Skip to Content
avatar image
Former Member

SNC Enablement Error

Hi Experts,

I'm a Fiori consultant trying to enable SNC on a Netweaver 7.40.

I've used this guide to set the parameters on RZ10.

snc/enable

Activate SNC

1

snc/gssapi_lib

Path and file name of the external shared library

for exmaple,
D:\usr\sap\local\SYS\exe\uc\NTAMD64\secude.dll

snc/identity/as

SNC name of the application server as known by the external security product

for exmaple,
p:CN=<host name>, OU=SAKP, O=SAP, C=DE

Even though SAPCryptolib is installed on that path, i cannot find secude.dll on the \NTAMD64\ folder, and therefore I cannot re-start the instance.

I've tryed downloading SAPCryptolib and CommonCryptoLib from the marketplace, and also pointing snc/gssapi_lib to sapcrypto.dll without any success.

Please help

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Sep 20, 2014 at 12:01 PM

    Hello,

    Have you trie to set parameter to secgss.dll or gx64krb5.dll ?


    According to note   1854943 - SNC fails to initialize in a Microsoft Windows based installation


    BR,

    K.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 25, 2014 at 09:36 AM

    Hello

    Use gx64krb5.dll instead of secude.dll. Also please check

    352295 - Microsoft Windows Single Sign-On options

    Preparing the Primary Application Server Instance - User Authentication and Single Sign-On - SAP Library

    Configuring the SAP Logon - User Authentication and Single Sign-On - SAP Library

    Another step to do;

    Execute following commands

    SETSPN -A SAPServiceSID/hostname(fqdn) domain\SAPServiceSID

    Install SAPSSO.MSI

    Install SAP SNC Client Encryption 1.0

    Edit system properties in SAP GUI

    Go to Network, open SNC and write what is written on snc/identity/as (like p:SAPServiceSID@domainname)

    Select Max Security

    Edit user in SU01

    Edit SNC Name as p:domainusername@DOMAINNAME


    Best regards

    Add comment
    10|10000 characters needed characters exceeded