SAPGUI V7.

50 Rel 5
INSTALLATION AND SETUP ON MAC

Version No. 1.0

Date 1/17/2019

Submitted by <username>
DOCUMENT REVISION HISTORY:

VERSION DATE AUTHOR REASON FOR CHANGE

1.0 1/17/2019 <username> Initial draft

1.1 A N Other Review and Content updates

DOCUMENT APPROVAL:

VERSION DATE AUTHOR SIGN OFF

Contributions by 1/17/2019 <username>

Technical Review 1/17/2019 A N Other Review and Content updates

Functional Review

Business Review

Management Signoff

2|P a g e Confidential <company>

Table of Contents
1 Requirements ............................................................................................................................. 4
2 Prerequisites .............................................................................................................................. 5
2.1..............................................................................................................................................................5
2.2 SAP GUI for Java using OpenJDK ........................................................................................................5
2.3 Documentation ................................................................................................................................5
3 Installation Overview .................................................................................................................. 6
4 Installation Detailed Steps .......................................................................................................... 7
4.1 Java..................................................................................................................................................7
4.1.1 Oracle JRE/SDK V8 Install ......................................................................................................................7
4.1.2 OpenJDK 11 Install ................................................................................................................................7
4.1.3 OpenJFX 11 Install.................................................................................................................................7
4.2..............................................................................................................................................................7
4.2.1 MAC Setup for JAVA (OpenJDK only) ....................................................................................................7
4.3 SAPGUI.............................................................................................................................................8
4.3.1 Documentation for the SAPGUI for JAVA .............................................................................................8
4.4..............................................................................................................................................................8
4.4.1 Install SAPGUI .......................................................................................................................................8
4.5..............................................................................................................................................................8
4.5.1 SAPGui Configuration File ....................................................................................................................8
4.6 Install Secure Login Client .................................................................................................................9
4.7 Kerberos Tokens ...............................................................................................................................9
4.7.1 Using Terminal Utility ...........................................................................................................................9
4.7.2 Using the Ticket Viewer Application .................................................................................................. 10
4.8 MAC SAPGui Setup using Configuration File..................................................................................... 13
4.8.1 How to View a Mac’s ~/Library folder ............................................................................................... 13
4.8.2 Setup/Edit the SAPGui entries ........................................................................................................... 15
4.8.3 Setup for SSO in the SAPGui .............................................................................................................. 16
A. Appendix ............................................................................................................................... 17
1.1 OpenJDK (Sapmachine) ................................................................................................................... 17
1.2 OpenJFX ......................................................................................................................................... 17
1.3 SAPGUI for JAVA ............................................................................................................................. 17

This section should begin on a new page. The TOC is the last element of the report to be completed. If changes are made
after the TOC is created, be sure to update to TOC as well.

3|P a g e Confidential <company>

1 Requirements
 You have to perform the tasks listed in this guide on an Apple MacBook running macOS 10.13 or later
 You need to download and install the correct files from the Team Room for SAPGUI 7.50 Rel 5
 The Kerberos application is required if you want to use SSO with JAVA SAPGui (Part of the MAC, no
download)
 The Kerberos tickets have to be renewed every time you disconnect from the <company> wireless
network, i.e. daily
 Secure Login Client from SAP
o [Link]
 Understand the SAPGui setup for SSO on MAC
o PlatinGUI750MacOSX_1.jar
o PlatinGUI750_5-[Link]
o [Link]
 Under the MAC Finder command options. You will need to access hidden files to update the JAVA
SAPGui configuration files
o Install an HTML editor (Serna_Free_4_2 is a good option)
 [Link]
o Unhide the directories/files using the command <SHIFT/Command/dot>
 JAVA – OpenJDK and OpenJFX (Sapmachine)
o [Link]
o sapmachine-jdk-11.0.1.13_osx-x64_bin.tar
o [Link] – no need to download this
 Documentation
o [Link] (online SAP documentation for the SAPGUI

4|P a g e Confidential <company>

2 Prerequisites

2.1 SAP GUI for Java using OpenJDK

Starting with the release of SAP GUI for Java 7.50 rev 5, there is a big change under the hood.

Before Java SE 11, the OracleJDK came with JavaFX bundled in the installation package. After Oracle has decided
to decouple JavaFX from the JDK and make it a separate open source project named OpenJFX, targeting
OpenJDK has become more attractive for SAP GUI for Java. JavaFX is the UI framework that provides the
functionality of a web browser component used by the browser control in SAP GUI for Java for rendering html
content.

In addition, facing the end of Java 8 public updates by January 2019, it obviously became necessary to move on
to a newer version of Java SE.

With SapMachine, SAP offers its own downstream version of the OpenJDK project. It is a SAP supported version
of OpenJDK for SAP customers and partners who wish to use OpenJDK to run their applications.

The new foundation to run SAP GUI for Java is SapMachine 11 and OpenJFX 11.

[Link]

2.2 Documentation
Start by getting the HTML Documentation file ([Link]). Extract the archive by double clicking on the file or,
assuming it is in the /Library/Java/JavaVirtualMachines folder, write this in your Terminal:
cd /Library/Java/JavaVirtualMachines
unzip [Link] (windows only) (Mac will auto unzip the file into a directory)
run [Link] to see the SAPGUI documentation

5|P a g e Confidential <company>

3 Installation Overview
The installation and setup of the JAVA SAPGUI on MAC workstation consist of multiple steps that need to
be completed:
 Download/access the SAPGUI installation files per the TEAMS Room link provided above
 Install
o Install either Oracle JAVA or OpenJDK and Open FX
 No longer support for SAPGUI V7.50 Rel 5
 Install Oracle JAVA by executing the file [Link]
 Supported for SAPGUI V7.50 Rel 5
 Install OpenJDK JAVA (SAPMachine 11)
 Install OpenJFX 11 (JAVAFX 11)
 JAVA setup steps for MAc
o Install the SAPGUI using java -jar PlatinGUI750MacOSX_1.JAR install (if not already installed)
o Install the SAPGUI update using java -jar PlatinGUI750_5-[Link]
java -jar PlatinGUI750_5-[Link] install
o Install the Secure Login Client by executing the file [Link]
 Setup configuration to access all the systems, as part of this
o Setup Ticket Viewer with valid Tickets
o Copy the SAPGUI configuration file to the correct directory
 Kerberos setup using the Secure Login Client
 Optional step - Install an XML editor, this is needed to edit the SAPGUI configuration file
 View a Mac’s ~/Library folder

6|P a g e Confidential <company>

4 Installation Detailed Steps
4.1 Java
NOTE: Please read the Notes about JAVA in the Prerequisites Section above before proceeding

4.1.1 Oracle JRE/SDK V8 Install

Install JAVA by executing the file [Link]
4.1.2 OpenJDK 11 Install
Start by getting OpenJDK (sapmachine-jdk-11.0.2_osx-x64_bin.[Link]), choose the macOS version. Extract
the archive by double clicking on the file or, assuming it is in the /Library/Java/JavaVirtualMachines folder,
write this in your Terminal:
cd /Library/Java/JavaVirtualMachines
tar xf openjdk-11+28_osx-x64_bin.[Link]

If you do so, /usr/libexec/java_home -V will show SapMachine. Moreover, if SapMachine is the most recent
JDK, the java command in the shell will use it. You can try this with java -version.

4.1.3 OpenJFX 11 Install

Start by getting Openjfx ([Link]),choose the macOS version. Extract the archive by double clicking
on the file or, assuming it is in the /Library/Java/JavaVirtualMachines folder, write this in your Terminal:
cd /Library/Java/JavaVirtualMachines
unzip xf [Link] (windows only) (Mac will auto unzip the file into a directory)
4.2
4.2.1 MAC Setup for JAVA (OpenJDK only)
From OS X 10.5, Apple introduced a command line tool (/usr/libexec/java_home) which dynamically finds the
top Java version specified in Java Preferences for the current user.
[Link] OpenJDK
Open a Terminal window
Open ~/.bash_profile in any text editor and add the line, then save and close the file
vi ~/.bash_profile
export JAVA_HOME=$(/usr/libexec/java_home)
:wq
Open a Terminal window and run the source command to apply the changes:
source ~/.bash_profile
Now check the value of the JAVA_HOME variable:

7|P a g e Confidential <company>

 echo $JAVA_HOME
The result should be the path to the JDK installation:

Library/Java/JavaVirtualMachines/[Link]/Contents/Home

[Link] OpenJFX
Open a Terminal window
Open ~/.bash_profile in any text editor and add the line, then save and close the file
vi ~/.bash_profile
export PATH_TO_FX=path/to/javafx-sdk-11.0.1/lib
:wq
Open a Terminal window and run the source command to apply the changes:
source ~/.bash_profile
NOTE: DO NOT Close this Terminal window, you will use it for the SAPGUI install

4.3 SAPGUI
4.3.1 Documentation for the SAPGUI for JAVA
See the instructions above under the Documentation section
4.4
4.4.1 Install SAPGUI
NOTE: Run the SAPGUI installs from the same Terminal window you used above

1. Install the SAPGUI using the command (if not already installed else skip only this step):
java -jar PlatinGUI750MacOSX_1.JAR

2. Install the SAPGUI update using the command:

java -jar PlatinGUI750_5-[Link]

4.5
4.5.1 SAPGui Configuration File
The JAVA gui has combined all the different configuration files into one file that is located in the directory
<home directory>/Library/Preferences/SAP/
Note: The MAC has three ~/Library directories, please make sure you access the correct one. The way to
do this is as follows:

8|P a g e Confidential <company>

 Open your finder window, then select the Macintosh HD drive/home directory, then press
Shift/Command/. simultaneously. This will make hidden files/directories visible.
Now select the Library directory that is visible under your home directory

Look for the [Link] file in the USER/LIBRARY/PREFERENCES/SAP/

directory, if it does not exist copy it from the Teams Room to this location. Further editing of this file may
be needed to adjust for your specific requirements.

4.6 Install Secure Login Client

Install the Secure Login Client by executing the file [Link]
The Secure Login Client is needed to allow the JAVA SAPGui to work with SNC and SSO, without this SNC/SSO on the
MAC does not work.

4.7 Kerberos Tokens

Kerberos assigns Tokens based on your AD ID and password, without this SSO on the MAC does not work.
Mac OS X comes with Kerberos already installed.

There are two ways to authenticate to your AD account using Kerberos on the Mac - using the command-
line Terminal utility, or using the graphical Ticket Viewer. This document describes both.

4.7.1 Using Terminal Utility

First, locate the Terminal application. This can be found in the Utilities folder:

Double-click on the Terminal application to launch it. Now type:

kinit <AD-username>

kinit <your ADusername>@[Link]

Enter your password when prompted:

rdu-mbp-17-1496:~ another$ kinit another@<company>.com

another.<company>.com's Password:

9|P a g e Confidential <company>

rdu-mbp-17-1496:~ another$

The klist command can be used to check the contents of your credentials cache. The following shows a
credentials cache after a successful authentication:

klist

rdu-mbp-17-1496:~ another $ klist

Credentials cache: API:502:10
Principal: another@<company>.com

Issued Expires Principal

Jun 11 [Link] 2018 >>>Expired<<< krbtgt/<COMPANY>.COM@<COMPANY>.COM
Jun 11 [Link] 2018 >>>Expired<<< HTTP/devus3src01.<company>.com@<COMPANY>.COM
Jun 11 [Link] 2018 >>>Expired<<< HTTP/prdus3bobj01.<company>.com@<COMPANY>.COM
Jun 11 [Link] 2018 >>>Expired<<< HTTP/dv2us3bobj01.<company>.com@<COMPANY>.COM
Jun 11 [Link] 2018 >>>Expired<<< HTTP/fs.<company>.com@<COMPANY>.COM
Jun 11 [Link] 2018 >>>Expired<<< SAP/SLL-ABAP-<SID>@<COMPANY>.COM
rdu-mbp-17-1496:~ another $

Note the Expired status, this means the token can no longer be used and the SAP SSO will fail

Every time you disconnect from the <company> Wireless you have to reset your Kerberos Tokens. The
process to do this is:

kdestroy -p <AD-ID>@<company>.com

rdu-mbp-17-1496:~ another$ kdestroy -p another@<company>.com

rdu-mbp-17-1496:~ another $ klist
klist: krb5_cc_get_principal: No credentials cache file found
rdu-mbp-17-1496:~ another $

To inilialize Kerberos with a new Token enter

Now you can see the valid token

rdu-mbp-17-1496:~ another$ kinit another@<company>.com

another.<company>.com's Password:
rdu-mbp-17-1496:~ another $ klist
Credentials cache: API:CAA145BC-F517-4F6E-AAA8-25FFC790D393
Principal: another@<COMPANY>.COM
Issued Expires Principal
Jun 12 [Link] 2018 Jun 13 [Link] 2018 krbtgt/<COMPANY>.COM@<COMPANY>.COM
rdu-mbp-17-1496:~ another$

4.7.2 Using the Ticket Viewer Application

The Ticket Viewer application provides a graphical front-end for ticket viewer application. It is slightly
hidden away in the Mac file system. Locate the application by opening the /System/Library/CoreServices
folder:

10 | P a g e Confidential <company>
 Locate the Ticket Viewer application:

And launch the application:

11 | P a g e Confidential <company>
 Click on Add Identity and enter your username@<company>.com and your password. You can tick the box
to remember your password in your keychain, but be aware of the security implications of this - that your
AD password is then only as secure as your login password. Click Continue to authenticate:

You should see the indication that a ticket has been successfully acquired. Click on Set as Default here.

You may find it useful to keep the Ticket Viewer application in your Dock:

12 | P a g e Confidential <company>
4.8 MAC SAPGui Setup using Configuration File
4.8.1 How to View a Mac’s ~/Library folder
There are three ways to easily view your hidden ~/Library/ folder.

In macOS Sierra Apple added a Finder keyboard shortcut that makes it possible to quickly show all the hidden
files and folders. You just need to do the following:

1. Open the Finder

2. Go to your Macintosh HD folder (access this from Devices in the left column)
3. Hold down Cmd + Shift + . (dot)
4. All the hidden files will become visible
5. Hold down Cmd + Shift + . (dot) a second time to hide the files again

The easiest way to find your hidden ~/Library/ folder is to do the following:

1. Open Finder
2. Hold down Alt (Option) and choose Go from the dropdown menu bar at the top of the screen
3. You will see the ~/Library folder listed below the Home folder

Alternatively, you could do the following:

1. Open the Finder

2. Choose Go from the menu bar
3. Choose Go to Folder (or Shift + Cmd + G)
4. Type ~/Library into the text box and click Go

You can now see and access the contents of the ~/Library which were previously hidden from sight.

[Link] Edit the SAPGui Configuration file

As of SAP GUI for Java 7.40, information formerly stored in seperate files for messager servers, routers,
system descriptions, etc., are now stored in one single Landscape file.
The JAVA SAPGui configuration file is located at:
USER/LIBRARY/PREFERENCES/SAP/[Link]

13 | P a g e Confidential <company>
 To understand the content of this xml file it is advisable to using a XML editor. Install a free XML editor,
Syntext Serna available at the TEAMs room link . Once installed open the [Link] with the
Serna editor using default values. It should looks like this:

Change the “Default View” to “Edit Attributes” in the top bar

Page down to the bottom on the left screen where it shows Messagservers

14 | P a g e Confidential <company>
 On the right side of the screen you need to edit the message server details for the systems you want to
work with.

Select the message server entry you want to update and then click the at the top of the screen
The selected message server entry would pop up and you can change the values for host, name and port
(you can ignore the UUID value)

Save the changes

Start the SAPGUI
4.8.2 Setup/Edit the SAPGui entries
Start the JAVA SAPGui
[Link] Change an existing entry

Select any of the entries

Select the advanced tab and edit the values as described below
[Link] Create a new entry

Click the create new entry button

Select the Advanced tab
Enter the details for Description, select the export mode check box, enter the connection string for the SAP
server
 conn=/H/<IP-address>/S/

Click save

15 | P a g e Confidential <company>
 Repeat this step for all servers you want to access, the list of host information is available in the hosts-
sapgui spreadsheet at the TEAMs Room link
4.8.3 Setup for SSO in the SAPGui
In this example we will update the <SID> entry, all systems work the same way
Select the relevant SAP server entry, click the change button
On the System tab select the drop down for System and pick <SID>, that will also auto complete the
Message server entry (with the details you updated in the Serna editing of the message server details)
Select the Group/Server drop down and pick the PUBLIC loadbalancing entry
Select the advanced tab and add the following to the displayed connection string -
&sncon=true&sncqop=9&clnt=100&user=<AD user ID>&lang=EN&sncname=p:CN=SLL-ABAP-<SID>. See
completed example for <SID> below:
 conn=/R/<SID>/G/<company>&sncon=true&sncqop=9&clnt=100&user=another&lang=EN&systemName
=<SID>&sncname=p:CN=SLL-ABAP-<SID>
Save the entry
Notes:
The only parameters that are required for SSO
 conn – Loadbalancing
 sncon – Secure Network Connection on or off
 sncname – Secure Network Connection name for the AD group of a specific server e.g. SLL-ABAP-<SID>
where <SID> is the SID of the SAP application
The optional parameters are:
 sncqop – security level
 clnt – SAP client
 user – SAP username
 lang – SAP Language

16 | P a g e Confidential <company>
A. Appendix
All of the Software and documentation can be
Links where the software can be downloaded for Teams

1.1 OpenJDK (Sapmachine)

Download
[Link]

1.2 OpenJFX

Download
[Link]
Install
[Link]

1.3 SAPGUI for JAVA

You will need a SAP S-ID to be able to access this URL, if you do not have one contact the SAP Basis team
ate appendices as necessary. Each appendix should begin on a new page.

17 | P a g e Confidential <company>