Show TOC

Procedure documentationPreparing the AS ABAP Locate this document in the navigation structure

 

The following procedure provides an overview of how to prepare SAP NetWeaver Application Server (AS) ABAP for SNC client encryption, including installation and configuration of the Secure Login Library.

Prerequisites

  • You have read and applied the following SAP Notes:

    • SAP Note 1561161 Enabling SAP GUI password logon despite using SNC

    • SAP Note 1616598 Enabling RFC password logon despite using SNC

  • You have configured the following profile parameters:

    • snc/accept_insecure_gui=1

    • snc/accept_insecure_rfc=1

    These profile parameters enable users to logon on with user ID and password despite the use of SNC.

    For more information, see Profile Parameter Settings on AS ABAP.

Procedure

Install and configure the Secure Login Library 1.0.2.2 or higher on SAP NetWeaver AS ABAP to support the SNC Kerberos configuration. Optionally, you can configure the SNC X.509 configuration for system-to-system communication.

  1. Create the technical accounts in Microsoft Active Directory for your SAP NetWeaver AS ABAP systems and assign service principal names.

    For more information about the configuration of the Microsoft Active Directory server, see the documentation that came with your product.

  2. Download the Secure Login Library 1.0.2.2 or higher and install it.

    The software is available from the Software Download Center at   https://service.sap.com/swdc   Installations and Upgrades   Browse our Download Catalog   SAP Cryptographic Software   SNC Client Encryption  .

    For more information about installation and configuration, see SAP NetWeaver Single Sign-On Secure Login Library Installation, Configuration, and Administration Guide on the SAP Help Portal at http://help.sap.com/nwsso10.

  3. Create a keytab for each service principal name on the relevant SAP NetWeaver AS ABAP systems.

  4. Set the SNC parameters on the relevant SAP NetWeaver AS ABAP systems.