on 06-30-2015 2:30 PM
I want to Configure SAP Abap (standalone) to use X509 Authentication.
I followed the following steps.
2. Created pse for server
3. Create PSE for the Client
4. Imported the Client Certificate to Server PSE.
5. Exported the Server Certificate.
6. Imported the Server Certificate to the Client PSE
7. Created the cred_v2 file
8. Allowed SNC RFC Connection.
9. Map the X.509 Certificate to the User.
The X.509 Certificate must be accepted for a successful Login.
10. set the Environment variable : snc_lib: C:\Program Files (x86)\SAP\FrontEnd\SAPgui\Encryption\secgss.dll .on th host where sap gui is installed.
I followed all this step successfully.
but when i am using sap gui with SCN enabled DN : p:CN=sr3, OU=I0020217358, O=Infor Enterprise Solutions Holdings Inc, C=US
i am receiving error.
GSS-API(maj) : No credential were supplied , Unable to establish security context.
Is there any thing I did wrong or missed in this steps?
Does Out of box pki is necessery for sap gui to use x509 certificate?
Hi Nick,
This document has created confusion in my mind about compatibility of SAP Gui with x509 Certificates .
Client Certificate Logon for SAP GUI - User Authentication and Single Sign-On - SAP Library
can you help.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Sanket,
Yeah, I see the "help" doc. SAP Help is one thing, but finding clear documentation that backs up what that "help" says is another.
Your best bet is to buy the SAP NW SSO license, and enable SSO to sapgui via SNC. It's easy, and a lot of people do it.
I've done X.509 too for WEBGUI and CRM WEBCLIENT. It's technically "free" in the sense of if you already have an internal CA and the ability to push out certs to all your users. But again, I don't see how this would work for the PC SAPGUI, regardless of what the help documentation states.
If you don't have the infrastructure in place, the SAP NW SSO license also comes with features to push out X.509 as well.
NICK
Hey Sanket,
for sure if you are trying to enable X.509 for SAPGUI, you are barking up the wrong tree.
All the stuff you have done so far is for SNC, not X.509.
X.509 is only an option if you were trying to get to the WEBGUI SSO, like in a browser to the "webgui" webdynpro.
can you tell us exactly what you want to accomplish in terms of the SAP PC SAPGUI and/or the HTML browser "webgui"?
NICK
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Sanket,
Have you gone through all the steps as per the below link
http://help.sap.com/saphelp_nw73/helpdata/en/4e/125e0a1e3d2287e10000000a15822b/content.htm Thanks, Jagadish
User | Count |
---|---|
84 | |
25 | |
12 | |
9 | |
6 | |
6 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.