SAP IDM 8 TLS 1.2 support

[former_member1157899]

Hello everyone,

My JVM is 6.1 patch 096. According to note 0002417205 support for TLS 1.0 to 1.2 is available and working since JVM 6.1 patch 093.

My SERVERCORE component is 7.31 so it should support TLS1.0 to 1.2 communications according to note 2284059.

My questions are the following:

Will I have to change any kind of configuration for IdM to properly work if support for TLS 1.0 is ended? My outgoing connections use standard SAP provided scripts with ABAP, HANA and JAVA environments. I have not modified any of the java libraries for these connections.

If an upgrade to JVM 8 is mandatory, will this break my current installation of IDM? Will any of the standard scripts cease to work? Will I have to upgrade our kernel from 7.31 to 7.50?

I'm using Eclipse Oxygen.2 Release (4.7.2). Will this keep working and display IdM properly?

Please, if there's anything I missed. Let me know and I'll provide it.

[Chenyang]

Hi Marcos,

My IdM system is also running on SAP JVM8 and IdM 8 combination. Eclipse is Neon.

It should be fairly easy to switch JVM for SAP IdM. You do not have to upgrade SAP NW JAVA's JVM. They can choose different JVMs.

The simpliest way I guess is to backup your JVM6 and copy the JVM8 to a new folder, then change the setting of IdM runntime (dispatchers) to use the new JVM. Anothing goes wrong, you can switch them back.

Cheers

Chenyang

[former_member1157899]

Thank you for your answers and interest Chenyang. I have my final questions that I hope you can help me with:

The environments that my IdM is connected to will stop accepting any kind of TLS 1.0 communication which I understand is the default used by IdM.
- Is there someway in which I can make/force IdM to only use TLS 1.2 with both outbound and incoming connections?
- By pointing the dispatchers settings to an updated version of my jvm.dll and jdbc jar will that be enough or is there a configuration within IdM that I need to change or a setting to toggle?
- Will I have to change something in eclipse as well?