Configuring SAP GUI for Windows

Use this procedure to configure the SAP GUI client to use SNC Client Encryption to connect to a particular SAP NetWeaver Application Server (AS) ABAP system.

Procedure

Start SAP Logon.
The default path is Start Programs SAP Front End SAP Logon .
Select a connection and choose (Edit).
In the System Entry Properties dialog box, choose the Network tab.
Select the Activate Secure Network Communication checkbox.

Enter the SNC name.

You can enter an SNC name with or without the prefix SAP/. You also have the choice whether you want to include the realm of the Windows domain. Depending on what you want to include in the SNC name, use one of the following syntax examples:

p:CN=SAP/Kerberos<SID>@<REALM>
p:CN=Kerberos<SID>@<REALM>
p:CN=SAP/Kerberos<SID>
p:CN=Kerberos<SID>

Description of the Variables in the Syntax of SNC Names
Variable	Description
`SID`	The system ID of the target SAP NetWeaver AS ABAP. `Kerberos<SID>` is the realm of the Windows domain.
`REALM`	The realm of the Windows domain.

Example Example

For an ABAP system with ABC for the system ID and a Windows domain of XYZ.EXAMPLE.COM, enter one of the following lines:

p:CN=SAP/KerberosABC@XYZ.EXAMPLE.COM

p:CN=KerberosABC@XYZ.EXAMPLE.COM

p:CN=SAP/KerberosABC

p:CN=KerberosABC

End of the example.

Note Note

Enter the realm in uppercase letters. The realm name is case sensitive.

End of the note.

Select the SNC logon with user/password (no Single Sign-On) checkbox.
Save your entries.

More Information

For more information on Kerberos for SNC, see SAP Note 1763075.