Activate SNC on AS ABAP

[TMASaphir]

Hello,

I am trying to activate the SNC on my ABAP server.

I am trying to create the PSE on Tcode STRUST, unfortunately I can not do it because the node 'SNC SAPcryptolib'  prevent to create a PSE.

Can you please advise what should I do?

thank you.

[Mark_A_Parsons]

you may want to update the tags as this doesn't fall under the tag "SAP Replication Server"; did you by any chance mean 'SAP Landscape Transformation replication server'?

[DavidSolaliga · Accepted solution]

Hi dear,

This is in this SAP note:https://me.sap.com/notes/2440692

Use transaction SNCWIZARD to configure the SNC profile parameters and create or configure the SNC SAPCryptoLib PSE.An application server restart is required for the profile parameters to take effect.The SNC SAPCryptoLib PSE now must be signed by a Certification Authority (CA) using one of the following options:

SAP Single Sign-On SeTcure Login Server PKI
Certificate Life Cycle Management using SAP Single Sign-On 3.0 Secure Login Server
Enterprise or 3rd party PKI, e.g. Microsoft Active Directory CA, using the Replace Wizard in transaction STRUST. Please refer to SAP Note 2414090.
Starting from CommonCryptoLib version 8.5.11, SNC Client Encryption can be controlled by two new profile parameters. Please use SAP Note 2338952 for details.

ccl/snc/snc_client_encryption_allowed

Enable or disable SNC Client Encryption:

0 (disabled)
1 (enabled)

Default value: 1 (enabled)

ccl/snc/snc_client_encryption_require_x509

Force X.509 server authentication in SNC Client Encryption 2.0. If you are using SNC Client Encryption 1.0 and this option is enabled, the Kerberos solution will not work:

0 (disabled)
1 (enabled)

Default value: 0 (disabled)

Regards,

Solaliga David

[TMASaphir · Accepted solution]

Hello David,

[TMASaphir · Accepted solution]

Hello David, while launching the tcode SNCWIZARD i have the message : 'SAPCRYPTOLIB too old' I have the version 8.5.36 of sapcryptolib. Do you know where the issue may come?

[mamartins · Accepted solution]

The 8.5.35 is from 03.11.2020. The current one is 8.5.54 (09.02.2024)

[TMASaphir]

Hello David,

thank you.

When launching the SNCWIZARD Tcode, i have an error message : 'SAPCRYPTOLIB too old'

I have the Sapcryptolib Version 8.5.36 which is not so old.

Any idea what I am missing ?

thanks for the support

Best regards,

[toscatsui]

2304831 - Programs fail after CCL 8.5 is installed