System Infrastructure for Using SSF Functions
To function, secure store and forward (SSF) needs access to a security product.
SSF uses a security product, such as SAP Cryptographic Library or SAP Single Sign-On to execute the functions for using digital signatures and encryption in SAP NetWeaver Application Server (SAP NetWeaver AS). To communicate with the security product, SAP NetWeaver AS must be able to access the product and its information. Therefore, the following system infrastructure is necessary for using the SSF functions:
-
Communication interface to the security product
To communicate with the security product on the front ends, SAP NetWeaver AS uses the SSF Remote Function Call (RFC) server program ssfrfc.exe. On the application server, the communication interface is included in the SAP NetWeaver AS kernel.
-
Access to product-specific information
SAP NetWeaver AS must also be able to access the product-specific information (for example, the location of the library and the algorithms that the product uses).
-
On the front ends, this information is in either environment variables or in the SSF initialization file ssfrfc.ini.
-
On the application servers, this information is contained in either profile parameters or environment variables.
-
- User SSF information:
You must correctly maintain the users that participate in the public-key infrastructure in SAP NetWeaver AS.
The following figure illustrates these components.
