SAP PI webservices and RSA agents

[Former Member]

Hi

We have webservices on PI exposed locally within the company network and is consumed by applications within our company network.

Now, we are thinking of exposing web services on PI to applications that come from outside the network. One of the infrastructure requirements was to be able to install a RSA agent - ( RSA- an encryption for public-key cryptography, yes ) on the PI server and have the web services exposed on the PI server use the tokens generated by the agent.

Anybody out there do this /similar scenario ?

Also, what security mechanisms protects the PI server when its hosted on the DMZ ?

[baskar_gopalakrishnan2 · Accepted solution]

RSA Algorithm involves Key generation, encryption and decryption. Basically you secure webservice communication using encryption of data and login credentials. This is pretty standard. When you communicate through client certificate using HTTPS this is happening in the server.

>>>Also, what security mechanisms protects the PI server when its hosted on the DMZ ?

When you access webservice within network or behind firewall, It is always secured and safe. You are going to provide your webservice WSDL only to the required client. And you also let them to access your webservice using HTTPS client authentication or username token and so. So webservice security features such as user/password, https over ssl, https with client authentication are various security steps you configure in Sender SOAP Adapter. This willl protect your PI Server that host webservice.

Further you can tighten security via message level like Digital signing the soap message , encrypt and decrypt message.

SAP SOAP Adapter supports the above features.