Skip to content

Register an RFC Server in SAP with Kernel Release 720 and higher

The following article shows how to register an RFC server in SAP releases with Kernel release 720 and higher.

As of SAP Kernel Release 720, you can use the parameter gw/acl_mode to set an initial security environment to start and register external programs, e.g., RFC Server required for DeltaQ processing / customizing check. If this value is set to 1, the DeltaQ component cannot register the RFC Server and the Customizing Check returns the following error message: 

RFC server is not working, please check gateway info.

There are two options to avoid this error:

  • Set the Profile Parameter gw/acl_mode to 0.
  • Define a whitelist of programs that can register at the SAP Gateway.

Change the Profile Parameter gw/acl_mode

When setting the profile parameter gw/acl_mode to 0 (default is 1), all RFC destinations / RFC servers with different Program IDs can register.

  1. Use SAP transaction RZ10 to open the "Edit Profile" menu.
  2. Select the profile name Default and Extended Maintenance.
  3. Click [Change] and set the profile parameter gw/acl_mode value to 0
    SAP_parameter

The Customizing Check now executes without error messages.

Define a Whitelist of Programs at the SAP Gateway

To define a whitelist of programs that can register at the SAP Gateway, create two files named secinfo and reginfo. Both files don't exist per default.

Warning

Registration of the RFC-server fails.
The content of both files secinfo and reginfo override the parameter gw/acl_mode.
Make sure that both files secinfo and reginfo allow the registration of the RFC-server.

See the example below.

  1. Create the files secinfo and reginfo. The files must have the following content:

    #VERSION=2
P TP=* HOST=internal,local CANCEL=internal,local ACCESS=internal,local
# the following line should be the LAST line in the secinfo file
P TP=XTRACT01 USER=* USER-HOST=* HOST=* 

    #VERSION=2
# the following line should be the LAST line in the reginfo file
P TP=XTRACT01

  2. Copy both files to the following directory (data path): /usr/sap/<SID>/<INSTANCE>/data/

  3. Extend the following two parameters to the Profile Parameter in the SAP transaction RZ10:
    • gw/reg_info = $(DIR_DATA)/reginfo
    • gw/sec_info = $(DIR_DATA)/secinfo
  4. Restart the gateway or re-read the security parameters using SAP transaction SMGW (navigate to Menu -> Goto -> Expert Functions -> External Security -> Reread).

The Customizing Check now executes without error messages.

Last update: July 1, 2024