topic Is Data Between SAP GUI and Server Encrypted in Application Development and Automation Discussions

Is Data Between SAP GUI and Server Encrypted

Former Member — Mon, 22 Sep 2014 05:52:45 GMT

Hello expert,

In default, the data between SAP GUI and SAP application server is not encrypted, is that?

If we want to encrypt the data between GUI and AP, we should enable the following setting in GUI side (and any other settings, like SNC library path and so on)?

Thanks & Best Regards,

Tong Ning

Re: Is Data Between SAP GUI and Server Encrypted

tim_alsop — Mon, 22 Sep 2014 06:33:22 GMT

The default is no encryption, so the users password could be captured as it travels over the network to the application server. To enable encryption you need to use an appropriate SNC library. Some SNC libraries offer encryption only, and some offer authentication (e.g. for Single Sign-On) as well as encryption. The SNC libraries that offer SSO are often licensed so you might have to pay money for a license.

Thanks

Tim

Re: Is Data Between SAP GUI and Server Encrypted

Former Member — Mon, 22 Sep 2014 06:50:18 GMT

Hello Tim,

As far as I know, SNC is installed in application server during system installation (within SAP Security Library, no addtional fee......).

And do I need to install some SNC needed library in client side to encrypt data?

Thanks & Best Regards,

Tong Ning

Re: Is Data Between SAP GUI and Server Encrypted

tim_alsop — Mon, 22 Sep 2014 06:57:17 GMT

Yes, you need an SNC library on both client and server. They both need to support the same protocol, e.g. both need to support Kerberos.