Security Management Settings (Summary)

Security Management Settings

Definition

System configuration settings that relate to the security (SAP users, communications, system audit) in the SAP CC system

Description
Setting up or viewing system parameters of this group
Viewing and inspecting indicators of this group

Description

This central group includes all the system parameters concerning the security in the SAP CC Core Server systems:

SAP users
communications
audit recordings (user operations, data objects)

Note that some settings concern the other SAP CC systems: BART Server, CT Server.

See also:

References

Setting Up or Viewing System Parameters

You can set up or view the following system parameters that are available for different instance types in the running SAP CC Core Server system.

Parameter Definition

AUDIT_ACTIVATION The enablement or disablement of the User Operation Auditing feature to conform to the required security and auditing level

AUDIT_OBJECT_ACTIVATION The enablement or disablement of the Object Snapshot Recording subfeature to conform to the required security and auditing level

MESSAGE_API_AUTHENTICATION_REQUIRED Specifies if the authentication of the clients that use the SAP CC Message TCP technical interface is required

PASSWORD_HASH_ROUNDS_FOR_INDIVIDUAL_USERS The number of hash rounds applied to password hashing for an individual user

PASSWORD_HASH_ROUNDS_FOR_SERVICE_USERS The number of hash rounds applied to password hashing for a service user

PASSWORD_MANAGEMENT_ENABLED The advanced password management policy activated or not

SLD_PASSWORD The password used to submit the payload to the System Landscape Directory

SLD_USER The user identifier used to submit the payload to the System Landscape Directory

SQLHELPER_JDBC_PROPERTIES The properties used to connect to the Core Database system

SQLHELPER_JDBC_URI The JDBC URI(s) to connect to the database systems

SQLHELPER_LOGIN The logon used to connect to the Core Database system

SQLHELPER_PASSWORD The password used to connect to the Core Database system

TLS_CIPHER_SUITES The list of enabled cipher suites for encrypted communications using SSL/TLS

TLS_PROTOCOLS The list of enabled protocols for encrypted communications using SSL/TLS

WS_SSO_ENABLED The Single Sign-On authentication for the Web Services activated or not

Parameter	Definition
AUDIT_ACTIVATION	The enablement or disablement of the User Operation Auditing feature to conform to the required security and auditing level
AUDIT_OBJECT_ACTIVATION	The enablement or disablement of the Object Snapshot Recording subfeature to conform to the required security and auditing level
MESSAGE_API_AUTHENTICATION_REQUIRED	Specifies if the authentication of the clients that use the SAP CC Message TCP technical interface is required
PASSWORD_HASH_ROUNDS_FOR_INDIVIDUAL_USERS	The number of hash rounds applied to password hashing for an individual user
PASSWORD_HASH_ROUNDS_FOR_SERVICE_USERS	The number of hash rounds applied to password hashing for a service user
PASSWORD_MANAGEMENT_ENABLED	The advanced password management policy activated or not
SLD_PASSWORD	The password used to submit the payload to the System Landscape Directory
SLD_USER	The user identifier used to submit the payload to the System Landscape Directory
SQLHELPER_JDBC_PROPERTIES	The properties used to connect to the Core Database system
SQLHELPER_JDBC_URI	The JDBC URI(s) to connect to the database systems
SQLHELPER_LOGIN	The logon used to connect to the Core Database system
SQLHELPER_PASSWORD	The password used to connect to the Core Database system
TLS_CIPHER_SUITES	The list of enabled cipher suites for encrypted communications using SSL/TLS
TLS_PROTOCOLS	The list of enabled protocols for encrypted communications using SSL/TLS
WS_SSO_ENABLED	The Single Sign-On authentication for the Web Services activated or not

Notes

Use the set command of the SAP CC Admin+ user interface to change the parameter values. The immediate change may be not possible and a restart is necessary. Consult the details for each parameter.
Use the get command to retrieve the parameter values manually.
Use the SAP CC Config Tool user interface to set up a complete or partial list of system parameters (restart needed).

Viewing and Inspecting Indicators

You can retrieve the runtime values of the following indicators in your running SAP CC Core Server system:

Indicator Definition

HARDWARE_KEY The hardware key of the host where the specified SAP CC instance is installed. It is associated to the license.

INSTALLATION_NO The installation number associated to the license

Indicator	Definition
HARDWARE_KEY	The hardware key of the host where the specified SAP CC instance is installed. It is associated to the license.
INSTALLATION_NO	The installation number associated to the license

Note

Use the get command of the SAP CC Admin+ user interface to retrieve the indicator values manually.

Recommendation

SAP recommends that you implement and use SAP Solution Manager in combination with the CA Introscope technology and infrastructure to improve your experience.

SAP delivers a packaged and customized version, CA Introscope for SAP, for an efficient technical monitoring of the SAP CC systems in the system landscape.

Refer to the SAP CC Operations Guide for more information about the following elements:

getting started with CA Introscope for SAP CC
installation and setup of supportability tools
technical and performance monitoring

See also: Consult the SAP CC Metric Reference and Performance Troubleshooting documentation for more information about the performance and health data that you can monitor or use for your troubleshooting operations and root cause analysis.