How to Configure the SAP Secure Network Communication Protocol in Informatica Cloud Application Integration®

Back Next

Creating the Personal Security Environment for the SAP Server

Go to transaction RZ10 and select the instance profile that is used by the SAP server for start-up.

Add the instance parameter snc/identity/as and set it to the specific name of the SAP server.

For example, set snc/identity/as to p:CN=<x>, OU=<x>, O=<x>, C=<x> where CN = common name, OU = organizational unit, O = organization, C = country.

Restart the SAP server to apply the changes.

Go to STRUST transaction to create the SNC PSE.

Right-click

SNC (SAPCryptolib)

and click

Create

The SNC identity specified in the transaction RZ10 appears.

Click

Double-click

SNC (SAPCryptolib)

and click the

Assign Password

icon to assign a password for the SNC (SAPCryptolib) PSE.

Enter a password for the SNC (SAPCryptolib) PSE. Each time you view or change the PSE, you will be prompted to enter the password.

The password can contain both letters and numbers.

Enter a password to configure the ABAP server to start up only when the instance parameter snc/enable is set to 1. This ensures that the ABAP server starts up only when the SNC protocol is enabled. The password can contain both letters and numbers.

Save the changes.

Set the snc/enable parameter to 1 in the transaction RZ10 for the SNC instance profile.

If you want to allow users who are not authorized for SNC to access the SAP server, set the following parameters in the transaction RZ10 for the SNC instance profile:

Parameter	Value
snc/accept_insecure_rfc	1
snc/accept_insecure_r3int_rfc	1
snc/accept_insecure_gui	1
snc/accept_insecure_cpic	1
snc/permit_insecure_start	1
snc/data_protection/min	1
snc/data_protection/max	3
snc/extid_login_diag	1
snc/extid_login_rfc	1