Preparing SAP NetWeaver AS for ABAP

The following procedure provides an overview of how to prepare SAP NetWeaver AS for ABAP for SNC client encryption.

Prerequisites

  • You have read and applied the following SAP Notes:

    • SAP Note 1561161 Information published on SAP site Enabling SAP GUI password logon despite using SNC

    • SAP Note 1616598 Information published on SAP site Enabling RFC password logon despite using SNC

  • You have configured the following profile parameters:

    • snc/accept_insecure_gui= 1

    • snc/accept_insecure_rfc= 1

    These profile parameters enable users to log on with user ID and password despite the use of SNC.

    For more information, see Profile Parameter Settings on AS ABAP.

Context

The following procedure provides an overview of how to prepare SAP NetWeaver AS for ABAP for SNC client encryption, including installation and configuration of the Secure Login Library.

Configure the default SAP Cryptographic Library (CommonCryptoLib) on SAP NetWeaver AS for ABAP to support the SNC Kerberos configuration. For more information, see SAP Note 1848999 Information published on SAP site. Optionally, you can also use the Secure Login Library. If you want, you can configure the SNC X.509 configuration for system-to-system communication.

Procedure

  1. Create the technical accounts in Microsoft Active Directory for your SAP NetWeaver AS for ABAP systems and assign service principal names.

    For more information about the configuration of the Microsoft Active Directory server, see the documentation that came with your product.

  2. (Optional) If you want to use Secure Login Library, you can download the Secure Login Library 1.0.2.2 or higher and install it.

    The Secure Login Library is available from the Software Download Center at Start of the navigation pathhttps://service.sap.com swdc Next navigation step Installations and Upgrades Next navigation step Browse our Download Catalog Next navigation step SAP Cryptographic Software Next navigation step SNC Client EncryptionEnd of the navigation path.

    For more information about installation and configuration, see SAP Single Sign-On Secure Login Library Installation, Configuration, and Administration Guide on the SAP Help Portal at http://help.sap.com/sso.

  3. Create a keytab for each service principal name on the relevant SAP NetWeaver AS for ABAP systems.
  4. Set the SNC parameters on the relevant SAP NetWeaver AS for ABAP systems.