Digital Signature (CA-DSG)

Signature Tool

The digital signature is a class-based tool in the software component SAP_ABA (package DS). This component cannot be used alone; it can only be used in conjunction with an application.

Linking an Application to the Digital Signature

As of Basis release 6.20, the signature tool is available as a standardized and flexible programming interface. This allows the digital signature to be integrated in any application in any SAP system, such as ERP, APO, or CRM. The program code of the signature tool remains unchanged when it is integrated in applications, that is, all checks and database access are done independently of the calling application. To integrate the digital signature in an application, you must first make various settings and integrate the programming interface in your application. These settings are described in detail in the Implementation Guide for Digital Signature Tool. You will find this guide in Note 700495 .

See also: Linking of Applications to Digital Signature

Integration with SAP NetWeaver Components

The digital signature is implemented in the SAP system with the help of the component Digital Signatures and Encryptionand is based on Secure Store and Forward (SSF)mechanisms (see SSF Administration Tasks) and on public-key technology.

You can use digital signatures in SAP systems either together with a security product or without. A security product, such as SAP NetWeaver Single Sign-Onor an external security product, introduces features that are not directly available with the SAP system. One example here is the authentification of individuals using smart cards. However, for certain areas of application (for example, the SAP ArchiveLink content server HTTPinterface), the digital signature itself is sufficient without needing the extra features of an external security product. For this reason, we deliver SAP Security Library (SAPSECULIB)with the SAP system.

To use the digital signature, you must configure the SSF settings for the digital signature. These settings depend on the signature method you intend to use. The following signature methods are available:

• System signature

  Authentification is done here using the SAP user master and the password of the signatory. This can be the user logged on to the system or another system user.

• User signature

  Authentification is done here using a security product and not the SAP user master. You must integrate the security product in your SAP system with the aid of the component SSF. With a user signature, the user executes a digital signature using his or her own private key (public-key technology).

For more information about how the components work together, see Signature Process Flow (Components Involved).

Customizing

You will find the Customizing settings for the digital signature in the Implementation Guide (IMG)under Cross-Application Components  General Application Functions  Digital Signature.