How To Fix SECAUDIT087 - Kernel parameter &1 = &2 does not match the current SHM value &3

SAP Error Message - Details

• Message type: E = Error

• Message class: SECAUDIT - Message class for security audit

• Message number: 087

• Message text: Kernel parameter &1 = &2 does not match the current SHM value &3

What causes this issue?

The value saved for the kernel parameter is different to the
value that is currently in effect. The kernel parameter change will
not take effect until the system is restarted.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

If possible restart the system.
When restarting, avoid profile changes that require the saved
value.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SECAUDIT087 - Kernel parameter &1 = &2 does not match the current SHM value &3 ?

  The SAP error message SECAUDIT087 indicates a mismatch between a kernel parameter and the current shared memory (SHM) value. This typically occurs in the context of SAP's security auditing features, where certain kernel parameters are expected to align with the system's shared memory settings.
  Cause:
  The error arises when the kernel parameter specified (denoted as &1) does not match the value currently set in the shared memory (denoted as &3). This can happen due to:
  
  Configuration Changes: Changes made to the kernel parameters in the SAP system profile or during system upgrades that have not been reflected in the shared memory settings.
  System Restart: If the system was not restarted after changing kernel parameters, the new values may not be applied.
  Inconsistent Settings: Manual changes to the kernel parameters that do not correspond with the expected values in the shared memory.
  
  Solution:
  To resolve this error, you can follow these steps:
  
  
  Check Kernel Parameters: Verify the kernel parameters in the SAP profile. You can do this by checking the instance profile (usually found in the directory /usr/sap/<SID>/SYS/profile/).
  
  
  Compare Values: Compare the kernel parameter value (&2) with the current SHM value (&3). You can use transaction RZ10 to view and modify the profile parameters.
  
  
  Adjust Parameters: If the kernel parameter value is incorrect, update it in the instance profile. Make sure to set it to the value that matches the current SHM value or vice versa.
  
  
  Restart the System: After making changes to the kernel parameters, restart the SAP system to ensure that the new settings take effect.
  
  
  Check Shared Memory Settings: You can check the shared memory settings using the command ipcs -m on the operating system level to see the current shared memory segments.
  
  
  Review Documentation: Consult the SAP documentation or notes related to the specific kernel parameters for any additional context or requirements.
  
  
  Related Information:
  
  SAP Notes: Check for any relevant SAP Notes that might provide additional insights or specific instructions related to the error.
  Kernel Version: Ensure that you are using a compatible kernel version for your SAP system, as certain parameters may vary between versions.
  System Logs: Review the system logs (transaction SM21) for any additional error messages or warnings that could provide more context about the issue.
  
  By following these steps, you should be able to resolve the SECAUDIT087 error and ensure that your SAP system's kernel parameters and shared memory settings are consistent.