ECC implementation

Dear everyone,
Really sorry if this sounds dumb coz i am totally new to java cryptography n have worked with only swing all this while). I am trying to implement Elliptic curve cryptography with ECDH key exchange. However after readin quite a lot, i have the following doubts. They say, sun offers support for ECC thru Java Crypto Extension(JCE). Does that eliminate the need for a provider like Bouncy castle. If Sun directly support ECC classes(thereby eliminating need for provider), are there any axamples related to the same. If not, is Bouncy Castle really reliable or there any other good providers for implementing ECC->ECDH->MAC

JavaNovicer wrote:
lol... actually "they" refers to the internet... jus came out that way.. Still much too vague. I didn't think that Sun had implemented ECC in their JCE provider which is why I was asking about who 'they' was. A URL would be nice.
anyways so u r convinced it is best to use Bouncy castle if i am trying to implement ECC???I never said I was convinced it is the best. I have never used ECC in anger and know little about it except through some simple tests. I just said that Bouncy Castle was a generally well regarded provider.

Similar Messages

Replicating SRM PO to ECC PO with all condition types

Hi Friends,
I want to Repliacte SRM to ECC PO with all condition types, can any one give me idea on this
thnx
Kumar Srini

I think you meant "replicate SRM PO's condition set to ECC PO". If this is the case, there are a couple of options.
Option 1. In ECC, implement BADI BBP_PO_INBOUND_BADI, method: BBP_MAP_BEFORE_BAPI
In the method implementation, make a remote function call to SRM BBP_PD_PO_GETDETAIL. Get the condition information (E_PRIDOC). Then map it to the BADI interface parameter BBP_POCONDHEADER / BBP_POCOND
Option 2. In SRM, copy your PO transfer driver FM, e.g. B46B_DPO_TRANSFER. In the copied FM, e.g. ZB46B_DPO_TRANSFER, get the PO condition information, insert two additional parameters, POCONDHEADER / POCOND when calling BBP_PO_INBOUND, and map the SRM PO condition to these two parameters accordingly. Then implement BADI BBP_DRIVER_DETERMINE to switch to your own FM driver.

New to Solution Manager Implementation

Hi Experts:
We have implemented SAP ECC 6.0 in our company, our Organization decided to implement SolMan SP15. I will be a part of the team to implement SolMan. Just give a background of my experience, I am a MM Consultant.
I need some direction from the Experts, first from where to start. Any relevant links to the right documents will be very helpful.
Secondly for a SolMan consultant what should be the prerequisite from the previous experience point out view. It is required that the candidate to have SAP Basis knowledge.
Any helpful guidelines and links to the material will be highly appreciated.
Thanks
James

Hi Bill
For you it is better to go to Solution manager functional role...or Solution consultant
which is actually involved in implementation point of view.
For you it is not required to learn basis........for e.g u r gng to do a ECC implementation ....wht is req from u will be
Basis will set up landscape RFC logical component etc
And you will create a project in solmaan do the blueprint in Solar01 etc.......for satellite ECC system
and Even in the operation like Service Desk /CHARMS etc....can BASIS go and understand client processes ....and implement it in solman service desk.
I dont think so....basis install solman and activate bc sets and do some basic configuration.....
there after there are lot of CRM sort of configration like Sold to party and other BP creation with determination rule which is ofcourse can be done by you as u being functional role understand the ORG hierarchy of the client.SLA implementation etc.
I hope it clarifies ur doubt
Regards
Prakhar

Implementing SAP Security

Hi,
For a new ECC implementation, what is the best strategy or approach to use in implementing roles and authorization? Is there a blueprint that I can use?
FYI, we are not implementing Virsa.
Your response is highly appreciated.

Litz Tee wrote:>
> Is there a blueprint that I can use?
I doubt you'll ever find (a usable) one for free or on such a forum for that matter. Most of us earn (part of) our money designing them tailored to the customers' needs. I for one am surely not going to give examples away.
The best strategy will always be:
1- determine the needs in the company (what are the tasks for various people and which resources do they need to achieve their goals).
2- determine which data has to be secured.
3- draw a concept based on above information and have it validated by the business.
4- design taskroles (singles) per task and functionroles (composites) to group tasks into functions.
5- test both tasks and functions. The first test can be part of a unit test while the second one will be like an integration test.
People you need:
Functional consultants per module. They know about module-specific authorization stuff.
Business consultants and/or key users who know which processes there are and how they're divided over the various jobs/functions in the company
The (internal) auditors to tell you which information needs to be secured.
As you see this is not a one person job and the outcome will differ per company.
Jurjen

CProjects 4.0 - SAP R/3 4.7 - Accounting Integration problem.

Dear all,
I have performed all steps necesaary for accounting integration in cProjects and SAP R/3 FI System.
I can even see and assign the cost rate that I have created in cProjects to a project role.
System also calculates the cost for the role multiplyin the cost rate with the number of hours the resource has been assigned.
However, it also displays the following warning messages:
1. An error occurred in Accounting (system QASCLNT777)
2. Function module "IAOM_CPRO_MISC_RFC_CPDEF_CHECK" not found.
3. No cost center could be determined for organizational unit 00000000
4. Maintain a revenue element for cost/revenue rate ZZ_000001
5. Error occurred in accounting - check the costing in the ERP system
When I execute the transaction COCPCPR in R/3 system, I cannot see the internal order, but see the project name under "Internal Orders not created"
Regards,
Reema.

Hi reema, if we refer to the documentation pertaining to accounting integration for cProjects 4.0, we see that the prerequisities is ECC 6.0
Please see below from the help documentation
Integration
To be able to use the functions of accounting integration, you have to implement the Internal Orders (CO-OM-OPA) application component and Project System (PS) in SAP ECC 6.0.
Prerequisites
You need to make a number of Customizing settings in both the Collaboration Projects and SAP ECC Implementation Guides (IMG):
Settings in the Collaboration Projects IMG
You selected the Controlling in mySAP ERP setting in Customizing for Collaboration Projects under Connection to External Systems ® Accounting Integration ® Activate Integration as the Accounting Integration Scenario.
I feel the error messages are thrown because you are using SAP R/3 4.7. I see from the SAP notes, for CATS integration with cProjects 4.0 and SAP R/3, SAP consulting is available, but nothing is mentioned for accounting integration.

RICEF Security - best practice to develop security specs

Good Morning All,
We have new ECC implementation kicked off, my question is how RICEF security is controlled? What are the standard guidelines practised in industry?
We are encouraging process teams to start use authorizations checks in custom transactions where ever necessary, ABAP team says this is in discreation of BP, ABAP will enforce checks if Business Process(BP) ask.
I not sure if BP will take that extra time to think on authorization checks for RICEFS, we security team offered help to BP saying we can help on finding appropriate auth objects for their RICEF objects.
As we cannot really enforce this or push hard, I am trying to think what is best way to get this in place.
What I think is for some custom tcodes, which are low risk reports there is really no need to induce 2nd level check(1st level being S_TCODE) but my concern is this should not be taken for granted.
I would like to hear suggestions from group.
Thank You.
Edited by: Julius Bussche on Apr 22, 2011 5:46 PM
Subject title made more meaningful.

Their job is to make it work and security is very often seen as a barrier
This is very unfortunate but often true Security can however also offer cool solutions to spagetti code and defunct requirements!
As you correctly state, the reason is often lack of training, awareness and being under pressure from deadlines and complexity. I also suffer under this but have with time learnt that "right first time" is the best way.
The ideal solution IMO would be to integrate the authority-check statement into both the external and internal license meaurement.
- A program without any authority-check is freeware because anyone can run it.
- A program with a display auth check run by a user with display authorizations costs 1 cents each time.
- A program with change / create checks run by a user with change / create authorizations costs 2 cents each time.
- A program with delete checks run by a user with delete authorizations costs 5 cents each time.
- Any program with any checks run by a user with FROM --> TO ranges in authorizations costs 20 cents each time.
- A program with a display auth check run by a user with SAP_ALL costs 100 cents each time.
- etc...
This way, developers will add as many appropriate checks to their code so that it generates revenue from the application. Business process owners will try to restrict the authority-checks to only those really needed and will restict authorizations as much as possible to exact values when testing their roles.
Would work like a charm... but I'm sure there is a catch somewhere...
Cheers,
Julius
Edited by: Julius Bussche on Apr 24, 2011 12:07 AM

How to use ES bundles (with or without PI)?

Hello Experts,
I am new to this forum and this is my first question
I am currently working in a landscape comprising of ECC 6.0 EHP4 and APO systems. We do not have SAP PI installation.
I wanted to know the right way forward to get SOA enablement.
I understand that Service enablement is two fold (Please correct me if I am wrong):
1) 'Inside out' (from FMs) for which the WS runtime engine of the AS is sufficient. The services thus generated can be consumed directly from other SAP systems (within our landscape only??) or from a frontend app which can conume services (probably a widget developed in .NET with a cool UI).
2) 'Outside In' where services are modeled in PI/ OR standard SAP services (ES bundles) can be used.
My question , more precisely, is if we need SAP NW PI to use these ES bundles from the service marketplace.
If No, the how can it be done?????
If yes, then do the Business objects to which these services are related to also provided along with this content??? And do these business objects correspond the the ones whihc are available in the Business Object Repository in the backend???
Is there any other alternative to getting SOA enabled without actually having to instal SAP Nwtweaver PI??
I am really looking forward to some interesting answers from the experts on this forum.
Thank you well in advance. Regards,
Amith

> So, is it right if I say that the services available in the backend are already implemented? And just creating an endpoint for them would make them ready for use?
Yes: kind of instant services
> Also if I consume a service, say, 'CreateSalesOrder_In' for example, will it create entries in all my Sales order relevant tables (VBAK, VBAP) automatically using a BAPI internally?
The service has the task to do all necessary steps, whether with or without using a BAPI.
> Actually, I have these doubts because during my time at SAP Labs (for the composites team in BusinesByDesign), I used to create business objects in the ESR and create an implementation for the same in the backend using BOPF. But now, in the customer scenario, where a full fledged ECC implementation is used, I am unaware as to how the services would update the tables or even read the relevant data.
My consumer view on aservice is that I do not have to know how the service works, just need to know how to call it.
Regards, Boris

What am I doing wrong? Enterprise Webservices arent working but...

Hopefully this caught your attention. I am having a problem with the Enterprise Services that are delivered in the different enhancement packs for ECC 6.0.
My landscape is as follows: CE 7.1, PI 7.1, and ECC 6.0, and using the ESR (Service Registry and Enterprise Service Builder) that came with PI.
I am able to successfully model a service in the ESB, create the proxy for it in ECC, implement the proxy, create a binding via SOAMANAGER, and publish it via SOAMANAGER to my Service Registry. I can then create a Visual Composer application that can consume the service. No problems at all there.
My problem is when I try to use any of the other Enterprise Services that show up in SPROXY in the ECC system. I use ES workplace to find what I want, then go to my ECC system, find them there, and then I try to make them usuable to my landscape. Thats when the problems start. For most of them, I can create a endpoint/binding and publish the service to the SR however when I try to test it from the SR, I get a variety of errors:
CustomerERPBasicDataByIDQueryResponse_In_V1 shows configured When I test I get:
Invalid Response Code: (500) WSDL could not be generated. The requested URL was:"http://SERVER:PORT/sap/bc/srt/wsdl/bndg_490F3DEECDE30030E1008000C71A3207/wsdl11/binding/ws_policy/document?sap-client=200"
Note that the SERVER and PORT have been changed in the URL above
Any ideas???

ok, here is an update on the problem.
If I go into SOAMANAGER from my ECC box, Click Business Administration, then Web Service Administration, locate my service, then click on "Open Web Service navigator for selected binding" link in the overview tab, this will send me to the Web Service Navigator on the same box as my Service Registry. I can then put in my user/pass and see the service operation to execute.
HOWEVER,
When I go directly to the Service Registry to find this same service, I get the error I mentioned earlier.
This leads me to think that there is some sort of issue when you publish your service.

No Exporting System for system ECP-100 in project ZECC_QGM

Hi
we are using QGM Functionality in Solution Manager7.1 with SP08 for ECC Implementation project.
last week we migrated your Solution manager system to a different Hardware, where there is a change in IP address, Host name and SID was changed.
and we alos patched the system from SP08 to Sp10.
After the patching, i performed all the system preparation and basic configuration and managed system configuration was finished.
Configured STMS on Solution Manager and Linked the Both the Domain controllers(ECC and SOLMAN).Every thing was find up to now.
when i tried to do do consistency check on Project, through TX; SOLAR_PROJECT_ADMIN, i am getting the following error.
No changes were made on ECC -STMS.
i just recreated the STMS for SOLMAN after the migration.
Error message as follows:
No Exporting System for system ECP-100 in project ZECC_QGM
where ECP is my production system and ZECC_QGM is the project.
I didn't changed anything in terms of Logical components, all the 3 system are included in to Logical component and RFC- READ and TMW are fine.
could some shad some light on that ,is there any thing that needs to checked after the system copy of Managing system interns o this STMS>

Hi
This is known error and the issue got resolved by applying a SAP Note:1878718.
Kind Regards,
Phaneendra K

Variant Configuration Data download from R/3 to CRM

Hello all
It may be a very dumb question, but I would certainly appreciate an answer.
We are currently using SAP R/3 4.6c and heavily use VC for configurable products and also for pricing.
Now we wish to explore the possibility of using SAP CRM 5.0 to enable our sales force to use CRM PCUI to create quotes for configurable materials.
My questions are as following:-
1. Is it possible to download all VC related data into CRM from R/3 including pricing? I understand that for different VC object, I will have to use different CRM objects but is it possible? If the data transfer is possible, is it typically done by a middleware resource?
2. I would also like to confirm that by creating a run time version and Kbase is pre requisite to enable the download to CRM.
If you could please point me to the appropriate help on this topic, I would really appreciate it.
Best regards
Jai

Hi Gun,
In your message, You stated
As recommended by SAP, if we have R/3 link into our CRM
the best scenario is to get VC product from R/3 into CRM.
Is there any documentation tjhat backs this up? could you give it to me
we have a situation in our company where we have been using a home grown product that not only lets you configure product bu it also takes the user through a selling experience for example it asks the user if he is interested in buying any accessories for the product and provides options through pop messages and the user can select. this way it takes leads the user through questionnaires that comes in pop ups to select a product
we have crm service and ecc implemented and now we need to implement this feature for the crm sales piece
the question is do we go for PME or variant config that is already set up in ECC ?
the link and middle ware set up between ECC and CRM is also available so we can bring the variant configuration from ECC into crm. but how about the questionnaires and the selling experience that is available through pop up questionnaires,
we can set up the selling experience via the Product modeler but as a company we need to make a decision whether we bring the varinat configuration from ecc and use the selling experience for the pop up questionnaires that leads customer
or should we just use sales packages that behaves similarly like varinat configuration and add enahcnements to create the pop- up questionaires
Could you direct /provide some guidance in this area?
Sara

How to use bone tool without getting my vector/object distort?

Wish to get some help here. I drawn my human body figure using pen tool. I connect the bone tool directly without separating the part of (hand,legs and head) into symbol. After that, I try to move the hand but it get distort. Not just the hand but the body and head also getting distort as well. Do we need to necessary convert the body parts to symbol first before connecting the bone? Thanks.

> So, is it right if I say that the services available in the backend are already implemented? And just creating an endpoint for them would make them ready for use?
Yes: kind of instant services
> Also if I consume a service, say, 'CreateSalesOrder_In' for example, will it create entries in all my Sales order relevant tables (VBAK, VBAP) automatically using a BAPI internally?
The service has the task to do all necessary steps, whether with or without using a BAPI.
> Actually, I have these doubts because during my time at SAP Labs (for the composites team in BusinesByDesign), I used to create business objects in the ESR and create an implementation for the same in the backend using BOPF. But now, in the customer scenario, where a full fledged ECC implementation is used, I am unaware as to how the services would update the tables or even read the relevant data.
My consumer view on aservice is that I do not have to know how the service works, just need to know how to call it.
Regards, Boris

Security Models 3-Tier Vs 4-Tier

Hello Security Colleagues,
We are evaluating the two models for our brand new ECC implementation.
We have license for GRC5.3,IDM 7.1.
Would you please share your thoughts/experiences ? much appreciated...
I am also searching for SAP recommendations.
Regards,

Hi Raghu,
It is the concept that is important. Typically this is used for companies with lots of org levels.
Bear in mind the following:
- You will not be able to run single role level SOD analysis using RAR (actually you will but the results will be meaningless).
- You will break the standard auth concept and every transaction addition will take more work for every addition.
- When you remove a transaction you need to evaluate all the auth objects associated with that transaction to judge if they need removing too.
- You will likely introduce additional risks if you have 1 enabler/org/value role which applies to more than 1 transaction role
- Your implementation will be harder to review/audit. This will increase your audit costs as they will likely need to perform more substantive tests as a result of not being able to check SOD so easy (you could say it is their problem, but it will also become your problem)
- As soon as the originators of the design leave then history shows that the implementation will end up a mess as staff are onboarded who do not understand this method.
- Increased support costs if outsourced.
Out of the many, many implementations I have audited, this concept has left most of them in a complete mess. I don't know if you work for an end user or a consultancy, if it is the latter then it would not be without precedent that your company is forced to pay for a rebuild one or two years after implementation. Very few have done it well.
This is just my 2p based on seeing & fixing it.
Cheers
Alex

Quotation comparison in SAP

I work for a construction group (Group ABC), we have SAP ECC implemented. I joined here about 2 weeks ago. And I am shocked knowing the way SAP is used here, more of emails used than SAP itself for processes.
I am working for a company (Company C) within the group which has been setup to do purchases for the projects. We are not located at the project sites (Company A&B) (intercompany).
We (Company C) get RFQs from one site and from another we get PRs, these are downloaded from ME4L and ME5A respectively every morning! The buyers at Company C are then assigned with PRs manually and they have to contact vendors, negotiate and get quotations. There are no PIRs maintained (Only PIRs created from past POs rolled data), nor any source lists.
Now is where I need help:
The buyers at Company C enter various quotations from suppliers into an excel spreadsheet template called “comparitives”, and the spreadsheet is sent to the project Company A or B via E-mail, they select the materials & vendor based on pricing and other criteria, the spreadsheet is then sent back to the purchasing team at Company C with the selection of vendor and materials which is then further negotiated by the buyers.
This is a process (Emails) which I am sure firms do not ideally use for this purpose, other than to communicate or notify etc. Is there a way that this can be moved to SAP? Is there something standard in SAP for this? It is more like an intercompany situation, however we do not have or store the materials, they are shipped directly to the project site from the vendor.
Looked at vendor evaluation, doesn’t seem right because these may be new vendors or new materials and I suppose vendor evaluation works based on past POs issued. (correct me if Im wrong)
Unfortunately, the company doesn’t have an SAP team in-house, they have outsourced it to a third party and no changes are approved easily, because of cost issues. Any help would be great. I am no consultant, however I have fair understanding on SAP MM processes. If there is a way this can be done without development, that'd be great!
Cheers!

Hi Daine,
Yes you can attach an image to the PR if you have a document management system configured. Open the PR in ME52N and say create attachment:
Once you have attached the file, click on the services menu again and click on send as shown below. The PR will go to the required person in his SBWP and he can go over the price comparison.

Change in Currency in SAP

Hi
Mine is Indian Company. At present INR is the currency for the company code 1000.
However as per IFRS, my company's functional currency is getting changed to USD from INR
So please let me know if its possible to change the currency of the company code 1000 from 1st April 2011 (date from which IFRS is getting implemented)
Please let me know what are the steps and issues i need to check for changing the currency of on-going company code.

Hi,
Simply Company Code Currency change not possible,
1 u2013 If you are in ECC implement parlel accounting concept (Leading & Non Leading Ledgers)
2 u2013 In this case leading ledger for Indian GAAP & Non Leading for US / IFRS purpose, same time you will satisfy more than one GAAP.
Regards,
Viswa

ChaRM and BI Transports

We have setup and configured ChaRM and started using it for an ECC Implementation Project and tested an ECC Maintenance Project.
However, Per OSS Note 1115759 (and experiences!), we do not use import all functionality for our SAP BI environment.
With ChaRM, it seems import all (or at least import all for the project) is used for both the implementation project and normal corrections of the maintenance project. We are not sure what to do for BI.
Does anyone have experience/recommendations for ChaRM with BI Systems?
Thanks!
Christine

Hello
You should first fix the errors you get such as the missing consolidation system
Please see thread [Re: No consolidation system found for SID in solman; or check the forum on the error message "'No consolidation system found for" and you will find relevant information.
I would advise to update your SAP Solution Manager though to one of the latest available levels, there are a lot of fixes and enhancements to Charm (and also availability of quality gate management which gives some of the functionality of Charm but is more compact).
Kind regards
Tom

ECC implementation

Similar Messages

Maybe you are looking for