# SAP Connectivity Checklist

## 1. Prerequisites

### 1.1 Prerequisites for ICM parameters

{% hint style="warning" %}
**Note**: These parameters are required to be maintained in all ICM instance profiles.
{% endhint %}

Go to T-code `RZ10` for each instance profile and confirm if the below ICM parameters are maintained.

| Parameter name                 | Parameter value                 |
| ------------------------------ | ------------------------------- |
| icm/HTTPS/client\_sni\_enabled | TRUE                            |
| ssl/client\_sni\_enabled       | TRUE                            |
| ssl/client\_ciphersuites       | 150:PFS:HIGH::EC\_P256:EC\_HIGH |
| ssl/ciphersuites               | 135:PFS:HIGH::EC\_P256:EC\_HIGH |

If the parameters are not present or if the parameters are not matching, then add or update the parameters with the above-mentioned values. Once updated, restart ICM for this to work. 

{% hint style="info" %}
**Note**: Some systems may need application restart as well. But check the connectivity accordingly step by step with minimum downtime.
{% endhint %}

### 1.2 Prerequisites for SSL handshake

CommonCryptoLib (SAPCRYPTOLIB) Version 8.5.34 and above;

Kernel release should be 722 and above;

If is it below the given version, make sure you upgrade the kernel patch as per your system version. The help documentation for the kernel upgrade and the required information are in the below SAP notes.

1. 2124480 - ICM / Web Dispatcher: TLS Extension Server Name Indication (SNI) as client.
2. 2083594 - SAP Kernel Versions and SAP Kernel Patch Levels.
3. 2350788 - Using Kernel 749 instead of Kernel 740, 741, 742 or 745

## 2. Client SAP Basis Team Activity

1. Import the corresponding SSL/TLS certificate of ClearTax API in **`STRUST`**.
   * To choose the certificates corresponding to the API you want to use, refer to the [Product Environment Information](#product-environment-information).
   * For detailed steps on how to import SSL/TLS certificates in the T-code STRUST, refer to [Steps to import SSL/TLS certificates in SAP](/cleartax-docs/add-ons-and-extensions/sap-add-on/sap-connectivity-checklist/steps-to-import-ssl-tls-certificates-in-sap.md).
2. Check and ensure that the **`icm/https/client_sni_enabled`** parameter is set to `TRUE`. 
   * For detailed steps on how to check this parameter, refer to [Steps to check ICM settings in SAP](/cleartax-docs/add-ons-and-extensions/sap-add-on/sap-connectivity-checklist/steps-to-check-icm-settings-in-sap.md).
3.  Check the minimum TLS version supported by the SAP system.
   * To know the supported TLS versions corresponding to the API you want to use, refer to the [Product Environment Information](#product-environment-information).
4. Test and confirm that the connectivity to the ClearTax API hostname is working as expected. 
   * For detailed steps on how to test connectivity, refer to [Steps to test connectivity in SAP](/cleartax-docs/add-ons-and-extensions/sap-add-on/sap-connectivity-checklist/steps-to-test-connectivity-in-sap.md).

## 3. Client Network Team Activity

1. To establish connectivity with ClearTax Product APIs from ERP, you need to allow outbound traffic from your ERP to the respective ClearTax Product API.
2. This will require whitelisting the corresponding hostname and/or IP of ClearTax API in your ERP network and/or firewall.
3. To know the hostnames and IPs corresponding to the API you want to use, refer to the [Product Environment Information](#product-environment-information).

## 4. Product Environment Information

For information on environments, host name, IP, port, TLS certificates, refer to:

### **4.1 India E-Invoice, E-Waybill, GST 2.0, Max ITC**

{% content-ref url="/pages/ZVvR8S3TgQy6o8n9twSE" %}
[CFC API Reference](/cleartax-docs/clear-finance-cloud/cfc-api-reference.md)
{% endcontent-ref %}

### **4.2 KSA E-Invoice**

{% content-ref url="/pages/-MjhxHY6474wS\_rwJLz2" %}
[E-Invoicing KSA API Reference](/cleartax-docs/e-invoicing-ksa-api/e-invoicing-ksa-api-reference.md)
{% endcontent-ref %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cleartax.in/cleartax-docs/add-ons-and-extensions/sap-add-on/sap-connectivity-checklist.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.