Are DB connections (created through DBCO tcode) secured ?

[former_member252769]

Hi Experts,

We are using DB connections (created through DBCO tcode) to connect to different systems.

Are these connections are secured or encrypted ? How we can make sure that?

Regards

BJ

[former_member215961]

Hi BJ,

The DBCON configuration store all the data for multiple DB connections. If you create a new connection, you will enter in the form the username and password. The password is stored in a encripted way :

https://launchpad.support.sap.com/#/notes/323151

Configuration: the table DBCON

Before you can open an additional DB connection, all connection data that is required for identifying the target database and for the authentication against this database must be communicated to the ABAP runtime environment. To do this, create an entry in the table DBCON that contains all of the required connection data for each database connection that you want to set up in addition to the R/3 default connection. The table DBCON is in the R/3 default database and can be maintained using the table maintenance tool (transaction SM30) or, as of Release 4.6, using transaction DBCO. For each connection you must enter the following information in this table:

• A logical connection name. The name entered here explicitly identifies a database connection.
• The database type. This determines which DB platform will be used for this connection. In principle, you can enter all DB platforms supported by the R/3 System.
• The database user under whose name you want to set up the connection.
• The password of this user for authentication against the database. This password is stored in encrypted form.
• The technical connection data required to set up the connection to the database. The connection data is DB platform-dependent and generally includes the database name as well as the DB host on which the database runs.

Cheers

[Former Member]

Hi,

DBCO connection is secure as explained by Gerard.

It also depends upon how secure your network, firewall is?

1622837 - Secure connection of AS ABAP to Oracle via SSFS

1288331 - Secure database connection for an IBM i database server

You can now secure the communication with the database using the Transport Layer Security(TLS) and the Secure Socket Layer (SSL) protocol. For more information, see "SSL Support in DB2 9.7: Running SAP ECC6 SR3 ABAP+JAVA system with SSL connections on DB2 database" at:

https://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/d0598e2b-924e-2c10-16b5-c0af17f30bbb&overrid...

Hope this helps you.

Regards

Prithviraj