Encrypting a data element in XI Logs

[Former Member]

Hi,

Is it possible to just encrypt a specific data element coming into XI in the outbound message? We are passing order data from our web based tool (which is used within company firewall by our sales reps) containing credit card info via XI to ECC. We are using SAPCRYPTOLIB to encrypt the data in SAP...however the XI logs stores the credit card information in clear text. I was wondering if its possible to get a handle to XI log creation process to encrypt the credit card info?

Any response will be greatly appreciated.

Thanks,

Paresh

[Former Member]

hey

there is a way around for this,you can restrict the access to the payload.

/people/michal.krawczyk2/blog/2005/05/25/xi-how-to-add-authorizations-to-repository-objects

/people/michal.krawczyk2/blog/2006/01/02/xi-sxmbmoni--controlling-access-to-message-display

https://sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/7e4105db-0601-0010-bf87-bd3f714...

Thanx

Aamir

[Former Member]

Thanks for the link Aamir. But becuase of audit requirements, this will not work for us. I have got one solution...in which we encrypt the credit card info at the sending sytem and decrypt in ECC so the logs in XI will show only the encrypted data. However, I am looking for more elegant solution.

Any inputs will be highly appreciated.

Thanks,

Paresh

[Former Member]

I have send a not to SAP to check if there is any way this could be done.Its been a week and I haven't got any response from their dev team. Does XI expose any API that can be implemented for Message Logging to the database?

[Former Member]

Paresh,

I would like to know how you handled this situation. I have a similar requirement and I don't see any solution other than controling the access to the payload of the message. Your help would be greatly appreciated.

Regards

Arvind