RE: SNC configuration setups

Dear Experts,
I would like to know that , once SNC is configured and setup in the application server does all the SAP GUI connections to the Application server must be of SNC (SNC name)
or do we have option like normal and SNC name connection both can be applicable to connect to the server from the SAP GUi.
Appreciate your help.

Hi Rajendran,
Both type of logons are allowed however following profile parameter need to be taken care of:
snc/accept_insecure_gui.
If its value is set to 1 insecure login is generally allowed.
If the value is U then insecure login is permitted according to user,
depending on the flag in the user master record
If the value is 0 insecure login is not permitted at all.
Hope this helps. Please award points for useful inputs.
Regards.
Ruchit.

Similar Messages

SNC Configuration

Hi Gurus,
I am working on the Contract Manufacturing Scenario for SNC. The system landscape is ECC-XI-APO-ICH.
When Purchase Order is created idoc is sent out to XI already but having problems with sending XI to APO.
Do you know if there are SNC Configurations to be done in SCM as the receiver of the XML Message.
Thanks a lot for your answers.
Regards,
Armi

Hi Armi,
Hi,
SAProuter/SNC via Internet
u2022 SNC secured SAProuter u2013 SAProuter connections are established between SAP and the customeru2019s SAProuter to provide data confidentiality and integrity services. These SNC connections complement the leased lines in the current SAPNet R/3 Frontend environment. State-of-the-art encryption, authentication, and access control technology will be employed. No additional hardware compared to a leased-line setup is required at either end of the connection. (See diagram below).
u2022 Customers are required to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet. All service connections between SAP and the customer must be made over the respective SAProuters.
u2022 Certificates needed are available on the SAP Service Marketplace.
Requirement:-
Internet connection: recommended
minimum bandwidth = 64 kbps
SAProuter machine
Official IP address (static) for the SAProuter host.
SAProuter installation package
SAP SNC libraries and executables.
These may be downloaded from the SAP Service Marketplace.
A Demilitarized Zone at the customer site with a minimal setup as described in the networking section at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track
SAP Security Guide.
More information on SNC connections is also available in the SAP Service Marketplace.
Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.
Other networking equipment (routers and hubs) needed to form the network at the customeru2019s premises
Comparisions
Property SAProuter / SNC via Internet
Hardware requirements Firewall + SAProuter host in DMZ
Software SAProuter starting from NI version 35
SAPSECULIB can be obtained from the Service Marketplace
Network addresses (besides address of Internet router, firewall, u2026) 1 official static IP address for SAProuter
Configuration issues Careful setup of saprouttab necessary for security. Saprouttab influences security strongly as access is controlled via saprouttab and firewall.
Encryption By software
Encrypted data TCP packets
Only the data stream between SAProuters is encrypted
Encryption is handled on Application layer (OSI network layer 7)
Minimum required free bandwidth 64 kbit/s but may work also with
32 kbit/s
Supported services on SAP side All except FTP (files download)
Key management Digital certificates being requested via Service Marketplace Public Key Infrastructure (PKI)
Key storage In file system
Operating system SAProuter resides on a computer
therefore it is necessary to harden the security at the operating system level (for example, C2 level OS) to minimize the risk of the machine being hacked from the Internet
Additional expertise SAProuter knowledge usually available, SNC configuration requires additional knowledge
Standards Based on SNC, SAP proprietary standard
Contributing to costs u2022 Firewall hardware and software
u2022 Firewall administration costs
u2022 No additional license fee for security library based on SECUDE
Hope this helps.,
Thanks,
Naga

SNC configuration in multiple application server environment

Hello Experts,
We are planning for SNC configuration between ECC 6 and NW04s Portal systems.
ECC 6.0 is running with Central Instance and two application servers.
NW04s EP is running with 4 server nodes.
I am very much clear about setting up SNC between ABAP and JAVA running with single application server and server node.
But totally confused about SNC/SSL setup in multiple server environment. Would really appreciate if you can provide some ideas/docuements on setting up SNC/SSL in multiple server environment.
1. Do we need to create multiple PSE for each of the ABAP application server? If yes then would the CN should be same or different.
2. If we create only one PSE for central instance and copy this to other application server - will this work.
Looking forward to hear from your experiences.
Regards
Davinder

Hi,
Please check the link http://help.sap.com/saphelp_nw04/helpdata/en/69/b0bbd6dde71141bee8806586144796/frameset.htm
Regards,
Gowrinadh

Problem with SNC configuration

We Gui SNC configured for almost 10 system and it works. Now we want to configure it for a new one and unfortunately it works.
We have checked the config:
- parameters in RZ10
- existence of Kerberos dll in /windows/system32
- active directory settings for a SAPServiceSID user
- advance setting in saplogon
All looks fine but yet when we try to connect we get:
SAP System message: Secure Network Layer (SNC) error
Please help

Hi,
The Sap Note 95810 - Problem analysis when using SNC with Secude says the following about your prob. Pl check.
2.1 Error in the Security Network Layer
During the logon a dialog box appears:
SAP system message:
'Error in the Security Network Layer'.
In this case, a problem was recognized in the SNC layer in the application server.
The cause must be checked in the trace files of the work processes (dev_w*).
Since it cannot be said in which work process the logon was attempted, you must scan the trace files of all work processes if necessary.
Transaction ST11 displays the corresponding files sorted correponding with the last access time so that you should begin with the first file shown there.
Error scenarios which can be identified in dev_w*:
2.1.1 The signature of a certificate cannot be checked.
ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c ....]
      GSS-API(maj): A token had an invalid signature
      GSS-API(min): Certification path incomplete
    Unable to establish the security context
<<- SncProcessInput()==SNCERR_GSSAPI
ERROR => ThSncIn: SncProcessInput (SNCERR_GSSAPI) [thxxsnc. ....]
2.1.2 Invalid PIN
ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c ....]
      GSS-API(maj): Miscellaneous failure
      GSS-API(min): Invalid PIN
    Unable to establish the security context
<<- SncProcessInput()==SNCERR_GSSAPI
ERROR => ThSncIn: SncProcessInput (SNCERR_GSSAPI) [thxxsnc. ....]
Regards

Virtex6:Configuration data download to FPGA was not successful. DONE did not go high, please check your configuration setup and mode settings

Hello，everyone.
I am using virtex6 FPGA and trying to download mcs file to PROM and have failed.
I download .bit file to FPGA and succeed.
When i try to download .mcs file to PROM XCF128X-FTG64C(BPI Flash) and choose Slave SelectMAP Mode
and the process is about 68% it fails.
The message below the IMapct is as belows:
done.
PROGRESS_END - End Operation.
Elapsed time =      0 sec.
// *** BATCH CMD : identifyMPM
// *** BATCH CMD : assignFile -p 1 -file "C:/Users/Administrator/Desktop/TEST/LED/led.bit"
'1': Loading file 'C:/Users/Administrator/Desktop/TEST/LED/led.bit' ...
done.
INFO:iMPACT:2257 - Startup Clock has been changed to 'JtagClk' in the bitstream stored in memory,
but the original bitstream file remains unchanged.
UserID read from the bitstream file = 0xFFFFFFFF.
INFO:iMPACT:501 - '1': Added Device xc6vlx240t successfully.
INFO:iMPACT - Current time: 2014/3/13 8:48:14
// *** BATCH CMD : Program -p 1
PROGRESS_START - Starting Operation.
Maximum TCK operating frequency for this device chain: 66000000.
Validating chain...
Boundary-scan chain validated successfully.
INFO:iMPACT - 1: Over-temperature condition detected! [ 230.52C > 120.00C]
1: Device Temperature: Current Reading: 230.52 C, Max. Reading: 230.52 C
1: VCCINT Supply: Current Reading:   2.997 V, Max. Reading:   2.997 V
1: VCCAUX Supply: Current Reading:   2.997 V, Max. Reading:   2.997 V
'1': Programming device...
Match_cycle = NoWait.
Match cycle: NoWait
LCK_cycle = NoWait.
LCK cycle: NoWait
done.
INFO:iMPACT:2219 - Status register values:
INFO:iMPACT - 0011 1111 0111 1110 0100 1011 1100 0000
INFO:iMPACT:579 - '1': Completed downloading bit file to device.
INFO:iMPACT:188 - '1': Programming completed successfully.
Match_cycle = NoWait.
Match cycle: NoWait
LCK_cycle = NoWait.
LCK cycle: NoWait
INFO:iMPACT - '1': Checking done pin....done.
'1': Programmed successfully.
PROGRESS_END - End Operation.
Elapsed time =     23 sec.
Selected part: XCF128X
// *** BATCH CMD : attachflash -position 1 -bpi "XCF128X"
// *** BATCH CMD : assignfiletoattachedflash -position 1 -file "C:/Users/Administrator/Desktop/TEST/LED/leda.mcs"
INFO:iMPACT - Current time: 2014/3/13 8:49:32
// *** BATCH CMD : Program -p 1 -dataWidth 16 -rs1 NONE -rs0 NONE -bpionly -e -v -loadfpga
PROGRESS_START - Starting Operation.
Maximum TCK operating frequency for this device chain: 66000000.
Validating chain...
Boundary-scan chain validated successfully.
INFO:iMPACT - 1: Over-temperature condition detected! [ 230.52C > 120.00C]
1: Device Temperature: Current Reading: 230.52 C, Max. Reading: 230.52 C
1: VCCINT Supply: Current Reading:   2.997 V, Max. Reading:   2.997 V
1: VCCAUX Supply: Current Reading:   2.997 V, Max. Reading:   2.997 V
'1': BPI access core not detected. BPI access core will be downloaded to the device to enable operations.
INFO:iMPACT - Downloading core file D:/Xilinx/14.3/ISE_DS/ISE/virtex6/data/xc6vlx240t_jbpi.cor.
'1': Downloading core...
Match_cycle = NoWait.
Match cycle: NoWait
LCK_cycle = NoWait.
LCK cycle: NoWait
done.
INFO:iMPACT:2219 - Status register values:
INFO:iMPACT - 0011 1111 0111 1110 0100 1011 1100 0000
INFO:iMPACT:2492 - '1': Completed downloading core to device.
Current cable speed is set to 6.000 Mhz.
Cable speed is default to 3Mhz or lower for BPI operations.
Current cable speed is set to 3.000 Mhz.
Setting Flash Control Pins ...
Setting Configuration Register ...
Populating BPI common flash interface ...
Common Flash Interface Information Query completed successfully.
INFO:iMPACT - Common Flash Interface Information from Device:
INFO:iMPACT - Verification string: 51 52 59
INFO:iMPACT - Manufacturer ID:        49
INFO:iMPACT - Vendor ID:             01
INFO:iMPACT - Device Code:           18
Setting Flash Control Pins ...
Using x16 mode ...
Setting Flash Control Pins ...
Setting Configuration Register ...
'1': Erasing device...
'1': Start address = 0x00000000, End address = 0x008CE03B.
done.
'1': Erasure completed successfully.
Setting Flash Control Pins ...
Using x16 mode ...
Setting Flash Control Pins ...
Setting Configuration Register ...
INFO:iMPACT - Using Word Programming.
'1': Programming Flash.
done.
Setting Flash Control Pins ...
'1': Flash Programming completed successfully.
Using x16 mode ...
Setting Flash Control Pins ...
Setting Configuration Register ...
'1': Reading device contents...
done.
'1': Verification completed.
Setting Flash Control Pins ...
Current cable speed is resumed to 6.000 Mhz.
'1': Configuration data download to FPGA was not successful. DONE did not go high, please check your configuration setup and mode settings.
`Elapsed time =    814 sec.
and i find many people have met the same thing. But they are spartan series FPGA and i try to low the Resistances of Mode pins,M0 M1 and M2, but the problem does not been solved.
I have read the status Registers and find there is an over-temperature state
and in Impact i could not readback the registers. It is strange.
I am anxious about this problem and have not solved it yet
What reasons may it be?
Hope for your answer, thank you

Hi~I want to know if you solve the configuration problem for virtex-6?
As I encounter the  same configuration problem, I want to consult  you with some question.
Can I have your email?
gszakacs wrote:
I have measured the VCCINT and find it is 1.0V, not 2.997V;
That is not at all surprising. I always assumed the problem is with reading the XADC (system monitor) block and not with the voltage or temperature.
my Reference board is ML605
That would have been nice to know at the beginning...
It seems that you have selected the correct mode, assuming your jumpers are set as required in the ML605 Hardware User's Guide. See table 1-27, table 1-33 and the note below it about switch S1.
I'm not that familiar with the details of this reference design, but it may be that the slave SelectMap circuitry requires a reset or power cycle to actually configure the FPGA. Have you tried power-cycling to see if the FPGA boots from the flash?
I'd also suggest that you select the V6 in the JTAG chain view, then go to the debug menu of Impact and select Read Device Status (this is from memory, but it's something like that). That will not only show the bits of the configuration status register, but also describe what each bit means. Among other things you can check the state of the FPGA's configuration logic and the Mode pins.

Best practice Forms 10g configuration setup and tuning

Hi,
We are currently depolying forms 10g from 6i client/server version. Users are experiencing Form hangups and hour glasses. This does not happen that often but can happen any time, anywhere in the app (users do inserts, updates and deletes and queries).
Is there a baseline best practice configuration setup anywhere either in the Forms side or the AppServer side of things?
Here is our setup:
Forms 10g (9.0.4)
Reports 10g (9.0.4)
Oracle AppServer 10g (9.0.4)
OS = RedHat Linux
Client Workstations run on Windows 2000 and XP w/ Internet Explorer 6 or higher
Average No. of users = 250
Thanks for all your help

Shutdown applications within the guest.
Either power off from Oracle VM Manager or 'xm shutdown xxx' from the command line
It is possible one or more files could be open when the shutdown is initiated.
Have found at least one case of misconfigured IP which would have resulted in the disk access being via the 'Front End' interface rather than the Back End.
Thanks

Configuration setup forLow Value asset 'Investment support measures'

Hi all
User requested us to enable the u2018investment support measuresu2019 option for low value asset for that if any configuration setup is required to enable the option for low value asset.
Please help us to resolve the above issue and attached screen shot for your reference.
Note: In high value asset user is able to view the u2018investment support measuresu2019 option.
Regards
K.Gunasekar

Thanks
1. Our current requirement is adding new grant book leg to LVC Classs.
2. what will be the impact to our existing assets database?
if not can we follow the below step
we will need to create new LVA class so that grant book leg for LVA can be created. In this case, we will need to transfer assets from the existing LVA class to new LVA class.
Please clarify

Workflow Configuration Setup.

Hello,
I need to carry out the initial Workflow Configuration setup for Workflow on the development box.
Need some help.
1. List of steps that I need to execute to setup workflow configuration.
2. User Roles that my sap userid should have to execute Workflow COnfiguraiton setup. for example for automatic configuration.
Thanks

As far as I am aware I am fully complying to forum guidelines.
I did not attack
I did not use abusive language
I did search before I posted
And I did not insult.
I did give an opinion and I did ask a question.
It's up to you to answer that question in the affirmative, negative or even refrain from answering at all.
Your choice.
I, as a professional have been frequenting this forum for quite some time AND have been giving some of my vast knowledge and experience back tot this otherwise wonderful community. (see questions:answers ratio )
It might be my problem but whenever someone decides to post a question in a forum I project my own professionalism and ethics and read the post as if I could have posted it.
Call me arrogant but the very least I expect is that the questioner has put some effort into trying to find the answer for him-, or herself before posting a question.
And I hazard to guess that that is the gist that the other Rob is hinting at.
Cheers, have a wonderful life and always endeavor to be the best,
Rob Dielemans

Withholding configuration setup at receipt from customer level

Hi
This is regarding the WHT configuration setup
when customer deduct TCS and pay the amount, i have configured all the necessary steps
while invoice level, WHT function is working, but not at receipt entry level
suggest me on this what suppose to do
Regards
Govind
Edited by: Govinda Avula on Apr 29, 2008 3:16 PM

Hi,
Generally you can use the same tax types and codes for customers as the vendor. But i would advice you to have the tax codes seperate so that when you assign accounts for posting, you can assign different GL accounts as per the tax codes.
Note: one issue i faced in using withholding taxes for customers were the differences in the tax deducted by SAP and the tax deducted by the customer. In SAP we might round it off but the customer might not do so. Then you have a problem trying to reconcile the right amount especially when the customer makes a payment against more than one invoice.
Hope this helps.
Thanks and Regards,
Anit

Standard Configuration setup stalled...

So my standard configuration setup seems to be stuck.
I've tried rebooting and it makes me go through the quick setup again. Though it won't ever finish. Is there a way to skip this part or should I just do ANOTHER clean install?

Just ended up doing another fresh install. Don't mess with the machine while it's finishing the setup.

Reg:Configuration&Setup guide

Hi,
In our troupe we have implemented one Application (Java/ Oracle) for clients.
And we need to prepare configuration/setup guide for this application
So What information i need to mention in that guide.
could you please help me in this..

Rajakumar,
There are almost an infinite number of ways to configure IM, depending on the business processes your client intends to implement.
Start with SAP Best practices config guide for [Materials Management|http://help.sap.com/bp_bl603/BBLibrary/Documentation/104_BB_ConfigGuide_EN_IN.doc].
Other BP guides at [Best Practices (India)|http://help.sap.com/bp_bl603/BBLibrary/Content_Library_BL_EN_IN.htm]
Rgds,
DB49

HT1430 how long does the configure setup take when u first turn on the IPAD? mine seems stuck at the language choice. HELP

How long does the configure setup take when u first turn on the IPAD? Mine seems to be stuck in the language choice. Help!

It should not be stuck at the language choice. Is there a "Next" button in the upper right corner? Or a blue arrow pointing to the right?

Diff between BPELConsole and BPELAdmin (Configuration setup)?

What is the difference between the Configuration setup in BPELConsole und BPELAdmin?
Which one has priority?
Peter

Configuration section in the BPEL Console is used to configure that particular domain for example logging level of that domain whereas BPELAdmin is for managing the domains, like creating a domain, deleting a domain, etc. Hth.

Mainnumber configuration setup in Germany/Austria

Hi All,
at this moment I 'm in the middle of a rollout of Voip in Vienna (Austria).
Everything works fine except one thing.
In Austria you can dial to the main to the main number without dialling the 00
As example if you call a user you will dial locally in Viena 8120313-65, the main number in this case 8120313-00.
Both will work
If you dial the main number without the extra 00 it doesn't work , displaying cause = 28 incorrect number.
On the old system it's working.
I miss something, can some one guide in right direction.
Regards,
Erick

Problem has been solved, the telco didn't the send the right digits.
It seems the PBX from +431XXXXXXX disconnects calls with no extension or only one extension ! (cause: Inv.num format -> 28 location:user )
The A1 network sends only extension digits when the are dialed from the calling subscriber ! No further information are send to the PBX !
Only the configuration of DDI ( Direct dial in) in the switch can be modified !
Now the DDI configuration of the Subscriber Number +431XXXXXXX is DDI STND, this means only extension digits are send to PBX.
Other configurations are :
DDI SUBNO = subscriber number and extension number XXXXXXX + extension digits
DDI NATO = national subscriber number and extension number 1XXXXXXX+ extension digits
DDI INATO = international subscriber number and extension number 431XXXXXXX + extension digits
i.e DDI SUBNO sends in the SETUP message: Type of Number: Subscriber ; Number Called: XXXXXXX. And extensions digits in INFORMATION messages !
we have choosen for DDI SUBNO and after changing the dialpeer and transformation rule it works fine.

SNC configuration with JCO

Hi Experts,
I am very new to SNC, and my projects requirement is to configure the SNC between the JCO (A java app using JCO api) and ABAP server.
JCO(Java application)---ABAP server
Is there any docs or writeup/blog which I can refer to achieve this.
I tried searching this but could not get any relevant information. Mostly what I got is the SNC between SAP GUI and ABAP server.
I am a newbie to SNC, I appreciate your help.
Cheers
Sara

Please have a kind look on <a href="https://service.sap.com/sap/support/notes/645876">SAP Note 645876</a> and the attached SNC_JCO.pdf document.

RE: SNC configuration setups

Similar Messages

Maybe you are looking for