Preconfigure GRC AC 5.3 Installation

Hello,
The GRC AC 5.3 Upgrade guide says the following:
8.1 Preconfigure the Installation
Preconfigure the installation by applying all the xml files in the Archive (SAR) file VIRACCNT00_0.sar that you downloaded earlier.
Based on the above, what does it mean by preconfigure install by applying xml files into SAR files?
How can we apply xml files into SAR file?
Thanks,
Haleem

You need to upload .xml files in ERM and CUP. Also, there will be a message file which needs to be uploaded to RAR. Go down and read more of the install and config guide. They will help you in understanding of all the .xml files.
Regards,
Alpesh

Similar Messages

GRC AC 5.3 installation on ECC 5.0

All,
Is it possible to install GRC AC 5. 3 on ECC 5.0. Wil there be any limitations if its installed on ECC 5.0.
OR its mandatory for AC 5.3 to install and work only on ECC 6.0. Installation guide suggest SAP version requirement as NW 2004s which mean ECC 6.0.
Please suggest.
Thanks.
Sanjay

Hi.
GRC application works on AS JAVA.( SAP NetWeaver 7.0 with SP 12 and above).
You can connect to ECC 5.0 or ECC 6.0 through JCo connector.
In the ECC system you are NOT going to install GRC application, You can install only RTA(Real time Agent) as add-on.
RTA for ECC system: VIRSANH & VIRSAHR
Thanks & Regards
Gangadhar
Edited by: gangadhar hm on Jul 7, 2010 12:01 PM

GRC 10 Add on installation -Access control node missing in IMG SPRO

Dear Experts
We have got GRC 10 addon install on our server by basis team and i can verify that by going to saint t code but when i am going to SPRO i cannot see aplication by name GRC .Where as i can see GRC Process control and GRC risk management , GRC access control is missing , following are the attached files. quick response will be appreciated. thanks in advance.

Hi Luciana.,
Thanks for your great explanation and you have answered my query all the way Thanks once again.
But one more query please
Regarding below,
"The GRCPIERP is an addon basically for your system that has SAP HR installed, so you can integrate HR into GRC, to get requests for new hires, termination, etc."
Does this means if I have no need of HR trigger/my plugin systems is not HR system then GRCPIERP is not at all required for ARQ, EAM, ARA and BRM for even single functionality?
BR,
Mangesh

Add on installation (SAP GRC compliance calib) - Post installation question

Hi,
I have installed Virsa RTA 5.1 on ECC 6.0. This is a brand new system and I have followed all the steps recommended by SAP. And after installation and activating the BC-sets, I was able to execute transactions for Role Expert and Compliance Calibrator in my 000 client. But when I logged onto a different client (let's say client 226.) I was able to execute transaction for role expert, and when I execute Compliance calibrator (/virsa/zvrat) nothing happens (the status bar says starting application Virsa CC and stops). It dosent even show any error. But as I said all the transactions are working fine in my 000 client. So am I missing any step here. Please help me in solving this issue.
Thanks,
Naveen

Juan,
Thanks for your suggestion... but I already tried it and actually I figured it out by myself... it was the type of userID. I was using a service user to access CC in the other client i.e 226. This sounds wiered but when I changed the user type to Dialog it worked... Anyways thanks for taking your time on this..

Migrate SAP GRC AC 5.3 SP13 (System A - System B)

Hello all,
currently we have setup 2 SAP GRC AC 5.3 SP13 SAP instances (DEV / PRD) for the customer's SAP ERP system landscape. Those systems also contain some customer business functionality.
Because of business requirements the PRD Java Instance needs to be deleted and built up again from scratch with another WebAS Java Release Version (same SID, same Hardware, etc.).
Our plan is now to setup a dedicated Java instance which will contain the PRD installation of SAP GRC AC (new SID, different hardware, etc.) to avoid similar problems in the future. Therefore we have to migrate all of the RAR data from the "old" Java instance to the newly setup Java system. We especially need to migrate all of the RAR analysis data (e.g. SoD violation analyses of previous months, etc.), otherwise we would loose all of this information when the "old" installation is deleted and built up again.
I have checked all of the SAP documentation for SAP GRC AC 5.3 and only found these clues:
In document "SAP GRC AC 5.3 Configuration Guide v3.16 - Chapter Utilities -> Export Utility / Import Utility" it only says
something about exporting / importing rule sets, mititgating controls, etc. Can these tools also be used to export / import
analysis data too ?
In document "SAP GRC AC 5.3 Installation Guide v2.2 - Chapter Post-System Copy Configuration" it only says something about
steps to be executed if the SAP GRC AC installation was done via system copy. But there is no information about migrating RAR analysis data.
In document "SAP GRC AC 5.3 Operations Guide v2.1 - 7.2 Backup strategies" it says that in order to restore the system "you need to back up all tables with the following prefixes: VIRSA and VT". Can we simply do a backup of all of those tables, import
them into the database of the new system and the use the export/import utility to move all of the configuration etc. from the old system to the new one ?
Regards,
Benjamin
Edited by: Benjamin Schlotz on Jun 30, 2011 11:57 AM

Hello Sunny, hello Frank,
thanks for the quick replies.
I did know about the SNOTE regarding the post migration steps, but the To-Do's Frank posted had some additional info in them.
One question remains still open though:
How to actually migrate all the GRC AC RAR data (incl. old analysis data) from System A to System B
Our intended course of action would be:
1. Deploy SAP GRC AC on System B (same Version, SP-level etc. as in System A)
2. Export all VIRSA* and VT* tables from DB of System A, import them all in DB of system B
3. Export all configuration, etc. from System A, import it into System B (using the export / import functionality within RAR)
4. Do all the post-migration tasks described by you
Would you agree with that course of action / know any pitfalls, etc ? We need to have all the "old" RAR analysis data from System A in System B after the migration because System A will be shutdown and deleted.
Regards,
Benjamin

When adding 'pref("privacy.sanitize.sanitizeOnShutdown", true);' to default prefs file 'privacy.clearOnShutdown.cookies' and 'privacy.cpd.cookies' become false

It's a duplicate of https://support.mozilla.org/ru/questions/970266. Created because of silence and impossibility to change a question's category. The situation descripted is a **problem** one.
The question is rather similar to http://support.mozilla.org/ru/questions/962042, but I **do not lock prefs**, so I don't use *mozilla.cfg*.
I'm constructing preconfigured Firefox 23.0.1 installation under Win 7 64-bit using browser\defaults\preferences\prefs.js file. Yes, I know that it should be called all-*companyname*.js, but it works in general in my way too.
As I have written in subj, when I add to prefs.js file 'pref("privacy.sanitize.sanitizeOnShutdown", true);' line, then lines 'pref("privacy.clearOnShutdown.cookies", true);' and 'pref("privacy.cpd.cookies", true);' stop working. If one run about:config immediately after installation, she would see that the latter two options are switched to false and marked **bold** (changed by user).
I had tested it heavily: if one comment out 'pref("privacy.sanitize.sanitizeOnShutdown", true);' line other two preferences work just fine. On the other hand if one add this cursed pref either upper or lower in code - no matter - it would turn both other preferences to *false*.
The question is where these strange side-effects are documented? And how can be made a preconfigured installation that possible both sanitize things and clear cookie data on closing?
Thanks in advance.

Thank you very much, Cotez!
This has worked just fine for me.
Just one more note: when using pref("privacy.sanitize.migrateFx3Prefs", true); one should delete (or comment out) pref("privacy.cpd.cookies", true);. Otherwise the latter pref will become ''false'' on fresh install for some reason. While without that pref its value would be ''true''.

How to have SAP password sync with Windows AD password

Hi All,
Can someone guide me with the setup required to have the SAP password to be in sync with the Windows Active Directory password?
Thanks
Vijay

Hello Vijay,
UME means User Management Engine which provides central user administration for all
Java applications. The UME is used as the default user store as of SAP Web Application
Server 6.40. The UME is integrated into SAP Web Application Server Java as a service.
The UME itself administers users and uses databases, directory services, or the
SAP ABAP user administration to store the data. With newer versions of SAP Web Application
Server, the UME is set as the default user store.
SAP recommends that, as of SAP Web Application Server Java
6.40, you use the UME, which is preconfigured by default during the
installation, as the user store.
The UME has its own user management administration console for
administering users. It allows to perform the routine tasks
of user administration, such as creating users and groups, role assignment,
and other actions.
The UME provides different self-service scenarios that can be used by
applications. For example, a user can change his or her data, or register as a
new user.
Security settings can be used to define minimum
password length and the number of incorrect logon attempts before a user is
locked etc
The UME logs unsuccessful logons,incorrect logon attempts,changes to user data etc
Hope this satisfies your querry to some extent.
Pl dont forget to award points if resolved.
Regards

RAR: Configuration parameter "Report directory on the SAP ERP Server"

Hi,
Under a scenario with a standalone SAP GRC AC 5.3 installation and connected with several R/3 system through JCO destinations.
Which SAP ERP Server Directory do we have to specify?
Many thanks in advance. Best regards,
Imanol

Sunny,
I did not mean the Spool File Directory.
I mean the parameter "SAP Server Application Location". The parameter above FTP Location.
Under the configuration guide it is said for this parameter that:
"The report directory on the SAP Enterprise Resource Planning (ERP) application servers. This is the temporary storage location for security reports generated by background jobs. Virtual directories delivered in the ERP system, such as DIR_HOME and DIR_TMP, are supported. These directories are viewed with SAP ERP transaction, AL11. The same directory name is used for all SAP back-end systems."
Thanks in advance. Best regards,
Imanol

Which RTA to select VIRSAR3 and VIRSAXSR3.

Apart from basic definitin of these RTAS. What is the Difference between VIRSAR3_01and VIRSAXSR3_01.
I installed GRC AC 5.3 .I want to connect different backend systems like ECC6.0,BI,SCM,SRM.I am not doing analysis on HR SYSTEM.
what are the RTAS? ( whether VIRSAR3 series /VIRSAXSR series ) i need to select in JCO connectors to have good performance and connection.
do we need to install this RTAS at backend of each systems like in ECC6,BI,SCM,SRM.?If so what is the procedure to do?
Please suggest me in this.
THANKS,
JOSEPH.

Hi Jospeh
Can you please tell what is your back end system? as surpreet said, if your back end system have sap_hr install both virsahr and virsanh.
In the sap GRC AC 5.3 installation guide page 25 you will understand which is the correct jco you have to select according to your back end system
An SAP GRC Risk Analysis and Remediation 5.3
RTA to an SAP_HR backend
use following JCOs
VIRSAHR_MODEL & VIRSAHR_METADATA
VIRSAHR_01_MODEL & VIRSAHR_01_METADATA
VIRSAHR_02_MODEL & VIRSAHR_02_METADATA
An SAP GRC Risk Analysis and Remediation 5.3
RTA to a non-HR SAP backend
use following Jcos
VIRSAR3_01_MODEL & VIRSAR3_01_METADATA
VIRSAR3_02_MODEL & VIRSAR3_02_METADATA
VIRSAR3_03_MODEL & VIRSAR3_03_METADATA
An SAP GRC Risk Analysis and Remediation 5.3
Real Time Agent (RTA).
use following Jcos
VIRSAXSR3_01_MODEL & VIRSAXSR3_01_METADATA
VIRSAXSR3_02_MODEL & VIRSAXSR3_02_METADATA
VIRSAXSR3_15_MODEL & VIRSAXSR3_15_METADATA
I hope your doubts regarding Jcos are over now.

Installation issue on GRC 7.2.3 on Linux with EBS 12.0.4

I am following doc http://download.oracle.com/otn_hosted_doc/logicalapps/723Install_GrccSuite.pdf to install GRC. I am doing an installation on Linux and in the section where we are installing Concurrent manager server components.
As per doc, I have to source the APPL_TOP and run ladbinstall.bin (I am running in GUI mode and not Silient)
The following is the output.
-bash-3.1$ ladbinstall.bin
Preparing to install...
Extracting the JRE from the installer archive...
Unpacking the JRE...
Extracting the installation resources from the installer archive...
Configuring the installer for this system's environment...
awk: error while loading shared libraries: libdl.so.2: cannot open shared object file: No such file or directory
dirname: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
/bin/ls: error while loading shared libraries: librt.so.1: cannot open shared object file: No such file or directory
basename: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
dirname: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
basename: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
hostname: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
Launching installer...
grep: error while loading shared libraries: libc.so.6: cannot open shared object file: No such file or directory
/tmp/install.dir.32554/Linux/resource/jre/bin/java: error while loading shared libraries: libpthread.so.0: cannot open shared object file: No such file or directory
I thought that it is not able to find the libraries, so i updated the PATH where libraries are located. I still get the above error. Has anyone come accross this issue and would please share some light on it.
Thanks.
Edited by: user495493 on Jul 17, 2009 7:51 PM

This pulls the value from the APPS Profile
     SQL> select FND_PROFILE.value('APEX_LAUNCHER') from dual ;
     FND_PROFILE.VALUE('APEX_LAUNCHER')
     http://our.group.site:7878
But
String l_launcher = ctx.getProfileStore().getProfile("APEX_LAUNCHER"); ------------- doesn't return http://our.group.site:7878
l_launcher = l_launcher + "/apex/f?p=" + p_application + ":" + p_page;
l_launcher = l_launcher + "::APPS:::" + p_item_names + ":" + p_item_values;
if (ctx!=null) ctx.freeWebAppsContext();
response.sendRedirect(l_launcher);
Instead I get
http://our.app.site:8030/OA_HTML/null/pls/apex/f?p=140:2::APPS::::
Suppose to get
http://our.group.site:7878/apex/f?p=140:2::APPS::::
404 Not Found
Resource /OA_HTML/null/pls/apex/f not found on this server

Post Installation Checklist: AC GRC 10

Hello All,
We have been told by the Basis team that the GRC PRD is ready for use after they have installed it. Just wanted to know if there is any post installation guide or document that we can refer to, to make sure we have the complete installation and settings before we go for the configuration and import of transports from DEV/QAS. An example of things to check can be:
1. If the NWBC is working fine.
2. If all the Connectors are created properly.
3. If all the relevant BC sets are activated.
We need this information to make a check that when the Basis team hands over the PRD server for us to use, we do not miss out checking anything that can have an adverse affect later when we import our configs and data from DEV or QAS.
Thanks and look forward to hear soon.

Hi,
You can get more ideas about the same from the installation guide where you can have a look to see which are the important areas that you need to focus on. Broadly, these are:
SP Levels for the key components.
SICF services
BC sets.
Hope that helps.
Regards,
Hersh.

Sequence of Installs of RTA and SCA files for GRC AC 5.3

Hello,
I would like to confirm the correct sequence of applying RTA and SCA files for GRC AC 5.3.
On ABAP Stack
1- Install VirsaNH RTA on ECC 6.0 System with SAINT
2- Install VirsaHR RTA on ECC 6.0 system which has SAP_HR
3- Install both VirsaNH RTA and VIRSAHR RTA on a system which is SAP HR
4- Install VIRSANH RTA on BI System. (There is no need of VirsaHR on BI system)
5- Install all Support Packages up to 10 or 11 for VIRSANH & VIRSAHR with SPAM
Next
On JAVA Stack
6- Install
VIRCC00_0.sca
VIRAE00_0.sca
VIRRE00_0.sca
VIRFF00_0.sca
7- Install VIRACLP00_0.sca
8- Then install VIRACCNTNT.SAR
9- Next install EP RTA VIREPRTA00_0.sca
10- Install all Java patches for the above components
Based on the above,
a- Plz confirm if the above sequence is right.
b- My question is can I install 6, 7,8, 9 with JSPM at once as one step?
c- Also can I install SCA files with JSPM first and then install RTA files on ABAP stack later?
d- Also we have BI system with ABAP & JAVA Stacks. Is VIRSANH sufficient for both ABAP & JAVA, or do we need an additonal RTA for BI JAVA ?
Thanks for your valuable inputs in advance.
Regards,
Haleem

Hi,
> 1- What is the UME of your BI Java stack ?
>
> Answer: We have installed BI JAVA, EP, EP Core, so we use SSO with EP and BI ABAP. So the portal is UME for BI Java stack.
>
Check below link which will answer your queries:
Java RTA for GRC 5.3
> 2- Check SAP Note 1174625 - Access Control 5.3 Java Support Pack Installation
>
> I checked the note 1174625, which says the following
>
> All of the sap.com/grc files have to be undeployed except the db and dictionary files for each component. The files that are NOT to be undeployed are:
>
> - sap.com/grc/ccxsysdb
> - sap.com/grc/aedict
> - sap.com/grc/redictionary
> - sap.com/grc/ffdb
>
> Since this is a GRC AC 5.3 install on a fresh Netweaver 7.0 EHP1 Java stack install, do I need to undeploy all the above components, before doing AC 5.3 install, as mentioned in the note.
>
This is used when you do upgrade your old GRC release to latest one. So if you are doing fresh install then you need not to do these steps.
> 3- Also this note 1174625 answers to most of my questions, but does not mention anything about VIRACCNTNT.SAR. Is >this SAR file installed on JAVA Stack or ABAP stack? Is there a OSS note on VIRACCNTNT.SAR?
>
This file contains Roles, Rules, functions for RAR, CUP, ERM etc. in txt files which you need to upload when you will do the configuration of GRC.
Thanks
Sunny

GRC Access Control 5.3 installation

Hello all,
I'm planning the installation of SAP GRC Access Control 5.3 and have a few questions. In the software download section of SAP Service Marketplace, the most recent installation files are for Virsa 5.2. Under SAP GRC Access Control, there are no installation files that I can see. (I tried several different OSS IDs including partner ID, so I do not think it is a licensing issue) Could someone please confirm that the Virsa 5.2 files represent GRC Access control 5.3?
One reason for this question is that in Solution Manager, under Business Blueprint (SOLAR01), SAP GRC Access Control 5.3 is displayed as the default selection for Internal Controls. Is SAP planning to release installation files in the near future for SAP GRC Access Control 5.3? If so, when?
Thanks in advance,
Glen Hoaglund
Capgemini Basis Consultant
Edited by: Glen Hoaglund on Jun 3, 2008 3:13 PM

John & Glen-
Right now Compliance Calibrator 5.3, now Risk Analysis and Remediation, which is part of Access Control 5.3 is currently in Ramp Up, and will be available in October 2008.
You can download the User manuals for 5.3 from SAP Marketplace. That will give you an idea of what functionalities 5.3 has and how it is structured.
From my observation of 5.3, and having implemented 5.2 for some clients, 5.3 does have some functionalities which are missing in 5.2. But for setup and sizing, it is always recommended that you allocate GRC on its own server with a lot of space. The applications are very memory-intensive.
I believe FireFighter, or Superuser Privileged Access in 5.3, will still reside in the ABAP stack, with the reporting done on both ABAP and Java stacks. The bulk of the functionality of 5.3 is the same as 5.2.
Let me know if you have any questions...
Ankur
GRC Consultant

Installation of SAP GRC AC 10 without SAINT?

Hi,
We are facing the issue that some pre-installation requirements are not met - SP Level of SAP_BASIS.
SAINT doesn't support the installation because of missing pre-installation requirements.
Do you know another way to install SAP GRC AC 10 Plug-In's? We would like to test it in our Sandbox.
Thanks for feedback.
Kind regards,
Bianka

Hi Bianka
What SAP_BASIS version are you on? According SAP Install Guide 4.6C is minimum level. If system is older than that you might need to look at a legacy connector instead.
This post most likely belongs in a different community - Basis related for system installation question
Regards
Colleen

Query on Installation of GRC AC 5.3 RAR component

Hi,
We are implementing SAP GRC 5.3 - RAR Component. Can the tool needs to be implemented in the SAP Server itself or can it be installed in a different server other than SAP.
Can GRC tool be installed in a different server but falling under the same system landscape directory?
In future we are also planning to go for the other components of GRC like CUP, SUPM & ERM. In that scenario, does these components also needs to be installed in SAP Server itself.
Please suggest the SAP best practice of installation of SAP GRC 5.3
Request the experts to reply at the earliest.
Thanks and Best Regards,
Srihari.K

Hi Srihari,
I agree with Frank and you need to go to SAP Service Market Place and check out the Installation and Configuration guides for SAP GRC 5.3 at https://service.sap.com/instguides.
I also recommend to go through these articles published on SDN.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/408bd039-d9c1-2a10-0fab-a92b97c7cd25
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a07b4cc8-1a57-2b10-1798-d2fec068473a
Hope this helps as a good starting point for learning about SAP GRC Installation reqs.
Regards,
Kiran Kandepalli.

Preconfigure GRC AC 5.3 Installation

Similar Messages

Maybe you are looking for