Inactive services in the Internet Communication Framework, SAP security note 517484

SAP security note 517484, "Inactive services in the Internet Communication Framework", is a note. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

After installing the SAP Web Application Server, the Internet Communication Framework (ICF) services are inactive, resulting in errors such as "Forbidden" in the browser.

For example, testing a web service using transaction WSADMIN may display the error: Could not determine WSDL address (ICF_ERROR), SRT_REG038

Solution

To resolve the issue, activate the required ICF services using transaction code SICF. Follow these steps:

• Open Transaction SICF: log into your SAP system and enter transaction code SICF.
• Navigate to the Relevant Service Node: for example, to activate services for the /SAP/public/icman URL:
  • Expand the tree to locate the default_host service.
  • Within default_host, navigate to sap > public > icman.
• Activate the Service:
  • Method 1: right-click on the desired service node and select Activate Service from the context menu.
  • Method 2: select the service node, then go to the menu and choose Service > Activate.
• Repeat as Necessary: ensure that all parent nodes in the ICF tree are activated to prevent unexpected errors. Activate any additional services required for your specific operational scenario.

Reason and prerequisites

This behavior is intentional for security reasons. Upon installation, all ICF services are set to inactive. Administrators must manually activate the necessary services based on the application's requirements.

Affected components

• SAP_BASIS: 620 to 640, 700 to 702, 710 to 730