Other Security-Relevant Information 

ActiveX in Web browser

In releases lower than SAP NetWeaver 7.0 SPS 9, SAP Interactive Forms by Adobe in Web Dynpro uses active code on the front-end PC. ActiveX must be enabled in your Web browser.

If you deactivate ActiveX in your Web browser, then you cannot start Adobe Reader for displaying the interactive PDF form. Nevertheless you can display an existing PDF form, if you load it into an iFrame in Web Dynpro.

In releases as of SAP NetWeaver 7.0 SPS 9 you can use interactive forms in the Web Dynpro runtime environment based on Zero Client Installation (ZCI) technology. ZCI enables you to use interactive forms in Adobe Reader without any additional plug-ins, and also has the benefit of being platform-independent. This means that ACF is no longer required for interactive forms. Forms for ZCI, however, must include special scripting. You must migrate any interactive forms that are not yet ZCI-enabled. For more information, see SAP Note 956074.

Image embedding

There are two ways to include images in form designs using the Adobe LiveCycle Designer. You may either create a URL which points to the image or you may embed the image in the design.

Make sure that images containing confidential data are always embedded, because only HTTP-URLs (that is, no SSL) are supported for accessing image data.

Certificate Revocation Lists

Certificate Revocation List files (CRLs) are provided by a Certificate Authority (CA). CRLs prevent you from applying a digital signature that is no longer valid, and it lets you know when digital signatures on incoming documents are invalid. CRLs should be updated on a regular basis (for example, daily or weekly). They are identified by the CRL distribution point (CRLdp), which is specified as a URL in the certificate itself.

If the certificate does not contain a CRLdp field to identify a URL for its CRLs, revocation checking cannot be performed and Adobe document services will consider the signatures as always valid.

 

For more information see Installing Certificate Revocation Lists.