SNC (secure network connection)

[Former Member]

Hi Experts,

Need your help.

I have to implement SNC in our system. From SAPgui (windows) to SAP System. (Authentication)

I downloaded the SNC user guide from https://websmp108.sap-ag.de/security, however it is for SAP version till 4.5.

Kindly guide me where I can find documentation for implementing SNC on ECC 6.0 (ABAP stack only).

Well this is first time, I am implementing SNC, so your help will be very thankful.

Do I need Secude or Kerbros for SNC implementation or it can be done with SAP cyrpotogrophic library also.?

PLEASE HELP.

Regards,

Satinder

[desiree_matas]

Hello Satinder,

If you want to configure SNC for the connection between sapgui and backend, you can NOT use the sap cryptographic library (sapcryptolib). This library can be used only for server to server connections.

So you will need to use a third party product (kerberos, secude...).

Go to http://service.sap.com/security --> security in detail --> authentication and Single Sign On.

There, have a look at the SNC user's guide.

Regards,

Désiré

[Former Member]

Hi Satinder,

Three days back we configured SNC for our systems.

Below is the reference document from help.sap

http://help.sap.com/saphelp_nw70/helpdata/EN/44/0ebf6c9b2b0d1ae10000000a114a6b/frameset.htm

Complete configuration guide can be found here :

https://websmp101.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000668333&_SCENARIO=011000358700000001...

Hope this helps.!!!!

Thanks,

Shobhit Garg

[Former Member]

This message was moderated.

[Former Member]

HI Satinder,

We are sharing information here as part of SDN and SAP so there is no need of providing personal emails.

You will be needing Kerberos for the SNC configuration.

I would still suggest you to go through the same document, as you will find everythin in the same.

Thanks,

Shobhit Garg

[Former Member]

Thanks Shobhit,

Well read the guide, can't figure out.

Can you confirm one thing --- if i use SAP cryptographic libraray, then also i need secude or kerbros or not.

Regards,

Satinder

[Former Member]

This message was moderated.

[Former Member]

Hi Satinder,

Configure SNC with kerberos library which is easy and secure.

Go through SAP Note 352295 and download the kerb lib from the note below.

Step1 : Copy the gsskrb5.dll file to Drive: \%windir%\system32.

Step2 : In the instance profile of the central instance, set the SAP parameters

snc/enable = 1

snc/gssapi_lib =<DRIVE>:\%windir%\system32\gsskrb5.dll

snc/identity/as =p:<SAP_Service_User>@<DOMAIN_NAME>

step3 : go to SU01 under SNC tab enter p:<WINNT_USERNAME>@<DOMAIN_NAME> the save.

step4 : Download the SAPSSO.MSI program from the SAP Note # 595341 and run with double click.

step5 : Now on SAP GUI select entry then Properties ->Advanced.

Select Enable Secure Network Communications.

In the SNC name field, enter:

p:<SAP_Service_User>@<DOMAIN_NAME>

If possible restart the server. This completes the configuration.

Thanks,

Ajay.