PI service users locked

PI service users comes default with the installation and exists along side the password within the client of Integration server and exchange profile.
They are utilized in the PI environment for dialog free communication between central components of Netweaver usage type PI and also between app servers and PI

Below are the roles assigned to them

Service User	Description	Assigned Role
PILSADMIN	User for the Change Management Server	SAP_XI_CMS_SERV_USER
PIREPUSER	User for the Enterprise Services Repository	SAP_XI_IR_SERV_USER_MAIN
PIDIRUSER	User for the Integration Directory	SAP_XI_ID_SERV_USER_MAIN
PILDUSER	User for the System Landscape Directory (SLD)	SAP_BC_AI_LANDSCAPE_DB_RFC
PIAPPLUSER	User for sender applications	SAP_XI_APPL_SERV_USER
PIRWBUSER	User for the Runtime Workbench	SAP_XI_RWB_SERV_USER_MAIN
PIAFUSER	User for the Advanced Adapter Engine	SAP_XI_AF_SERV_USER_MAIN
PIISUSER	User for the Integration Server	SAP_XI_IS_SERV_USER_MAIN
PIPPUSER	User for principal propagation	SAP_XI_APPL_SERV_USER

These users will be maintained in different connections and transactions. Inorder to change the passwords, we need to change them in all those connections and transactions.

There is a typical procedure to vary the passwords of those users provided by SAP.


We need to follow the procedure from below notes for changing the passwords supported your PI version.

999962 - PI 7.10 and higher: Change passwords of PI service users

2474153 - How to change passwords of PI service users in Java Only PI system

936093 - PI: Change to passwords of PI service users

721548 - XI 3.0: Changing the passwords of the XI service users

PI POST INSTALLATION STEPS

After a PI installation you have to configure your system. 
This is a mandatory post installation step called "Running the Configuration Wizard".
Before running the Wizard, it is recommended to update the following Java Software Components (SCs) to the highest available Support Package and Patch Level:
Life Cycle Management:

LM CONFIGURATION (LMCFG)
LM CONFIGURATION WIZARD (LMCTC)

Process Integration:
    MESSAGING SYSTEM SERVICE (MESSAGING)
    XI ADAPTER FRAMEWORK (SAPXIAF)
    XI TOOLS (SAPXITOOL)
    PI GUI (SAPXIGUI, only 7.11)
    PI GUILIB (SAPXIGUILIB, since 7.30)
    ESR (SAPXIESR)

The ABAP stack must have the same Support Package level as Java.
This Wizard Template is available since Release 7.10.

A prerequisite to run the Wizard is that the system was installed with the PI Installer (SAPInst). All PI services must be up and running.
For further information about the Configuration Wizard, see the following collective notes:

    SAP note 0923359 - Collective Note: Configuration Wizard (Release 7.0x)
    SAP note 1107808 - Collective Note: Configuration Wizard (Release 7.1x)
    SAP note 1362909 - Collective Note: Configuration Wizard (Release 7.3x)
    SAP note 1286428 - Configuration Wizard: PI Wizard Templates overview (Releases 7.1 and higher).

Solution
To run the CTC Wizard, start the SAP NetWeaver Administrator and navigate to "Configuration Management --> Scenarios --> Configuration Wizard". Depending on your release do the following:

Releases 7.10 / 7.11:
In the drop down list, please choose "Initial Configuration" or "All Configuration tasks -> NetWeaver initial setup".

Releases 7.30 / 7.31 and higher:
Click on link "Functional Unit Configuration UI". Select Functional Unit "SAP NetWeaver Process Integration (PI)". All required Functional Units are selected automatically. Press button "Enable automatically" to start the CTC Wizard.

Java (Channel/Thread) Lock Administration in PI/PO

SAP PI/PO contains numerous communication channels thorough which they process the messages between SAP to SAP and SAP to Non-SAP systems also.
Sometimes these channels are going to be locked thanks to several reasons which require to be fixed to permit the PI system work perfectly.
Follow below procedure to fix the issue.

Login to nwa portal with below link .

http://:500/nwa

Login using your valid and authorized credentials

Select Locks option (left side bottom option).
It shows the screen with "java Locks".

Open another browser tab navigating to nwa home as shown below
(http://:500/nwa)

Here you'll search with a lock argument if channel name isn't provided or if you've got channel name you'll look for lock argument using search term as “lock”

Match the lock argument within the Java locks screens.
Get confirmation from user and proceed as shown below for releasing locks
You can see Remove lock option if you decide on just one lock entry.

If you decide on quite one lock entry you'll be ready to see Remove all selected Locks tab to release all the chosen lock entries at a time.

Removing single lock entry.
Removing multiple lock entries

It asks for confirmation and then click yes if you want to release the lock.