No switch to HTTPS occurred, so it is not secure to send a password

[Former Member]

Hi,

We have deployed ESS/MSS 1.0 business package. When clicking on Budget service, which are linked to R3 system shows the following error:

No switch to HTTPS occurred, so it is not secure to send a password

i have activated all the services from SICF t-code.

Regards,

Jigar Oza

[Former Member · Accepted solution]

Hi,

If you are having the url like http://portalname:50000/irj. don't use that....

It should be http://portalname.company.com:50000/irj

It will resolve your issue.

/padmanaban

[Former Member · Accepted solution]

Hi Padmanaban,

Thnks for your help have rewarded. But Can you explain me the technical reason behind it, why it was not switching..

i mean.. why it works only with FQDN ..

Regards,

Jigar OZa

[Former Member · Accepted solution]

Hello,

I also have exactly the same issue.

Can you please let me know where exactly we need to maintain the FQDN correctly as I am also getting the same issue while logging to the SAP s/m. Login is possible with the user-id and password.

Thanks,

Pradeep

[Former Member · Accepted solution]

thanks.

[chhotanbarua]

Hi,

I am also facing same problem.

here, SAP Gui for HTML only working for

Case A:

http://test1.testgroup.com:8000/sap/bc/gui/sap/its/webgui/

But in Case B , i am getting No switch to HTTPS occurred, so it is not secure to send a password problem:

http://IP:8000/sap/bc/gui/sap/its/webgui/

Please also share, where I have to maintain SAP router information.

regards.

[Former Member]

Hi

First I did all the setup of the HTTPS in SMCIM (also all necessary RZ10 settings, SAPCRYPTOLIB etc etc). However, what finally helped get rid of this issue was a "final" change on the service in SICF. So in this example we use SICF service "webgui". If you use other services, you need to maintain them as well if needed. So here is what I did:

SICF -> ServiceName ->webgui (located also under default_host/sap/bc/gui/sap/its)

In order to get rid of the issue with "not switching to HTTPS" in IE (or Mozilla or whatever browser front end is using) I performed following tasks:
- rightclick on 'webgui' service and choose "Display service"
- Change (press pen up in left corner)
- Navigate to tab called "Error Pages"
- Doubleclick on "Configuration" at the bottom
- Change to "Switch to HTTPS" (located in section 'Actions During Logon"
- Also, checkmark "Do Not Display Warnings".
- Save and rightclick again on service 'webgui' and select "Test Service"

It sure helped me get rid of the "Error no switch to https occurred so it is not secure to send a password" issue.

Just wanted to share my input and hope it might help others.

Cheers

[Former Member]

Hi Pelle,

Thanks for sharing your input. One question did you get prompt for "Enter User Password" when you click on SAVE WebGui Service ?

If so what's the standard password for user - sap

Thanks in advance.

BN

[Former Member]

Hi Brajendra

I am sorry, I have no recollection of a prompt for password when changing the WebGui Service. Might be a new feature if you are on a very new release (NW 7.40)?

I assume you are referring to user SAP*? In all later releases for SAP, passwords for SAP standard users (like DDIC, SAP*, j2ee_admin etc) is set during the installation (Master Password).

In older releases SAP had standard default password already pre-set, please check link: Protecting Standard Users - SAP NetWeaver Application Server ABAP Security Guide - SAP Library

If that does not apply, you have to check with your Basis team (or whoever did the installation) what the password is set to.

Sorry for not be able to be more of assistance.

Br //Pelle

[Former Member]

Hi Pelle,

yes I am using NW7.4 and I am a BASISISenior Most Basis since the days of 3.0F). I am using SAP NW SSO2.0. its configured and working fine. As a test I was doin the WebGui test and there I am getting an error  no Switch. I saw your post and thats the only thing I think have done so, changing any configuration on WebGui create a Workbench Transport. I did the change as mentioned in your blog but still it did/t work. Creating Message to SAP.

Thanks for you response.

BN

[Former Member]

Okey, always hard to tell how much people know or may not know so my link and comment were all in a friendly meaning. My guess is that this beahvior is new from 7.4. Wish you the best in solving the issue. Cheers

[Former Member]

Hi Jigar,

Is your portal is accessed using HTTPS and ECC using HTTP?

Regards

Deb

[Former Member]

no, both are been accessed using http only

[Former Member]

Hi!

So you have two options:

1. change the iView to use HTTP protocol and not HTTPS.

2. configure HTTPS access in ERP backend system

The question is: what is your goal? HTTP or HTTPS? and for what?

Regards,

Volker

[Former Member]

hi,

there is no property to set HTTP property for an iView.

Our goal is to use HTTP and even backend system is HTTP.

It is an Java WebDynpro iView.

Regards,

Jigar Oza

[former_member304001]

Try these

Goto SE80 -- Locate the Internet Services under drop down -- SYSTEM and WEBGUI under below -- Publish these services with the Context Menu -> Publish -> Complete Service

and also check ur ITS settings in Sytem object of portal -- give path --/sap/bc/gui/sap/its/webgui

Regards

Krishna.

[Former Member]

Hi!

Ah it's WebDynpro Java.

Did you check your JCo Connections? Do they work properly?

You can do it in the Portal via Content Management --> Web Dynpro

Regards,

Volker

[Former Member]

hi ,

The JCO connection is working poperly . According to my understanding if the JCO connectionis not working the iview will not be able to display know . Since its asking for the user id and password of the R/3 system.

and shows the message mentioned above .

is any other place where the switching from Http to https happens ..

Thanks for your reply

[Former Member]

Ah, hopefully now we are on the right track.

The fact seems to be that nobody in your system really wants to switch tp HTTPS. This message just tells you that you hand over to the backend a user and a password and you do this via an unsecure protocol.

Did you configure SSO via SAP Logon Ticket?

If not, do it and see whether problem / message is gone.

Is it an HTML message or a brwoser popup?

If HTML mesage, please send us HTML Source Code, if your problem is not solved.

Regards,

Volker