Digital Signature limitations

[Former Member]

Hi Forum,

1.Wat ar the limitation for Digital singature in SAP..?

2. I would like to assign PDF file as Dig Sign to my document which i created in CV01n

3. will it support any file format other than .Txt

P.S : Useful answer will be rewarded..

Regards

Vijay

[Former Member · Accepted solution]

Hi Vijay,

The digital Signature you are talking about is Digital Id.

You can purchase it and apply to PDF file. (as per my knowledge it can not be attached separately)

The digital sign or Id can be purchased from agencies like Global Sign and Verisign.

They give you one file which has Private key (which has information @ your password for applying signature.)

The format of Signature can be customized as per your needs (anytime)

However this needs to be applied in PDF document.

The digitally signed PDF can be imported to SAP Using normal checkIn method.

For checking In of PDF you need to create a Work station application (say PDF) in tcode DC30

When you talk @ digital sign in SAP it can be either based on system Password or

third party software which stores information related to private key.

For more information Just check following websites.

http://help.sap.com/saphelp_47x200/helpdata/en/a4/d0201854fb6a4cb9545892b49d4851/content.htm

PDF

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e0fbaa71-cd8d-2910-5982-e3062603...

Secure Store & Forward (SSF) / Digital Signature

http://help.sap.com/saphelp_47x200/helpdata/en/53/251a355d0c4d78e10000009b38f83b/frameset.htm

Niranjan

Dont forget to award points if useful

Also dont hesitate to ask any doubt you have...

[Former Member]

hi, vijay

Digital signatures can also be created and verified as of Adobe Reader . Users can use the Adobe Acrobat Reader to display and print files in PDF format, whose content and appearance correspond to the paper version, on a cross-platform basis. The prerequisites for this are the use of the new Adobe Document Server for Reader Extensions and the replacement of Smart Forms by Adobe Acrobat (this is still in development). SSF is not used.

Adobe Document Server for Reader Extensions assign additional usage rights to electronic forms that were created with Adobe Acrobat 5.0 and Adobe Form Designer 5.0. Digital signatures are a type of usage right.

Adobe Acrobat Reader .can be downloaded free-of-charge from Adobe's Web site, and processes the usage rights that were embedded in PDF forms by the Adobe Document Server for Reader Extensions.

SAP currently supports four different signature formats. The signature format essentially depends on the application. http://service.sap.com/securitypartners

Product/Signature Format PKCS#7 XML S/MIME PDF (Adobe)

SAP Signature Control + - - -

SSF Partner Product - - -

SAP Java SSF Library + + + -

Adobe Acrobat - - - +

System Signature - - - -

The signature control is used to display the document to be signed to the user at the front end, and to evaluate the signature. It can be called by the SAP GUI for Windows or using

Digital Signatures 640 13 SAP Best Practices 2/20/2004 .Business Server Pages (BSP). The document is displayed in the signature control in text, HTML, or XML format, or as a PDF.

The SSFS function group is available for this purpose:

o SSFS_Call_Control: Starts the signature control

o SSFS_Get_Signature: Fetches the signature value from the control

o SSFS_Server_Verify: Verification of the digital signature by the application server

Strings and XStrings are used as data types.

The signature control is based on the Microsoft Crypto API. If MS-CAPI is used, it is also possible, for example, to include SmartCards using corresponding drivers, and no external security product is required. Alternatively, the signature control can load the SSF Library; an external SSF partner product is required to do this.

Every SAP Web Application Server 6.30 contains the report SSFSDEMO. This report shows how the functions SSFS_Call_Control and SSFS_Server_Verify are called.

Adobe Acrobat Reader can be downloaded free-of-charge from Adobe’s web site, and processes the usage rights that were embedded in PDF forms by the Adobe Document Server for Reader Extensions. It is planned to make it possible to use Adobe Acrobat Reader as the display component in SAP applications.

regds

Ben

[Former Member]

Hi Vijay,

Digital Signature is the process of reviewing/inspecting the documents or the process,once everything matches with the requirement electonically approval is done by digital signature.

If the reviewer is not satisfied with the things then reviewer can reject and then pass on the rejection comments in the form of note or any attachments which serve as REDLINING on the documents.

Constraints by Digital Signature.

1) Creating or Verifying digital signature is not supported for SAML implementation on the SAP J2EE Engine

Thank You,

Manoj

Pl. reward if useful

[Former Member]

hi, vijay

Plz go through,

The required settings are made under Document Management >> Approval >> Define Signature Strategy

1. Assign a signature strategy to the document status.

2. Also the required settings are made under Document Management >> Control data >> Define document type >> Define document status. (You can select any status for which you want digital signature for approval)

3. Assign a signature strategy to the document status.

4. Save the changes.

5. Create DIR

• Once the Document is reached to that particular status it will ask for digital signature.

• Choose Digital signature (Double click on Enter key).

6. The Digital Signature dialog box appears. Enter your comment in the text field. Select the individual signature strategy is assigned to you DIR. Put the login id and password. Thus the Digital signature process has been completed.

7. If you want to see the digital signature for your Document. Go to DIR and use menu 'Environment' >> 'Digital Signature'.

Note; 1]You use fully authorization by selecting the below profile by copying.

Standard Profile :All authorizations for Document Management [C_CV_ALL]

2] There is no limit for signatures for approval, using signature network

[signature strategy] this will depends on your document status network

The following table shows authorization object C_DRAW_BGR. This authorization object allows you to limit access to individual documents.

Fields Possible Values Description

BEGRU (Authorization group) 0000 - ZZZZ Used to restrict the authorizations for individual document maintenance further.

Authorization object C_DRAW_BGR can be used to restrict access to individual[original] documents. It works like a simple on/off switch. If the check of object C_DRAW_BGR is fine, the user's authorization can be further restricted by checking C_DRAW_TCD (check only based on the document type) or C_DRAW_TCS (check of the

combination of document type and status). At the fifth level there is a BADI called DOCUMENT_AUTH01, which you can use to design your own authority check.

Rgds

Ben

[Former Member]

Hi Ben..

Thanks for ur information..

My question is

I would like to add Digital signature Certificate(.PDF) as an attachment to my document insted of writing a Comment.

(Import local file).

Regards,

Vijay

[Former Member]

hi

I dont know about digital sign limitation

but you can use it for PDF FILE

NITIN