager, is it advisable. or we should go for a seperate host.
    Regards
    Aayush

    Installing the sapcrypto library and starting the SAProuter
    Contents
    u2022     Downloading necessary software components from SAP Service Marketplace
    u2022     Creating the certificate request
    u2022     Additional actions necessary before you can start saprouter
    This section describes the necessary steps to download and install the sapcrypto library for use with saprouter. The saprouter must be started with the options described later in this section.
    The license for the sapcrypto library covers  saprouter connections between saprouters at SAP and the first saprouter on customer sites and backend connections within the customer`s network. For all other purposes the library CANNOT be used!
    Downloading necessary software components from SAP Service Marketplace
    1.     Login to the SAP Service Marketplace with the Service Marketplace USERID which is assigned to your installation.
    2.     Change to the alias SAPROUTER-SNCADD. Before you can download the software components two preconditions must be met.
         a.     You must have been allowed to download the software. This authorization is added as soon as SAP has received a positive statement from the "Bundesausfuhramt". This procedure is necessary since the software falls under EU regulations.
         b.     For more information on how to obtain authorization if download is not possible see note 397175.
         c.     You must accept that you must follow the regulations imposed by the EU on the use and distribution of the cryptographic software components downloaded from the SAP Service Marketplace.
    3.     The acceptance of the terms and conditions is logged with your USERID and stored for reporting purposes to the "Bundesausfuhramt".
    4.     Accepting with the button on the web-based form takes you to the folder where you can download the Software components.
    These are packed into a single CAR file sapcrypto.car
    5.     Copy the file to the direcory where the saprouter executable is located
    6.     You can get the file car.exe/sapcar.exe, which is necessary to unpack the archive from any Installation Kernel CD.
    Executing the command car -xvf SAPCRYPTO.CAR will unpack the following files:
    [lib]sapcrypto.[dll|so|sl]
    sapgenpse[.exe]
    ticket
    Creating the certificate request
    1.     As user <snc>adm set the environment variables
    SECUDIR = <directory_of_saprouter>
    2.     Change to the Shortlink SAPROUTER-SNCADD. From the list of SAProuters registered to your installation, choose the relevant "Distinguished Name"
    3.     Generate the certificate Request with the command
    sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
    4.     Alternatively use the two commands:
    sapgenpse get_pse -v -noreq -p local.pse "<Your Distinguished Name>"
    sapgenpse get_pse -v -onlyreq -r certreq -p local.pse
    5.     Display the output file "certreq" and with copy&paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name
    6.     In response you will receive the certificate signed by the CA in the Service Marketplace, cut&paste the text to a local file named srcert
    7.     With this in turn you can install the certificate in your saprouter by calling
    sapgenpse import_own_cert -c srcert -p local.pse
    8.     now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
    sapgenpse seclogin -p local.pse -O <user_for _saprouter>
    9.     This will create a file called cred_v2 in the same directory.
    For increased security please check that the file can only be accessed by the user running the SAProuter.
    Do not allow any other access (not even from the same group)!
    On UNIX this will mean permissions being set to 600 or even 400!
    On NT check that the permissions are granted only to the user the service is running as!
    1.     Check if the certificate has been imported correctly
    sapgenpse get_my_name -v -n Issuer
    The name of the Issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
    2.     If this is not the case, delete the files cred_v2, local.pse and start over at Item 4.  If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands
    4.,7.,8. and 10.
    Additional actions necessary before you can start saprouter
    1.     The environment variable SNC_LIB needs to be set for the user account SAProuter is running under.
    SNC_LIB has the form
    UNIX      <path_to_libsecude>/<name_of_sapcrypto_library>
    Windows NT, Windows 2000     <drive>:\<path_to_libsecude>\<name_of_sapcrypto_library>
    2.     Check if the environment of the user running saprouter contains the environment variable SNC_LIB
    UNIX     printenv
    Windows NT     System environment variable
    3.     start the saprouter with the following command line:
    saprouter -r -S <port> -K "p:<Your Distingushed Name>"
    -K tells the saprouter to start with loading the SNC library
    the corresponding file ./saprouttab should contain at least the following entries
    inbound connections MUST use SNC
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
    repeat this for the servers and port_numbers you will need to allow,
    please make sure that all explicit ports are inserted in front of a
    generic entry '*' for port_number
    outbound connections to <sapservX> will use SNC
    KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
    permission entries to check if connection is allowed at all
    P <IP address of a local host> <IP address of sapserv2>
    all other connections will be denied
    D  * * *
    Example
    For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
    SNC-connection from and to SAP
    KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
    SNC-connection from SAP to local R/3-System for Support
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
    SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
    SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
    Access from the local Network to SAPNet - R/3 Frontend (OSS)
    P <IP-addess of a local PC> 194.39.131.34 3299
    deny all other connections
    D * * *
    Lalit Kumar

  • What are the pre-requisite for JAVA Proxy communication?

    What are the pre-requisite for JAVA Proxy communication?

    Hi,
    You can install the Java proxy runtime on the SAP J2EE Engine Release 6.40 SP5 or higher.
    The messaging system that the Java proxy runtime uses to send messages to the Integration Server must also be installed on the J2EE server.
    To send messages from a J2EE application, the application must be programmed against beans that encapsulate all details about the Java runtime. The following classes are generated:
    ·        Proxy classes that send or receive messages using the Java proxy runtime.
    ·        Bean classes as an outer shell that conform to the J2EE standard. The beans call the proxy classes for communication.
    The classes must be deployed on the J2EE server together with their J2EE application
    see this link for the example scenario http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d

  • Unicode Compatability is a pre requisite for ECC 6.0

    Hi all,
    Can any body send me any link or any document which says tht Unicode Compatability is a pre requisite for ECC 6.0. its really urgent.
    Regrads,
    Ruchika saini

    Hi
    see this
    The Link will be helpful to you.
    Re: Upgrade 4.6 to ECC - What are the responsibilites
    regarding Unicode influence in Standard programs
    Very good document:
    http://www.doag.org/pub/docs/sig/sap/2004-03/Buhlinger_Maxi_Version.pdf
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d37d1ad9-0b01-0010-ed9f-bc3222312dd8
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/589d18d9-0b01-0010-ac8a-8a22852061a2
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f8e316d9-0b01-0010-8e95-829a58c1511a
    You need to use the transaction UCCHECK.
    The report documentation is here
    ABAP Unicode Scan Tool UCCHECK
    You can use transaction UCCHECK to examine a Unicode program set for syntax errors without having to set the program attribute "Unicode checks active" for every individual program. From the list of Unicode syntax errors, you can go directly to the affected programs and remove the errors. It is also possible to automatically create transport requests and set the Unicode program attribute for a program set.
    Some application-specific checks, which draw your attention to program points that are not Unicode-compatible, are also integrated.
    Selection of Objects:
    The program objects can be selected according to object name, object type, author (TADIR), package, and original system. For the Unicode syntax check, only object types for which an independent syntax check can be carried out are appropriate. The following object types are possibilities:
    PROG Report
    CLAS Class
    FUGR Function groups
    FUGX Function group (with customer include, customer area)
    FUGS Function group (with customer include, SAP area)
    LDBA Logical Database
    CNTX Context
    TYPE Type pool
    INTF Interface
    Only Examine Programs with Non-Activated Unicode Flag
    By default, the system only displays program objects that have not yet set the Unicode attribute. If you want to use UCCHECK to process program objects that have already set the attribute, you can deactivate this option.
    Only Objects with TADIR Entry
    By default, the system only displays program objects with a TADIR entry. If you want to examine programs that don't have a TADIR entry, for example locally generated programs without a package, you can deactivate this option.
    Exclude Packages $*
    By default, the system does not display program objects that are in a local, non-transportable package. If you want to examine programs that are in such a package, you can deactivate this option.
    Display Modified SAP Programs Also
    By default, SAP programs are not checked in customer systems. If you also want to check SAP programs that were modified in a customer system (see transaction SE95), you can activate this option.
    Maximum Number of Programs:
    To avoid timeouts or unexpectedly long waiting times, the maximum number of program objects is preset to 50. If you want to examine more objects, you must increase the maximum number or run a SAMT scan (general program set processing). The latter also has the advantage that the data is stored persistently. Proceed as follows:
    - Call transaction SAMT
    - Create task with program RSUNISCAN_FINAL, subroutine SAMT_SEARCH
    For further information refer to documentation for transaction SAMT.
    Displaying Points that Cannot Be Analyzed Statically
    If you choose this option, you get an overview of the program points, where a static check for Unicode syntax errors is not possible. This can be the case if, for example, parameters or field symbols are not typed or you are accessing a field or structure with variable length/offset. At these points the system only tests at runtime whether the code is sufficient for the stricter Unicode tests. If possible, you should assign types to the variables used, otherwise you must check runtime behavior after the Unicode attribute has been set.
    To be able to differentiate between your own and foreign code (for example when using standard includes or generated includes), there is a selection option for the includes to be displayed. By default, the system excludes the standard includes of the view maintenance LSVIM* from the display, because they cause a large number of messages that are not relevant for the Unicode conversion. It is recommended that you also exclude the generated function group-specific includes of the view maintenance (usually L<function group name>F00 and L<function group name>I00) from the display.
    Similarly to the process in the extended syntax check, you can hide the warning using the pseudo comment ("#EC *).
    Applikation-Specific Checks
    These checks indicate program points that represent a public interface but are not Unicode-compatible. Under Unicode, the corresponding interfaces change according to the referenced documentation and must be adapted appropriately.
    View Maintenance
    Parts of the view maintenance generated in older releases are not Unicode-compatible. The relevant parts can be regenerated with a service report.
    UPLOAD/DOWNLOAD
    The function modules UPLOAD, DOWNLOAD or WS_UPLOAD and WS_DOWNLOAD are obsolete and cannot run under Unicode. Refer to the documentation for these modules to find out which routines serve as replacements.
    Regards
    Anji

  • Pre requisite for Modification

    Hi All,
    Is there any specific pre requisites for Modification adjustments after prepare mode from abap prespective ?
    We need to check these before we do an upgrade on the system from ABAP prespective.
    Cheers,
    Reddy

    Hi All,
    Upgrade document shows these are the planning steps  need to take care .
    Changes to the Translation of an Object Text
    The changes are made in the translation environment (transaction SE63) or in the ABAP Workbench. An
    SSCR key is not required.
    Caution
    Changes to translations of SAP objects are not retained when you perform an upgrade. They are
    overwritten by a new version or deleted. For more information about retaining these changes, see SAP Note 485741.
    Modifications to the Object
    You may need an SSCR key to perform the modification adjustment. Get the key before you upgrade the
    system. For more information, see SAP Service Marketplace at service.sap.com/sscr.
    All modified standard SAP objects are displayed for adjustment in transaction SPDD or SPAU. Objects that
    SAP no longer delivers are deleted. If you want to keep these objects, you have to accept the modifications
    in transaction SPDD or SPAU.
    Caution
    Make sure that before the upgrade there is at least one package in the customer namespace (Z*). You
    need this package if you have to create objects during the modification adjustment, for example, for an
    append structure for customer fields of an SAP table.
    You cannot create packages during the upgrade.
    I have checked the prerequisites mentioned here .
    When i run se95 i get 2 modification adjustments in red color under translations.
    It shows there are transacation LSMW
    Authorization Objects B_LSMW.
    When i double click these two it traverse me to SE63 transaction. Please let me know what i need to check in these two entries in regard to translations.
    Please let me what need to take care for these two before i confirm to BASIS team to go head with Upgrade.
    Cheers,
    Reddy

  • Is it possible to change the layout of alerts from SharePoint Online

    Is it possible to change the layout of the alert mails you get from SharePoint Online? If yes, then how?
    Thanks.
    Thomas Bomann, simplySO

    Hi,
    it is not possible for SharePoint online
    check this thread
    http://community.office365.com/en-us/f/154/t/14442.aspx
    Kind Regards,
    John Naguib
    Senior Consultant
    John Naguib Blog
    John Naguib Twitter
    Please remember to mark this as answered if it helped you

Maybe you are looking for

  • Itunes for windows won't read or burn to my cd player

    I am having a weird problem. I had an HP Lightscribe cd burner installed on my system and when i put a cd into the computer, itunes will read it and show me the name of the cd and all the tracks, but when trying to play, import, or burn to this drive

  • Labels, titles, ratings just disappeared

    Working with Bridge CC.  Opening files in photoshop.  All of a sudden all titles, ratings, keywords disappeared from beneath thumbnails in the content panel.  They show up in the preview panel when an image is selected.  I just can' fins a place to t

  • What does Acrobat 9 pro have over Acrobat 7 pro?

    Does anyone know where I can find what features are available in Acrobat 9 pro that aren't in Acrobat 7 pro?    Or know off hand what the differences are.  I can't find a comparison anywhere.

  • Does the MBA 2012 support SDHC and SDXC Cards ?

    In the store only SD-cards are mentioned in the tech-specs for the MBA. In comparison to that : The specs for the MBP are talking about SDXC-card reader. Thx for your answers regds Mirco

  • Print from Win XP to printers on Mac 10.4 network

    I have a small home network consisting of an iMac and two G4 Powerbooks all running OS 10.4.4 with three printers all connected to iMac host computer. Powerbooks are connected via DLink DI-524 wireless router. I have no trouble printing to any of my