说明：红线到2020.1就走不通了;绿色线是可以通的；绿色虚线得通过配置才能通的。大前提系统激活启用签名notes功能，由于ECC的SAP_BASIS版本为731,2020年之后，SAP继续支持此版本系统通过RFC连接至SAP，但是不支持BW和SRM，通过RFC方式连接SAP支持新主干网，需要配置HTTPS或者download
service的方式自动下载notes
方案一：配置1和2线前提条件：1. CommonCryptoLib>=8.4.48
2.KERNEL 7.42 PL400 above3.一些证书和参数需要调整 导致的操作，升级CommonCryptoLib，配置参数和导入证书，届时需要停机。
方案二：配置曲线3的前提：note2537133 1.SAP_BASIS
release 700 and above可用
2.SLM需要升级7.2 SP以上
操作过程：
一、SPAM组件升级
1.1安装介质准备
SAP官网下载
[if !vml]
[endif]
1.2导入SPAM更新包
000 client DDIC用户下，T-code：SPAM
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
[if !supportLineBreakNewLine]
[endif]
导入完成升级完毕！
1.2实施TCIpackage
SAPK74000FCPSAPBASIS
[if !vml]
[endif]
transaction SPAM, choose Support Package Load Packages From Front End and navigate to the directory into which youdownloaded the SAR file.
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif][if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
安装note1995550即可；
[if !vml]
[endif]
二、notes实施
安装组件的notes：
0002536585
0002569813
0002606986
0002615270
1995550
0002134534
0002344014
2643757
签名认证notes：(TCI)
2576306
2408383
2827658
2508268
0002546220
https://launchpad.support.sap.com/#/notes/2408383
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
然后用SPAM（000）导入系统后，再实施note
[if !vml]
[endif]
三、KERNEL和SAPCRYPTOLIB更新
Manual_Config_HttpsConnections_NEWOSS.docx
手工升级KERNEL（更新到742PL400以上）和SAPCRYPTOLIB (8.4.48以上)2450794
2.1升级KERNEL
停机，备份（都在sidadm用户下执行）
bjvmrdbw:dw1adm 54> ./SAPCAR -xvf SAPEXE_500-80002573.SAR -R/sapmnt/DW1/exe/uc/linuxx86_64
./SAPCAR -xvfSAPEXEDB_500-80002572.SAR -R/sapmnt/DW1/exe/uc/linuxx86_64
2.2升级 SAPCRYPTOLIB
[if !vml]
[endif]
停机，备份，将新版的软件文件进行替换（都在sidadm用户下执行）
bjvmrdbw:/ #
cp -R /usr/sap/hostctrl/exe /usr/sap/hostctrl/exe_bk20191026
cp -R /usr/sap/DW1/DVEBMGS00/exe /usr/sap/DW1/DVEBMGS00/exe_bk20191026
cp -R /usr/sap/DW1/ASCS01/exe /usr/sap/DW1/ASCS01/exe_bk20191026
cp -R/sapmnt/DW1/exe/uc/linuxx86_64 /sapmnt/DW1/exe/uc/linuxx86_64_bk20161026
升级替换：
./SAPCAR -xvfSAPCRYPTOLIBP_8529-20011697.SAR -R/sapmnt/DW1/exe/uc/linuxx86_64
./SAPCAR -xvfSAPCRYPTOLIBP_8529-20011697.SAR -R /usr/sap/hostctrl/exe（root用户下）然后改下用户熟悉root:sapsys
./SAPCAR -xvf SAPCRYPTOLIBP_8529-20011697.SAR-R /usr/sap/DW1/DVEBMGS00/exe
./SAPCAR -xvfSAPCRYPTOLIBP_8529-20011697.SAR -R /usr/sap/DW1/ASCS01/exe
2.3验证：
验证KERNE版本
[if !vml]
[endif]
验证：SAPCRYPTOLIB版本
Starttransaction:SE37- Function Builder
Enterfunction module:SSF_KRN_VERSION
[if !vml]
[endif]
升级完成
2.4后处理
进行系统编译，SGEN（跑后台）
四、配置变更
2827658 - Automated Configuration of newSupport Backbone Communication - Update 02
先实施上述note和2827658（TCI方式）
Execute tasklist 'New OSS Communication':
Run transaction STC01 to open Task Manager for Technical Configuration
Select task list 'SAP_BASIS_CONFIG_OSS_COMM' - New OSS Communication
Press button 'Generate Task List Run (F8)'
Click on the parameter icon of the task 'New OSS Comm: Create HTTPS Connections for SAP Services (SM59)' to open UI
Maintain the fields Technical Communication User, Password and Router String (optional, if required), press 'Return', 'Save' and 'Back'
Remark: UI texts are only available when you use logon language English; Translation will be delivered with SPs
Execute the task list by pressing button 'Start/Resume Task List run in Dialog (F8)'
Click on the detailed log icon of each task to see the results of the task execution
[if !vml]
[endif]
[if !vml]
[endif]
[if !vml]
[endif]
添加应用实例参数：ssl/client_ciphersuites =150:PFS:HIGH::EC_P256:EC_HIGH
strust导入ssl证书
[if !vml]
[endif]
[if !vml]
[endif]
五，后处理
5.1 设置系统通过http协议连通SAP
se38->RCWB_SNOTE_DWNLD_PROC_CONFIG
[if !vml]
[endif]
5.2设置系统只下载签名的notes
SE38->RCWB_UNSIGNED_NOTE_CONFIG
[if !vml]
[endif]
六、其他问题
6.1 SPAM 一直黄灯
在BWQ系统遇到SPAM不能绿灯的情况,参照note：2448562
If you alreadyapplied a SAP note with TCIs and the error occurs, confirm the Support PackageManager queue by executing the function module OCS_API_CONFIRM_QUEUE in SE37(leave the import parameter IV_REQID empty). Afterwards, apply the correctionas described above to avoid this kind of problem in the future.
SE37
OCS_API_CONFIRM_QUEUE
[if !supportLineBreakNewLine]
[endif]