Show TOC

Configuring SAP GUI for WindowsLocate this document in the navigation structure

Use this procedure to configure the SAP GUI client to use SNC Client Encryption to connect to a particular SAP NetWeaver Application Server (AS) ABAP system.

Procedure

  1. Start SAP Logon.

    The default path is Start of the navigation path Start Next navigation step Programs Next navigation step SAP Front End Next navigation step SAP Logon End of the navigation path.

  2. Select a connection and choose Edit.
  3. Choose the Connection Properties... button.
  4. In the System Entry Properties dialog box, choose the Network tab.
  5. Select the Activate Secure Network Communication checkbox.
  6. Enter the SNC name.

    You have the choice whether you want to include the realm of the Windows domain. Depending on what you want to include in the SNC name, use one of the following syntax examples:

    • p:CN=SAPService<SID>@<REALM>

    • p:CN=SAPService<SID>

    Variable

    Description

    SID

    The system ID of the target SAP NetWeaver AS for ABAP. Kerberos<SID> is the realm of the Windows domain.

    REALM

    The realm of the Windows domain.
    Example

    For an ABAP system with ABC for the system ID and a Windows domain of XYZ.EXAMPLE.COM, enter one of the following lines:

    p:CN=SAPServiceABC@XYZ.EXAMPLE.COM

    p:CN=SAPServiceABC

    Caution

    In the ABAP server, the profile parameter snc/identity/as has the value p:CN=<service_account_UPN>. Do not use the Service Principal Name in this profile parameter.

    Example

    snc/identity/as = p:CN=SAPServiceABC@XYZ.EXAMPLE.COM

  7. Select the SNC logon with user/password (no Single Sign-On) checkbox.
  8. Save your entries.

Next Steps

For more information on Kerberos for SNC, see the SAP Note 1643878 Information published on SAP site