Sap PI-xml Digital Signing and encryption in PI-ehp1

Hi Experts,
Our Business scenario is sap R/3 (sender)>rfc data to PI and to webservice(receiver) using rfc and soap adapters
The communication channels are secured by snc/ssl.
Now the issue is PI have to send digitally sign and encrypt xml messages to receiver and I got no clue how to do this.
Experts please advise.
We have to Digitally sign and encrypt xml messages in PI
1)can we use SAML or Ssfdata xml..if so how to use them,can you send me some documents with screen shots so that i can configure the same in PI
We used adepative tool but it does not support Dsigning
2)Please advise the correct procedure
3)how to develop a adapter user module and how to call it for testing purpose...please advise
O/s:windows
PI EHP1 7.1
DB:oracle
PLEASE HELP
Thanking you
Pooja

Hi Experts,
Please Advise for my above querys
1)I tried to develop a EJB project and generate EAR file and depoly it in J2ee server and create adapter modules to call It..however I tried to use a document provided my sdn http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b39e65-981e-2b10-1c9c-fc3f8e6747fa?quicklink=index&overridelayout=true................however I am unable to see the options provided ,unable to create EAR project and unable to see deploy option,please can you share a correct document irrespective of nwds SP level
2)Apart from giving JNDI name in module tab,what else should be mentioned for a small test message request/response
3)How to call the adapter for testing purpose apart from monitoring audit logs
Please Advise Experts
Thanking you
Pooja

Similar Messages

  • Can't digitally sign and encrypt email any longer.

    I used to sign and encrypt my emails digitally and then send them to people. I had two email certificates from Comodo, and it's been a while they're expired. so I renewed my certificates and deleted the old ones from my keychain, then downloaded and added the new ones. The trouble is I no longer get the digitally sign the message and encrypt the message button when I compose a new email. What could be the problem? how can I fix this?

    I am now having the same problem.  Have you seen a resolution yet?

  • Digitally Signing and Encrypting Email

    Hi,
    I have an iPhone 3GS and I cannot find any setting or application that allows me to import a root certificate onto the phone to digitally sign or encrypt outgoing email.
    Does iPhone support this?

    I installed my digital certs by just emailing them to myself then clicking the attachment. Additionally, you can use the new Enterprise Configuration utility to push these out.
    I however, have not been able to figure out how to digitally sign or encrypt outgoing email. Looks like Apple and the iPhone still has a way to go with Enterprise level features.

  • Handling digitally signed and encrypted emails

    Hi all,
    Is it possible to handle digitally signed emails with LiveCycle ES?
    And what about encrypted emails?
    Sincerely
    Kim Christensen

    LiveCycle does not handle signed or encrypted emails out of the box.
    You could develop a component to do this, or you could get someone to develop it for you.
    Email us at info-at-avoka.com if you'd like to discuss further.
    Howard
    http://www.avoka.com

  • Digital Signatures and Encryption in Yosemite Mail

    After upgrading to Yosemite, I am having difficulty using the Mac Mail app to send digitally signed and encrypted email.
    Before the upgrade to Yosemite, I was able to send signed and encrypted emails using certificate/keys in my keychain using both the Mac Mail app and Microsoft Outlook 2011 for Mac.
    After upgrading, I am still able to send signed and encrypted message in Outlook, but the Mac Mail app gives the following error when I attempt to send a signed email:
    'You don’t have a trusted certificate in your keychain that matches the email address “XXXX@XXXX”. Without a certificate, you can’t sign messages sent from this address.'   (Actual name replaced)
    When I look at my certificates in my keychain, a certificate is available with "Usage: Digital Signature" that has the email address from the error message "XXXX@XXXX" with exact case in the RFC 822 Name.
    Another interesting piece of data that might help track this down is that when I first launch the Mac Mail application, the Mac Mail application is able to successfully decrypt emails that have been previously sent encrypted to me.  HOWEVER, after I attempt to send an email and get the "You don’t have a trusted certificate..." error message, these emails are no longer able to be decrypted.  I get the "Unable to decrypt message" header above the message and the content of the message is just a "smime.p7m".  If I close the mail application and restart it, these encrypted message are once again decrypt-able until I attempt to send a message.
    It almost seems like things are working until mail tries to access the keychain.
    I have attempted to delete my certificate and keys from my keychain and then adding those items again.
    I have attempted to close the mail application and reopen it.
    I have attempted to reboot my computer.

    1.  I want to confirm that this is still an issue for me in 10.10.1 and mail Version 8.1 (1993)
    2.  I have another data point.
    At my office I have wired networking and wireless networking available.  Primarily I utilize the wired networking for access to network drives, etc.
    When using the wired networking, I experience all the problems that have been catalogued in this thread.  Can't sign, can't encrypt, can't close the compose window after the mail program fails to find my certificate.
    However, when I switch to wireless networking before starting the mail application, digital signatures and encryption seem to work!  This is pretty weird behavior.  Make sure to restart mail if you were previously wired.
    Here are some theories:
    Something to do with OCSP?  When I am wired vs wireless I am on different ip subnets and subject to different firewall rule sets.  Perhaps OCSP is trying to determine the status of the certificate and failing? 
    Here are some things I have tested:
    I switched to a different official apple brand thunderbolt to ethernet adapter with no change in behavior
    I disabled wireless and disconnected my wired network.  So no network access at all.  Signatures and encryption work!  The message obviously does not send, but it appears in my outbox and I don't get the signature error.  When I reconnect my wired cable, the message sends successfully and appears as encrypted in my sent folder!
    I have attempted to disable OCSP by using "Keychain Access --> Preferences --> Certificates Tab --> OCSP (OFF) and CRL (OFF)" but this hasn't made a difference in the behavior of wired networking.
    Ran a TCPDUMP on traffic to the OCSP service but didn't see any traffic when I attempted to send a message and received the signature error
    I am pretty stumped on this.  This is very odd behavior
    Does anyone else experience this behavior?

  • Unable to digitally sign or encrypt messages in Mail

    I recently switched from a PC to a Mac and I have been unable to digitally sign or encrypt any of my e-mails. I'm currently running version 3.3 (926.1/926) for Mail and I made sure that my .cer security certificate is located in Keychain Access as well as certificates for my contacts. My certificate is valid because it has the green checkmark next to it.
    I know what the *digitally sign* and encryption buttons should look like and where they should be located when composing e-mails, but they are just not there for me. Does anyone have any advice on how to fix this. Does it matter which folder the .cer security certificates should be located in for Keychain Access? Or is there a specific option I need to enable within Mail to be able to see those buttons?
    I know that Mail is recognizing security certificates for e-mails that are being sent to me because it is showing the starburst/checkmark icon next to those e-mail addresses, and my Address Book is showing that same icon next to those e-mail addresses for my contacts.

    I finally have a solution to this problem. I had been trying to use a .cer security certificate issued by Comodo, it had worked just fine on Windows but my Mac didn't seem to like it. I also tried creating my own certificate through OSX, but even after I created it I still couldn't see the buttons.
    I had someone direct me to this webpage which ultimately helped me fix the problem:
    http://allforces.com/2007/03/02/email-security/
    I ended up using Thawte to issue me another security certificate (this time it was an x.509 file), the security certificate automatically opened in Keychain Access and downloaded to the Certificates and My Certificates folder. Once I shutdown Mail and restarted it I had the buttons for both encryption and digitally signed. Of course the encryption button is still greyed out because it is a new certificate and I need to make sure my Address Book contacts have a copy of it before I can encrypt.
    Message was edited by: Matthew Little

  • Encoding configuration for signed and encrypted emails

    I have a 8820 device (no BES server)  - I have certificates downloaded and trust on the device.  I can attach the requisite certificates to the message, but I do not have the option to select signing or encrypting encoding.  the menu does not give me this option.  I have the S/MIME package installed.  Any thoughts / pointers?

    The S/MIME support package is only supported with a BES. You might try Djigzo for BlackBerry. Djigzo for BlackBerry is an add-on to the Djigzo Email Encryption Gateway which can be used to send and receive S/MIME digitally signed and encrypted email from a BlackBerry smartphone. An installation of the Djigzo gateway is required.
    Djigzo for BlackBerry and the Djigzo gateway is open source and can be freely used.
    For more information see www.djigzo.com
    Djigzo open source email encryption

  • Digitally Signed and/or Encrypted Emails -- Can't Scan or Search

    I work in an environment where we enforce digital signatures and encryption on emails when certain conditions exist in the body of the email (e.g. hyperlinks, attachments, etc.).  What we've found, over the years, is that Exchange 2010 doesn't appear
    to be able to read the body or attachments on emails that are signed or encrypted.  We've found this because Transport rules consitently fail against these emails and Search-Mailbox fails to return results against test emails that have been digtially
    signed/encrypted using Body or Attachment keywords as criteria.
    Has anyone else run into this, can explain this, or know if there is a workaround/hotfix?  I heard from someone that Exchange 2013 fixes this issue but need a resolution for 2010.  Any assistance would be greatly appreciated.

    No you're right.  The customer keeps coupling the two because of their adjacency in Outlook and I repeated it because I've been hearing it all day.  The limitation of encryption is well understood but digitally signed emails are only plain-text
    with added s/mime data.  However, this latter case still seems to baffle Exchange 2010 -- Transport rules don't act upon rules based on body-content and attachments and Search-Mailbox will not report users' mailboxes as having mail that's searched for
    if it's digitally signed.

  • Signing and Encryption Error PI 7.0

    Hi All,
    The scenario is
    1) Two XI boxes are connecting with each other using XI adapter. Earlier there was signing and encryption  certificate used
    for data transfer and was working successfully.
    2) From last 2-3 weeks source XI system is getting error in Call adatper as mentioned below. Then we tried to remove signing and encryption certificate so we disable both end the security check.  And tried to send normal message but then also we are getting following error in Call adapter in SXI_MONITOR
    Signature error Error while valdiating the digital signature. Theerror was com.sap.security.core.ws.wss.NoSecurityHeaderException No wsse:Security header has been defined for role soap:finalActor. Please verify the
    Error during message security handling in inbound channel: Security profile 'Check Signature and Decrypt Message'
    3) The SM59 connection is working fine. We have tried cache refresh. But still issue is not resolved.
    Please guide

    Hi Abhay
    Probably the issue is with the public keys which are stored in both the XI boxes , as both the keys will be same .
    Also check digital signatures which are maintained .
    Regards
    Ninad

  • Digital singning and encryption

    I developed Web Sevices with Soap messages Encripted and Signed with Apache XML Security (AXIS compatible) but now I'm working with Oracle 10g. I like to use the 10g's new features (JAX-RPC, Soap, UDDI, etc) but I like to still sending Encripted and Signed messages. Anyone know if Xml Security is compatible with 10g or if there are another Library like Apache's one?
    Thank You
    Wilberto Montoya

    Hi Amber,
    The work is based on the finalization and imminent publication of the
    wsse Oasis spec. This is targeted for WLS 8.1 SP3, and you can contact
    our outstanding support organization, reference CR134931, for details.
    Regards,
    Bruce
    Amber Osterman wrote:
    >
    I recently attended the webinar on Web Services interoperability w/ .NET. The
    presenter mentioned that digital signatures and encryption did not work w/ Workshop
    8.1. Is it fixed in 8.1 SP2? Also, are there any interoperability issues w/
    NET and Workshop using digital signatures and encryption.

  • Digital Signature and Encryption using IAIK

    What support does Netweaver provide for Digital Signatures and Encryption. Does it use IAIK for implementing security. It will be good if somebody could give some starting points.

    Welcome to SDN!!!
    Starting point: http://service.sap.com/security
    You can use sapcryptolib (provided by SAP) for Digital Signatures and Encryption. (Also described in the link mentioned above).
    Regards
    Juergen

  • Mail Signing and Encryption Algorithms

    Hi,
    Is there a way to select which algorithms are used for signing and encryption when using S/MIME with the Mac Mail app?
    Thanks and regards,
    Phil.

    Hi Abhay
    Probably the issue is with the public keys which are stored in both the XI boxes , as both the keys will be same .
    Also check digital signatures which are maintained .
    Regards
    Ninad

  • Digital Signatures and Encryption

    I recently attended the webinar on Web Services interoperability w/ .NET. The
    presenter mentioned that digital signatures and encryption did not work w/ Workshop
    8.1. Is it fixed in 8.1 SP2? Also, are there any interoperability issues w/
    .NET and Workshop using digital signatures and encryption.

    Hi Amber,
    The work is based on the finalization and imminent publication of the
    wsse Oasis spec. This is targeted for WLS 8.1 SP3, and you can contact
    our outstanding support organization, reference CR134931, for details.
    Regards,
    Bruce
    Amber Osterman wrote:
    >
    I recently attended the webinar on Web Services interoperability w/ .NET. The
    presenter mentioned that digital signatures and encryption did not work w/ Workshop
    8.1. Is it fixed in 8.1 SP2? Also, are there any interoperability issues w/
    NET and Workshop using digital signatures and encryption.

  • Issue while Signing and Encrypting the PDF Document.

    Hello,
    I am developing one component in VC++(MFC) which signs and encrypts the pdf documents.
    When i sign and encrypt pdf document using my component, I am getting following error while opening the document in Adobe Acrobat
    Error during signature verification
    Unexpected byte range values defining scope of signed data.
    Details: The signature byte range is invalid
    But if i open that document in binary mode and calculate the byte range its looking correct.
    The Process for signing and encrypting the PDF document is as follows :
    1)Prepare the PDF document for signing (Add Annotation objects,n0,n2
    layers,create blank signature field,new xref section etc.)
    2)Encrypt the whole document(Password based encryption).
    3)Put the ByteRange values.
    4)Write the signature in blank signature field.
    If i just perform encryption(128 bit RC4 Algorithm) on the pdf document its working fine.Only after adding the signature objects i am getting above error.I think it means something is wrong in signature related objects,but i am not able to recognize the exact problem.
    So what can be the issue?
    Please Help
    Thanks in Advance
    Priyanka

    I am sending the Sample Files
    blank.pdf file is a original file
    http://www.2shared.com/file/4677649/3f341d92/blank.html
    step 1: I am adding Signing object(without data in Contents<> key) in
    blank.pdf file.
    Output File is Prepared-blank.pdf
    http://www.2shared.com/file/4677648/48332d04/Prepared-blank.html
    step 2: Sending Prepared-blank.pdf file for encryption.
    Output File is SignednEncrypted-blank.pdf which is Encrypted and Signed.
    http://www.2shared.com/file/4677647/d88c3095/SignednEncrypted-blank.html
    Password for opening SignednEncrypted-blank.pdf is : "a".
    Please help.
    Thanks.

  • Looking for "PDF Public-Key Digital Signature and Encryption Specification"

    Hi,
    i am looking for the following ("old") document:
    PDF Public-Key Digital Signature and Encryption Specification
    Originally i could be found here:
    http://partners.adobe.com/asn/developer/acrosdk/DOCS/ppk_pdfspec.pdf
    But not anymore. Does somebody of you still have it? Adobe today just offers the latest documents but i specifically need that older version.
    Or is there an archive i don't know of?
    Thanks for your help,
    ToM

    You can read the PDF 1.5 specification OR even ISO 32000-1 itself for that information. Each feature is "tagged" with the specific version in which it was introduced.
    Digital Signatures were first introduced in Acrobat 4 (PDF 1.3) and have seen various improvements which each version since.

Maybe you are looking for