Encrypt infotypes in database and see it in Tcodes PAxx

[former_member233007]

Hello,
We have a doubt. We want to have all the Infotypes of our HCM (ECC 6 EhP4)
encrypted in our database. We want to only few people with a specific role can see the data desencrypted.
Is there a stardard way to do it? Or we have to do a Z program to encrypted and desencrypt the data?.
We want this so nobody can read  it directly from de database and only read it from the PAxx tcodes

We have read the SAP note: 974876  - Oracle Transparent Data Encryption (TDE)
Best regards.

Pablo Mortera

[kmoore007]

A better solution might be to have HR on it's on server/instance and have ALE integration to your other SAP system.  That way you can restrict logon access to the HR server.

[ChrisSolomon]

That is the most "classic" way it is done for that VERY reason. Independent HR server for security/protection with very specific set of users on it.

[HadrienP]

Hello Pablo,

So far not sure this is a good idea to encrypt the tables, performances will decrease that much... 

Another solution could be to give the appropriate authorization on specific HR tables and you want to restrict the users on display the content of the table.

best regards

Hadrien