How to make SAPPORTALSDB0 cookie in Portal secure?

[Former Member]

Portal 7.01 SP11 generates multiple cookies namely JSESSIONID, SAPPORTALSDB0, MYSAPSSO2, PortalAlias, saplb_*, SAPWP_active. We found ways to make almost all of them to be sent through secure channels (SSL). But for the cookie "SAPPORTALSDB0", we could not find a note or a help document that tells us how to make its "secure" flag to be "true". It is currently sent for all types of connections through the browser.

As for security's sake all the cookies should be sent through secure channels.

For example, we used Note:1490669 to make SAPWP_active cookie secure.

[Former Member]

Cookies are generated from J2EE engine  - please follow below link for the info :

http://help.sap.com/saphelp_nw70ehp1/helpdata/en/5b/ac1a0a8b8d6b4da3b79a7fe0aeabd8/content.htm

Thanks,

Dev

[Former Member]

Well there is not mention of this particular cookie SAPPORTALSDB0 anywhere is your document.

[Former Member]

Hello Faraz,

maybe you still need the information: in the SAP note 1816989 you will find them.

Wilhelm