How to test whether SNC is configured or not in SAP system

[Former Member]

Hello All,

Recently I have configured SNC (Secure Network Communication) with out SSO on SAP ERP 6.0 EHP 7 AS ABAP system.

Configuration went well and able to establish the connection to SAP system.

My question is if SNC configured in the SAP system the data should pass in a encrypted format.

How can I prove my data is encrypted as the communication happening through port 32XX instead 47XX or 48XX?

Even I have checked in SM04 and I don't see anything relate to SNC for particular user.

I have attached the screen shot of my pc GUI.

Please guide me how can I prove my SNC configuration is successful?

[behlau_carlos · Accepted solution]

Hello Rakesh,

you can check this out via SM51 by clicking on the SNC Status icon.

It shows you in the column with what method you can access via SSO.

If not active there you might need to restart you SAP system to get the parameters (of RZ10/11) of the instance running.

Best regards

Carlos Behlau

[Former Member · Accepted solution]

Hello Carlos,

Thanks for your quick reply.

Yes it is showing SNC active (green LED light). Do you think this is the only way to prove SNC is active in the system?
How can I prove data is passing in a encrypted format?

Thank you.

Regards,

Rakesh Muppidi.

[behlau_carlos · Accepted solution]

Hello Rakesh,

it depends from the GSSAPI library is in use.

Single Sign-On for the SAP GUI - User Authentication and Single Sign-On - SAP Library

You need also to update the user record of the effected users, that should work with SSO (tab SNC in SU01).

Also don't forget, if needed to publish the library to the SAP GUI with the SNC_LIB setting on OS level.

Best regards

Carlos Behlau

[Former Member · Accepted solution]

Hello Carlos,

Thank you for your reply.

My configuration in the system is purely SNC with out SSO connection.

Your first post is quiet relate to my issue.

I don't think your second post is related to my scenario.

I am very much eager to know that how my data is encrypted and how to prove whether my data is encrypted or not?

Thank you.

Regards,

Rakesh M.

[behlau_carlos · Accepted solution]

Hello Rakesh,

if you just want to have a secure communication without SSO, you are controlling it with the parameter snc/force_login_screen for the RZ10 setting of the instance profile.

All snc* parameters of your instance you can lookup via t-code RZ10.

You would still use in user management (SU01) under the TAB SNC link to active directory.

Best regards

Carlos Behlau

[Former Member · Accepted solution]

Hey Rakesh,

You can also look in TCODE SMLG .  There is an icon across the top that shows / allows you to check the SNC status.

NICK

[Former Member · Accepted solution]

Hello Nick,

Thanks for your reply.

Regards,

Rakesh M.

[Former Member]

I have tested my SNC communication by using third party tool whether data packets are encrypted or not. Though it is using 32XX port for communication, but the data packets are encrypted.

My SNC connection is encrypted and successful.

Thank you All for your time.

Regards,

Rakesh M.