ABAP developer keys and object keys hack

Keygen

A lot of basis and ABAP people feel protected by the ABAP keys and object keys for standard SAP changes. They have to be called off at SAP marketplace keys section.

Let me already give away the clue: since quite some time there is a KeyGen for ABAP and object keys. The protection is gone.

This blog will answer following questions:

  • Where can I download the ABAP keygen?
  • How to run the ABAP keygen?
  • How should I protect my system from unwanted ABAP changes?
  • S4HANA does not use developer keys and object keys any more, how should I protect my S4HANA system from unwanted ABAP changes?

Where can I download the ABAP keygen?

Google for SAP IWR Object key generator. Or click here for a copy:

Upon download: rename the file to .zip and unzip it.

Running ABAP keygen

Running the executable is simple. But you need to run it in Windows 7 compatibility mode.

Keygen screen

Fill out the data and hit generate…. that’s all.

The use of this tool is at your own risk. Most admins don't like you to use this tool at all.

The whole idea of this blog is to show not to rely on the developer key procedure.

How should I protect developments?

The best way to protect your development is to carefully grant the S_DEVELOP privilege. Only give it to the right people and only give it to develop Z* range of code.

Deletion of old developer keys is still relevant. Read the dedicated blog on deletion of developer keys.

S4HANA developer key

The title is a bit misleading. In S4HANA there are no developer keys and object keys any more.

Background of this change be SAP can be found in OSS note: 2309060 – The SSCR license key procedure is not supported in SAP S/4 HANA.

So in S4HANA, you must set up authorizations for S_DEVELOP properly.

With S_DEVELOP you have to set create/change rights for the packages and or objects. For custom code only hand out Z* privileges.

If you hand out a * for the objects or classes, then the developer can also change standard SAP.

For more background and further information, read this dedicated blog on ABAP protection in S/4HANA.


21 thoughts on “ABAP developer keys and object keys hack”

    1. Hi Nisha,

      In S4HANA there are no devkeys and object keys any more. All is to be shielded via authorisations. If not shielded properly any developer can make modification to standard SAP software.

      1. Do sap HANA has License Key & maintenance Key?
        For Installing SAP Hana, Where is License (or Crack) & instillation file?
        Thanks.

        1. The same applies to the object registration: The editbox only accepts 9 digits for the system ID but it must be 10.
          Seems the editboxes are not working properly anymore, maybe one needs to run this on an older 32bit windows somehow…

          btw:
          It worked in the past!

          1. Run in compatibility mode XP SP3 mark everything and leave unchecked the 640 resolution, it works.

  1. The field installation number (10 digits) doesn’t work in win 10. Can you help me? I tried to change the compatibility mode and didnt work. Tks

    1. You should try on an old version of windows… this limitation is due to Windows 7 onwards treatment for text fields. You should try to run this program on Windows XP or Windows 2003 and copy the result to the actual machine installation

  2. Keygen version 1.70 doesn’t work correctly on Windows 10 – some text fields are too short (e.g. only 9 digits are allowed in Installation number field). I’ve patched Keygen for Windows 10 (version 1.71) and extended text fields to allow entering longer strings.
    You can download the fixed version from here: https://gofile.io/?c=mIY9wx
    Feel free to to upload the new version to the blog or share the file.

    1. Hi there the object key field (4/4/40) , in second field is not allowing 4 characters ,it is just taking 3 characters only. If this can be fixed as well

  3. SAP License is not install, please provide how to install the new license as using OS connect the LKEY is not working

    1. The keygen has issues. But the goal of the blog is not provide you with hacks around the license key (which is illegal).
      The goald is to make people aware that mainly the development and object keys (which do work) are not a protection measure.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.