The Line Opener Program LOP enables SAP to open service connections to your systems independently but in a controlled way. The installation of the LOP is optional but it can help to reduce the problem resolution time significantly. If an SAP employee requires access to one of your systems, an opening request will be created. Naturally only opening requests will be processed for systems you gave SAP explicitly the permission for independent opening. The LOP checks periodically via a https request on the SAP Service Marketplace whether an opening request from SAP exists for one of your systems. If such a request is found, the LOP temporary opens the connection between your SAProuter and SAP automatically and you will get notified by e-mail that the network connection to a dedicated system has been opened.
Currently the LOP is a standalone program which runs on windows platforms only. An integration of the LOP functionality into the Solution Manager is currently on its way and planned to be released in mid 2013.
There are no known security issues with LOP: Only SAP will have access to your system under the control of the customer and all activities will be logged as usual.
However we recommend to use the LOP functionality within Solution Manager as soon as it is available. This will cover better operational aspects such as monitoring, automatic start during system initialization, more scalability, platform independency and more customizing options.
If you want to use the standalone version of the LOP (Line Opener Program) please perform the following steps:
Steps to install LOP
- http://service.sap.com/lop
In order to communicate with the Service Marketplace properly the LOP needs to authenticate itself. This can be done by using valid user credentials (S-User-Id and password) or via an appropriate SAP Passport (digital certificate). We recommend to use the SAP Passport technique to access and communicate with the Service Marketplace.
Steps to generate and install a SAP Passport for a particular S-User:
- Go to SAP Service Portal http://service.sap.com/support
- Click on 'Maintenance and Service' tab
- Click on 'SAP Trust Center Service' sub-tab
- Click on 'Single sign-on in the SAP Service Marketplace with your SAP Passport' and follow instructions.
Known problems and solutions
[Problem]
When you tried to install LOP, you received an error 'Sorry, you're not authorized to register a Line Opener Program (LOP) for this system's SAPRouter because the SAPRouter belongs to another customer'.
[Cause]
Your SAProuter does not belong to your customer number and therefore you have no authorization to install LOP.
[Solution]
In the screen 'Service Connections - System ***' displayed by clicking a System ID, click the 'Show System' button at the bottom of the screen. Of course you can also display it in the System Data application http://service.sap.com/system-data.
At the button of the 'System', you find the SAP-Router data with the customer number. It must be your customer number.
If not, establish your own SAProuter and send a Customer message with the component XX-SER-NET-RCSC. Only after the new entry is maintained by SAP Network Team, you can update the System data in http://service.sap.com/system-data
If SAProuters are organized within a 'Corporate structure', you can install LOP without your own SAProuter. Refer to SAP Note 64410, 64417 and 64414.
[Problem]
You tried to install LOP but the installation process hangs.
[Cause]
LOP can only be installed on the Microsoft Windows platform (2000, XP or higher). It may be caused by an error from Windows.
[Solution]
Please check the SP status and apply the latest patches from Microsoft.
[Problem]
During the installation of LOP, you received an error HTTP_STATUS_PROXY_AUTH_REQ / Can't make https-request to the Service Marketplace.
[Cause]
In the LOP configuration, a flag was wrongly set to 'My Proxy Server requires Authentication' without User Name and Password. Or you have not entered the correct User Name and password for SAP Service Marketplace as well as your Proxy Server.
[Solution]
Start Lop.exe in your machine, and you will get the logon window.
Enter your S-user ID and password to access SAP Service Marketplace at the top. Set a flag in the Proxy only when the authentication is required in your Proxy Server with the proxy user name and password.
[Problem]
You received an error 'Sorry, the Line Opener Program (LOP) for the SAPRouter is not running, please choose another LOP or restart the LOP'
when you clicked a check-mark icon in 'Remote Login' and continued.
[Cause]
Either you hadn't started LOP program when you clicked on check mark icon or you started LOP program just before you clicked it. It takes some time for a server to find out you are logged in from LOP.
[Solution]
First start LOP program and then access SAP Service Marketplace to go further.
[Problem]
In the 'Choose Line Opener Program' screen after you clicked a check-mark icon in 'Remote Login', you saw the deletion icons for the listed entries except one entry to choose.
[Cause]
All listed LOP programs are registered, but not running at this moment except the one to choose.
[Solution]
Select the entry you can.
[Problem]
LOP has been successfully installed and worked fine but a pop-up appeared for granting certificate with accessing SAP Service Market Place each time.
[Cause]
Wrong 'Client Certificate Authentication' settings in your IE Browser.
[Solution]
Go to menu in IE Tools->Internet Options, select "Security" tab
and click on "Internet" icon. Click on "Custom Level" icon. Make sure the "Don't prompt for client certificate selection when
no certificates or only one certificate exist" is enable.
Please ensure that the option "Don't prompt for client certificate
selection when no certificates or only one certificate exist" is set
to enable for all zones (internet, local intranet, trusted sites,
restricted sites) at Tools-> Internet Options -> Security.