SECURE STORAGE ISSUE

[MuraliBhat]

Hi Gurus

My question is regarding SECURE STORAGE(SECSTORE). A brief introduction. We are trying to save the password entries in the SECURE STORAGE! SECSTORE is a place where we can save our Credentials securely.. In our application we are maintaining the Password in the table. When we try to create new entry in this table, before saving the entries we insert it into Secstore.

1. Even though entry exists in the table and we have successfully created an application entry in SECSTORE, but unfortunately when I try to check for my entries(In SECSTORE) it shows ‘No entries found’!!
2. When I debugged the report, I saw the method which calls the function SECSTORE_INSERT_ITEM, returns me an “Internal Error” Exception which means it’s not inserting into table RSECTAB(where SECURE data are saved)
3. Is there any notes that needs to be implemented before doing the entries..
4. Strangely, when I try to add the data to ADDON table, it saves the data in the SECSTORE, which means there is no need to implement SAP NOTES nor correction needed. Am I correct?

As anyone encountered this issue and found the solution?

Thanks in advance!!

[MuraliBhat]

Missed an information!

ADDON is an another application where we are able to view the entries in SECSTORE

[DominikKraemer]

Hello Murali,

please put a breakpoint at the end of form evaluate_sysubrc and check the values of structure ls_bapiret2 which should give you some more hints on why the internal error exception is raised.

Addition: You can also check report SECSTORE01 and see on how the parameetrs of FM SECSTORE_INSERT_ITEM are being filled there.

Regards,

Dominik

[MuraliBhat]

Hi Dominik,

Thanks for the reply.

I did do that and in the return structure ls_bapiret2, it is giving me the below error,

"Access to the entry /<namespace>/lv_ident in the secure storage is denied".  I did see the SECSTORE1 still no luck.

Is it something to do with the authorizations? I have been assigned SAP_ALL..

Regards

MB

[DominikKraemer]

Not sure actually.

However looking at the following link: System Security - SAP Library SAP does not allow direct input into the SECSTORE from customer applications.

Try your luck with the Secure Store & Forward interface

[MuraliBhat]

Dominik,

Thanks for your suggestion will try that and let you know

Regards

MB

[MuraliBhat]

Hi Dominik,

We have found a solution on this and (UN)fortunately there are certain steps which we need to follow in order to INSERT entries to SECSTORE. 

SAP Security and identity Management people helped us in resolving this issue!

[mahlzeit1948]

Murali, I don't assume you can share what steps need to be taken in order to use Secure Storage for custom developments? Secure Storage is exactly what we need from a functionality point of view. It's a shame SAP puts a lock on it, so to speak.