Transaction Log (TLOG) Encryption

Transaction Log (TLOG) Encryption (Enhanced)

Technical Data

Product Version	SAP Point-of-Sale (POS) 2.3
Area	IS-R-TGM (SAP Transactionware General Merchandise)
Country Relevance	Valid for all countries

To assist with solution end-to-end Payment Card Industry Data Security Standard (PCI-DSS), the Point-of-Sale Transaction Log (POS TLOG) encryption has been updated.

In this release, the POS elements SAP POS General Merchandise (POS GM) 10.3 and Centralised Electronic File Transfer (CEFT) 1.10) are adapted into the overall backend solutions. The backend solutions are SAP NetWeaver Process Integration (PI), SAP POS Data Management (DM), SAP NetWeaver Business Warehouse (BW), and SAP Enterprise Resource Planning (ERP). This update targets customers who buy the solution landscape end-to-end. Customers who buy at least one third party component are not affected by this development.

The end-to-end integration can run in either batch processing mode (end of day processing), or trickle mode (one transaction at a time).

Effects on Existing Data

The transaction data is enhanced with a PKCS7–encrypted string containing sensitive information.

Effects on Data Transfer

The data transferred between CEFT 1.10 server and the PI system is encrypted with PKCS7 asymmetric encryption.

Effects on System Administration

For the batch processing mode, a scheduled process needs to be set up to run the end of day PKCS7 enhancement process.

Effects on Configuration

The TWSecurity on the CEFT server needs to be configured to communicate with a Web service that provides PKCS7 encryption certificates. This is a crucial step to enable the PCI end-to-end capability.

More Information

For more information, see the following guides:

SAP POS Transactionware General Merchandise (TGM) 10.3 Installation Guide
SAP POS 2.3 Transactionware General Merchandise (TGM) 10.3 Security Guide
SAP POS 2.3 Central Electronic File Transfer (CEFT) 1.10 Security Guide