Data Storage Security

Password for Web Service

The password of the service user for the Adobe Web service is stored in SM59 (ABAP Server) and in the Secure Storage of the System Landscape Directory, in the case of Web Dynpro. This data is stored at administration time.

Password for Certificates

Passwords for certificates used for signing Adobe Reader rights are stored in the Key Storage of the AS Java, and the corresponding certificates are stored in the file system as described in the Adobe Document Services Configuration Guide. This data is stored at administration time.

Password for IIOP Connection

Password and keys/certificates for the IIOP connection are stored in the Secure Storage and the Key Storage of the AS Java. The keys and certificates of the IIOP connections are temporarily stored in the file system.

At runtime, read-only access to this data is required.

Storage of Forms on the Server for Troubleshooting

When the rendering of a form fails, Adobe document services create a file that contains detailed information about the error, called Error.PDF. This file is written on the server that hosts the Adobe document services in the directory <DIR_GLOBAL>\AdobeDocumentServices\renderErrorLog\ErrorFiles. The file name is <Date+Time+ApplicationName+Username>.pdf

Data Protection and Privacy

Make sure that you comply with applicable data protection and privacy laws if you are processing any personal or sensitive data through ADS.

Note

SAP does not provide legal advice in any form. SAP software supports data protection compliance by providing security features and data protection-relevant functions, such as blocking and deletion of personal data. In many cases, compliance with applicable data protection and privacy laws is not covered by a product feature. Furthermore, this information should not be taken as advice or a recommendation regarding additional features that would be required in specific IT environments. Decisions related to data protection must be made on a case-by-case basis, taking into consideration the given system landscape and the applicable legal requirements. Definitions and other terms used in this documentation are not taken from a specific legal source.