icmon -a 新建如下用户.
1. As user <sid>adm go to the directory where the executables are kept and call up icmon ‑a pf=<instance profile> .
The following appears:
Maintain authentication file
============================
File name (icmauth.txt): .
2. If you are happy with the default file name, press the enter key, otherwise enter a different file name or path.
3. In the next menu choose a (add user to set).
4. Enter the user name, then the password twice, the group name, the subject of the X.509 certificate (wildcards allowed, and it can be left empty).
User Name: icmadm
Enter Password: *****
Re-enter Password: *****
Group name: admin
Subject Value of Client Cert: CN=template,*
new entry locally created
The user created is in group admin, the user is therefore an administration user without administration authorization. In particular this user can create further users in the Web admin interface.
If you select another group name other than admin, create a monitoring user that can monitor, but not administrate, the ICM/Web Dispatcher.
If you want a user to be able to log on only with the X.509 client certificate, you can enter an x as the password (with queries), which makes the following entry (in the example) in file:
icmadm:x:admin:CN=muster,*
5. Choose s (save changes of set to file), to copy your changes from the local buffer to the authorization file.
6. Choose q, to quit the program.
然后然后icmauth.txt复制到 :D:\usr\sap\SA1\SYS\global\security\data
可以 可以在 SAPGUI用 T-CODE :SMICM 然后从点击 display-All (shift+F5)显示 trace 文件
然后 从web http://localhost:8000/sap/admin 输入用户名，再进入管理UI 了
然后
然后
