3147884 - Manual Installation Steps for NetWeaver Java on Azure Files SMB

When installing SAP NetWeaver Java application server using a SAPMNT share on Azure Files SMB, SWPM will fail with an error.

The message in SWPM will be similar to:

Last error reported by the step: Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied”

Analysis of the sapinst_dev.log will show of the error messages below:

 Copying file \\<<storage_account>>.file.core.windows.net/sapmnt/W02/SYS/exe/jvm/NTAMD64/sapjvm_8.1.083/sapjvm_8/jre/lib/security/java.security to \\<<storage_account>>.file.core.windows.net/sapmnt/W02/SYS/exe/jvm/NTAMD64/sapjvm_8.1.083/sapjvm_8/jre/lib/security/java.1.security

'\\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security', , ATL::CSid &, bool & ownerChanged

Cannot set the owner of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security to S-1-5-21-2936895289-852576116-2267775737-1150 because the latter is neither the current user nor the Administrators group. The Administrators group will be set as owner.

Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.

Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.

Failed action:  with parameters

Error number 5 error type WIN32_ERROR

Unable to set access rights of \\<<storage_account>>.file.core.windows.net\sapmnt\W02\SYS\exe\jvm\NTAMD64\sapjvm_8.1.083\sapjvm_8\jre\lib\security\java.1.security. SetNamedSecurityInfo: Access is denied.

Trying to take the ownership of the file will fail, if Windows Explorer or the takeown.exe command-line tool is used:

Explorer:

Takeown.exe:

Windows Server 2016, 2019 and 2022.  Azure Files SMB connected using Azure Active Directory Authentication.

For more information on Azure Files SMB with Azure Active Directory review

Active Directory Domain Services Overview | Microsoft Docs

Azure VMs HA for SAP NW on Windows with Azure Files (SMB) - Azure Virtual Machines | Microsoft Docs

swpm, access denied, azure files smb, azure, cluster, mscs, sapglobalhost, java, error 5, sapinst, sapinst.exe, take ownership, java security , KBA , BC-OP-NT-AZR , Windows on Microsoft Azure , How To