security connection provided by SAP XI for FTP

[Former Member]

Hi All,

In many implementations Business requirement is to security connection provided by SAP XI for FTP and to third-party system.

Could you pls let me know the steps which i need to take care/ or shall i use the same File adaptor for this or any special adaptor i need to use.

Pls give me some points how we can implement and give me some links to get the information please.

GnuPG is a free tool for secure communication based on public keys how i can i use this in SAP XI

Thanks in advance

[Former Member · Accepted solution]

Hi ,

Can we use GnuPG is a free tool for secure communication based on public keys software in XI?

If we use FTPS (FTP Using SSL/TLS) for Control Connection or FTPS (FTP Using SSL/TLS) for Control and Data Connection

what i need to configure XI in file adaptor please share some blogs links which we will help me to implement.

Thanks,

[bhavesh_kantilal · Accepted solution]

There aint any blog on this topic and I was planning to post one sometime soon. One of my colleagues has been pushing me on it.

From XI perspective all you need to do is the standard steps I have pointed above.

XI by default supports FTPS. Just select Connection Security as FTPS with the correspodning options.

At a high level the above steps in my first reply are all you would need to do.

It makes no sense to use a external tool when XI supports it by default.

Regards

Bhavesh

[sufw · Accepted solution]

Also keep in mind that GPG is designed for a different use case than FTPS. GPG is used to encrypt files; FTPS uses SSL (Secure Sockets Layer) to establish an encrypted connection between two TCP/IP ports (i.e. two sockets)...

If you encrypt a file on XI using GPG, then you still need to transfer it to the other system. You can do this via plain FTP (since the file is already encrypted), or FTPS (why not?). If you use FTPS, you don't need to encrypt the files transferred from XI to the other system, since the transport channel is secure.

If you really really want to implement GPG/PGP (same thing, different licence), then you can always look into Java libraries like bouncycastle and write an adapter module...

Hope this helps to provide some context.

Sascha

[Former Member]

Thanks for Links

[former_member192295]

Hi,

According to your requirement need to enable SSL certificate option, for more information find below link

http://help.sap.com/saphelp_nw04/helpdata/en/f7/c2953fc405330ee10000000a114084/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4...

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/23894238-0701-0010-40b0-a0a6d5c4...

[bhavesh_kantilal]

XI by Default supports FTPS ( FTP over SSL ).

If you partner needs FTPS,

1. You will need to enable SSL on XI on the J2EE engine.

2. Load the partner's Public Certficate in the TrustedCAs view in the Keystore of XI.

For more info on how to enable SSL on XI, search on SDN for the how to guide from SAP on this.

Regards

Bhavesh