SNC via SAPCRYPTOLIB

How to configure SNC with sapcryptolib?? I try to find manual. Can somebody help me to find Administrator Guide or something close?

Hi Alexey,
The SNC manual is available from the help portal here:
http://help.sap.com/saphelp_nw2004s/helpdata/en/db/1f1740198d8f5ce10000000a155106/frameset.htm
Regards,
Yonko

Similar Messages

SNC/ECC Integration via XI standard content

Hi Everyone,
We are trying to integrate an SNC system (formerly known as ICH) with backend ECC systems and have the following questions:
1) Modifications to XI delivered Content
I understand that it is best practice to copy XI delivered content into our own namespace and make modifications from that point on. For messages coming from SNC via ABAP proxy into XI, it is still coming in on the SAP namespace, which seems to be hardcoded in SNC. What is the correct way to work with SAP delivered content in XI?
2) Content based receiver determination
We have installed the SNC XI content into our systems, but in the SLD it does not show up under the SWCVs for our SNC system. This is stopping us from doing content based receiver determination as the dropdown for the filter page is throwing an error that the content is not installed. Has anyone come across this issue?
Thanks
Peter

Hi,
1. Modifications to XI delivered Content
Yes, its preferrable to copy XI delivered content into your namespace and make modifications in it. But if the messages are comming to SAP namespace then you can just re-use the Message Mapping with the Message type from SAP namespace and in it make the further configurations such as receiver communication, receiver determination etc .accordingly.
2. Probably you have to use it with SAP Product only, as its not available under the Product designed by you and the the your namesapce and the other one are different. so try to configure the Receiver determination for SAP namespace only.
Thanks
Swarup

SNC kept receiving Non POD-related update from our R/3 system.

Hi Nikhil and others,
It seems our old problem below still exist.
Background Process: Supplier will send ASN (advanceShpNotification) to us from SNC via IDOC (DESADV) to create an inbound delivery (IB) in our R/3. If the vendor is POD-related (i.e. maintained as POD in vendor master), then R/3 will only insert ouput type OP0D into the Output delivery table automatically upon IB creation. At this point, our R/3 has a build-in routine to stop sending IDOC (STPPOD) to SNC before GR. Only after GR is performed, the the IDOC (STPPOD) is triggered and send the POD notices to SNC.
Problem/Question: Everything works fine in QAS client, however, problem arised in production in which SNC is receiving POD updates from our R/3 of IB with vendors that ARE NOT POD-related. Now, the OP0D output type get insert into IB even with vendor that is NOT POD-related (i.e. not maintain in vendor master). WHY? I suspect is the OPOD problem, but this never happen in QAS. Why? The configuration setup are matched on both client, Why?
The following is our setup for WE20:
Partner: PI Production Client
Partner Type: LS
1 - PORDCR1
2 - PROACT
3 - STPPOD (Transfer IDOC immediately ==> Checked, Output mode 2, Basic Type: Delvry03, message control is OP0D for Message type and Process mode, E1 is the application value.
Partner: SNC production Client
Partner Type: LS
1 - DESADV
2 - ORDRSP
3 - WHSCON.
The following is our setup for MN24:
Delivery Type ==> "EL", Funct ==>"VN", Partner ==> empty , Medium = A, Date/Time = 4, Language = EN.... thanks tuffy

Hi Tuffy,
The OPOD gets inserted in Inbound Delivery depending on the setting maintained in MN24.
Please, check what is the setting maintained for EL. If no partner is mentioned, the output message would be inserted for all Vendors but the STPPOD would only be generated for vendors which are POD relevant and for which Partner Profile is maintained.
Regards,
Sandeep

SNC parameters in Connector properties of System in EP.

Can anyone explain the parameters that deal with SNC in the connector categories when we create a new System in EP.
I need to conenct to an R/3 backend system using SNC via portal. Currently i can aces that system using SNC but via the SAP Launch Pad.

Hi Jaynet, thanks for your reply.
My cells do contain values so that's no problem. It's a very simple setup where I have 2x6 cells with a couple of parameters that are to be used by all my connections in the workbook.
Using vb code to update the "forgotten" parameters inside the connections was something I also was thinking could be a solution. Just felt it would be a shame when the functionality for what I'm trying to do cleary has been built
in to excel in a very simple way through the UI.
Before I go down the vb route I'm gonna see if I can find more info about any fixes for this bug in excel, maybe a hot patch or something like that. (I can't speak vb so building such a thing is going to take a while for me as I have to take bits
and pieces I find around the web to get stuff working) :)

SNC Configuration

Hi Gurus,
I am working on the Contract Manufacturing Scenario for SNC. The system landscape is ECC-XI-APO-ICH.
When Purchase Order is created idoc is sent out to XI already but having problems with sending XI to APO.
Do you know if there are SNC Configurations to be done in SCM as the receiver of the XML Message.
Thanks a lot for your answers.
Regards,
Armi

Hi Armi,
Hi,
SAProuter/SNC via Internet
u2022 SNC secured SAProuter u2013 SAProuter connections are established between SAP and the customeru2019s SAProuter to provide data confidentiality and integrity services. These SNC connections complement the leased lines in the current SAPNet R/3 Frontend environment. State-of-the-art encryption, authentication, and access control technology will be employed. No additional hardware compared to a leased-line setup is required at either end of the connection. (See diagram below).
u2022 Customers are required to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet. All service connections between SAP and the customer must be made over the respective SAProuters.
u2022 Certificates needed are available on the SAP Service Marketplace.
Requirement:-
Internet connection: recommended
minimum bandwidth = 64 kbps
SAProuter machine
Official IP address (static) for the SAProuter host.
SAProuter installation package
SAP SNC libraries and executables.
These may be downloaded from the SAP Service Marketplace.
A Demilitarized Zone at the customer site with a minimal setup as described in the networking section at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track
SAP Security Guide.
More information on SNC connections is also available in the SAP Service Marketplace.
Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.
Other networking equipment (routers and hubs) needed to form the network at the customeru2019s premises
Comparisions
Property SAProuter / SNC via Internet
Hardware requirements Firewall + SAProuter host in DMZ
Software SAProuter starting from NI version 35
SAPSECULIB can be obtained from the Service Marketplace
Network addresses (besides address of Internet router, firewall, u2026) 1 official static IP address for SAProuter
Configuration issues Careful setup of saprouttab necessary for security. Saprouttab influences security strongly as access is controlled via saprouttab and firewall.
Encryption By software
Encrypted data TCP packets
Only the data stream between SAProuters is encrypted
Encryption is handled on Application layer (OSI network layer 7)
Minimum required free bandwidth 64 kbit/s but may work also with
32 kbit/s
Supported services on SAP side All except FTP (files download)
Key management Digital certificates being requested via Service Marketplace Public Key Infrastructure (PKI)
Key storage In file system
Operating system SAProuter resides on a computer
therefore it is necessary to harden the security at the operating system level (for example, C2 level OS) to minimize the risk of the machine being hacked from the Internet
Additional expertise SAProuter knowledge usually available, SNC configuration requires additional knowledge
Standards Based on SNC, SAP proprietary standard
Contributing to costs u2022 Firewall hardware and software
u2022 Firewall administration costs
u2022 No additional license fee for security library based on SECUDE
Hope this helps.,
Thanks,
Naga

No transfer exists for goods receipt reference(From ECC to SNC )

Hi All,
We are facing one issue in ECC and SNC while transferring Goods Reciept Information to SNC via ECC.
We recieved ASN information from SNC and did Goods Reciept against ASN via Inbound delivery.
Now when we used the report RSMIPROACT to transfer Goods Reciept Information it is giving message
"No transfer exists for goods receipt referenc".
I did all setting like
I ticked check box for Goods Reciept Reference and Delivery03.
Source list is maintained and also Message type STPOD is configured for Logical system.
Please can some one help me in telling me why system is not selecting any PO for transfer of GR information even tough Goods Reciept is done for PO.
OR
Is there anyotherway where we can send the Goods Reciept Information from ECC to SNC
Thanks and Regards
Raghavendra Pai

Hi Raghavendra ,
Make sure in We20 following setting is required:
Go to your partner type LS (logical system) and create outbound parameter:
Message Type:STPPOD
Receiver Port:<Your port number> which connects to PI from ECC
Transfer IDoc Immed checked with Output mode=2
Basic type:DELVRY03
Checked Cancel Processing After Syntax Error.
No other setting is required in above outbound parameter.
Go to RSMIPROACT report
You need enter following data:
1)Plant
2)MRP area of plant
3)If want for all material then enter * or enter list of materials
4)Enter target system (SNC system)
5)checked only Goods receipt Reference
6)In execution parameter select Update run radio button
7)Log select log complete report
8)IDoc type DELVRY03
Lastly main thing is GR date enter GR date.
When you execute RSMIPROACT report you will get this message "No transfer exists for goods receipt reference" then it will ask whether you want to change your selection click on <b>NO</b>.
Now check whether IDoc is got triggered or not?
Let me know for any clarification.
Thanks,
Nikhil

BPM sending messages to wrong inbound interfaces in PI and target system

Hi All,
i am doing File to proxy scenarion using bpm.i am receiving three files,two files splitting on based condition(location code) in receiver determination and sending to bpm(here one bpm receiving 3 files then it merges 3 files into one proact and some promo messages based promos in source file ,same in the second bpm with 2 files with different mapping,here target system is SAP APO SNC).i am doing testing now mapping and every thing is working fine.but first bpm sending messages(proact and promo messages) target sytem side (proact_in and promo_in)inbound inrefaces.if i am executing scenario both bpm sending (proact and promo) messaegs in target system its showing wrong bpm name.in target system also we can check messgaes sxmb_moni.
ex:if first bpm A sending 1 proact and 2 promos,and second bpm B sending 1 proact and 2 promos to target system,but in target syetm its showing sender component as 1st bpm A for 3 promo messages(here B bpm messages sending with A bpm viceversa i did the configuration correctly) and for 1 its showing second bpm. please give me suggetions how to resolve this issue.
Thanks,
seshagiri.

Is the connection to SNC via idocs or proxies. If it's via idocs can you check the control record and see if the issue is not there ?

Business partner "PaymentTransactionInitiator" is missing

Hi Experts,
I am implementing PO processing scenario in SNC 7.0.
When the payment is processed from ECC, the IDOC REMADV is triggered from ECC and it is sent to SNC (via PI). But when the respective XML message reaches SNC, it falls over with following error message.
"Business partner "PaymentTransactionInitiator" is missing" with message code : /SCA/BIF_INVOICE: 081
I am wondering if I am missing on assignment of any business partner role assigned to the supplier in SNC.
Any help on this issue will be highly appreciated !
Thanks in advance.
Regards,
Amit

Hi Amit,
Check whether you have maintained inbound message for invoice payment.
if not then maintained it and re triggered the IDoc.
Path:SPRO>Supply Network Collaboration>Basic Settings>Process Types for Inbound Messages>Assign Sender- and Recipient-Dependent Process Types (Inbound)
maintained PaymentAdviceNotification-inbound.
Let me know if it is working.
Thanks,
Nikhil

Inbound Email for Upload attachment

HI Guys,
What is the procedure to Upload CSV File attachment by inbound email in SNC via File Transfer Functionality.
-$andeep

Hi Nikkil
We are facing the same issue on upload File Transfer through Inbound Email functionality
It Would be great if you throw some light on this issue
We are processing ASN through an Email for Due List of purchasing Documents
When we send a E-mail with CSV file as an attachment to the defined Reciepent Mail addresss
It reaches SNC and also visible in SOIN TA, but there is no further update on this transaction, ASN is not getting posted for this attachment
We had made the following Setting for Inbound Email for File Upload
Make Settings for Global Constants- qRFC destination, Sender e-mail
Number Ranges for File Transfer-Define Number Ranges for Upload Profile Number
Determine Accepted E-Mail Addresses for File Upload- we had mapped the Interace(ASNDLPD) to Email Pattern
Determine Error Control of the File Upload - for Interface (ASNDLPD)
And we are also maintanied the exit rules for Inbound processing In SO50 - we had entry for /SCA/CL_FTR_MAIL_INBOUND for Internet Mail(Communication Type)
Is there any other setting that we missed out?
Regards
Satish

Changing SAP Router to different System

HI Experts,
                SAP Router is installed in our Develpoment system can it be possible for us to install this on the solution manager System. Is this advisable to change the SAP router to a different machine. If so How is that possible?
Regards,
Vamshi.

Hi,
Please use the following step.
Installation Steps
1.1     Downloading necessary software components from SAP Service Marketplace:
1.     SAProuter
Use the latest SAProuter version (37.x), which can be downloaded from
SAP Service Marketplace under the following link.
http://service.sap.com/swdc
     Download
     Support Packages and Patches
     Entry by Application Group
     Additional Components
     SAPROUTER
     SAPROUTER 6.40
SAPROUTER 6.40
From the available list of SAProuters, select the SAProuter for your OS platform.
2.     SNC Libraries (SAPcryptolib) download:
http://service.sap.com/swdc
     Download
     SAP Cryptographic Software
Select the SAPcrytoLib libraries compatible with your Operating System.
Note: Please also download the SAPCAR.exe file from the above location to extract the SAProuter archive files.
3.     Create a folder in /usr/sap with the name as: saprouter.
4.     Extract both the files i.e. SAProuter.SAR and Cryptolib.CAR files into saprouter folder using the command:
SAPCAR -xvf SAProuterxxx.SAR
SAPCAR -xvf CRYPTOLIBxxx.CAR
1.2     Creating the certificate request
1.     As user <snc>adm set the environment variables:
SECUDIR = /usr/sap/saprouter
SNC_LIB = /usr/sap/saprouter/libsapcrypto.so
2.     Go to the Trust Center Service - Download Area and get the "Distinguished Name" for your SAProuter from the list of SAProuters registered for your installation.
3.     Generate the certificate Request with the command:
./sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
P.S: We can also get the distinguished name from SAP itself when we register for the remote service connection.
4.     Display the output file "certreq" using the command:
cat certreq
and with copy & paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.
1.3     Importing the certificate request
1.     With this in turn you can install the certificate in your saprouter by calling
./sapgenpse import_own_cert -c srcert -p local.pse
1.4     Setting secured login to SAProuter
1.     Now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
2.     This will create a file called cred_v2 in the same directory.
3.     Check if the certificate has been imported correctly
./sapgenpse get_my_name -v -n Issuer
4.     If this is not the case, delete the files cred_v2, local.pse and start over at Item 3 of 4.2 . If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands 3 of 4.2, 4.3, and 4.4.
1.5     Additional actions necessary before you can start saprouter
1.     Logon to the system as <sid>adm, here sa1adm.
2.     The environment variables SECUDIR, SNC_LIB and USER needs to be set for the user account SAProuter is running under using the commands:
setenv SECUDIR <path_to_libsecude>
i.e. setenv SECUDIR /usr/sap/saprouter
setenv SNC_LIB <path_to_libsecude>/<name_of_sapcrypto_library>
i.e. setenv SNC_LIB /usr/sap/saprouter/libsapcrypto.so
setenv USER sa1adm
3.     Check if the environment of the user running saprouter contains the environment variable SECUDIR, SNC_LIB and USER using : printenv
4.     Start the saprouter with the following command line:
#./saprouter -r -S <port> -K "p:<Your Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
Eg. ./saprouter -r -S 3299 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
./saprouter -r -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
./saprouter -r -R /usr/sap/saprouter/saprouttab -G log.txt -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
5.     The corresponding file ./saprouttab should contain at least the following entries
inbound connections MUST use SNC
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
repeat this for the servers and port_numbers you will need to allow,
please make sure that all explicit ports are inserted in front of a
generic entry '*' for port_number
outbound connections to <sapservX> will use SNC
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
permission entries to check if connection is allowed at all
P <IP address of a local host> <IP address of sapserv2>
all other connections will be denied
D * * *
6.     Example: For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> 194.39.131.34 3299
deny all other connections
D * * *
Thanks,
Harshal

Remote Connectivity to SAP

We are installing connection to SAP for SAP support over Internet. I know there are two options as below
1. SAPRouter/ SNC via Internet
2. Internet VPN.
Would someone please let me know which one to choose for smaller type of setup? Which one is easy to setup ?
I guess most of the customers go with SAPRouter/ SNC via Internet . I need to know the pros and cons of each setup.
Please help,
Al Mamun

Most of the info you require is here:
http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000039022&_SCENARIO=01100035870000000202&
pro's and con's are here:
http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000234692&_SCENARIO=01100035870000000202&
SNC : extra softwaere + certificates
VPN : intervention at both sides ( SAP+ customer)
SNC : software level encryption
VPN: hardware level encryption
faq:
you can start with the faq:
http://service.sap.com/~form/sapnet?_SHORTKEY=01100035870000677551&_SCENARIO=01100035870000000202&

Procedure to run the saprouter over the internet

Hi all,
Require any information on the below issue:
We are experiencing serious problems with the OSS link. This is due to the link not being adequate for the kind of requirements OSS and Solution manager has for connectivity to SAP.
It is currently a dedicated link running at 28 K which is very less
Is there a procedure to run the saprouter and OSS over the internet ?
Thanks in advance
Sreeni

Hello All,
Thanks for info..
I have found some more info while searching on market place..
https://websmp208.sap-ag.de/internetconnection
In 2 ways Customer can establish Internet connections to SAP:
(1)Secure network communication (SNC) via SAProuter software to deliver software encryption
(2)Virtual private networks (VPN), which provide hardware-level encryption
Regards
Sreeni

SAPOSS connection

I have to open OSS conection to SAP..Please let me know which sapserver I should choose and what to be done at saprouttab file ...I tried with sapserver2 but It would not work..
unable to connect SAPnet message server
Error :
partner sapdp99 not reached
error no :81
no route to host.
I would appreciate your steps and procedure to be done for each Production server

Hi,
SAProuter/SNC via Internet
u2022     SNC secured SAProuter u2013 SAProuter connections are established between SAP and the customeru2019s SAProuter to provide data confidentiality and integrity services. These SNC connections complement the leased lines in the current SAPNet R/3 Frontend environment. State-of-the-art encryption, authentication, and access control technology will be employed. No additional hardware compared to a leased-line setup is required at either end of the connection. (See diagram below).
u2022     Customers are required to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet. All service connections between SAP and the customer must be made over the respective SAProuters.
u2022     Certificates needed are available on the SAP Service Marketplace.
Requirement:-
Internet connection: recommended
minimum bandwidth = 64 kbps
SAProuter machine
Official IP address (static) for the SAProuter host.
SAProuter installation package
SAP SNC libraries and executables.
These may be downloaded from the SAP Service Marketplace.
A Demilitarized Zone at the customer site with a minimal setup as described in the networking section at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track
SAP Security Guide.
More information on SNC connections is also available in the SAP Service Marketplace.
Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.
Other networking equipment (routers and hubs) needed to form the network at the customeru2019s premises
Comparisions
Property     SAProuter / SNC via Internet
Hardware requirements     Firewall + SAProuter host in DMZ
Software     SAProuter starting from NI version 35
SAPSECULIB can be obtained from the Service Marketplace
Network addresses (besides address of Internet router, firewall, u2026)     1 official static IP address for SAProuter
Configuration issues     Careful setup of saprouttab necessary for security. Saprouttab influences security strongly as access is controlled via saprouttab and firewall.
Encryption      By software
Encrypted data     TCP packets
Only the data stream between SAProuters is encrypted
Encryption is handled on Application layer (OSI network layer 7)
Minimum required free bandwidth     64 kbit/s but may work also with
32 kbit/s
Supported services on SAP side     All except FTP (files download)
Key management     Digital certificates being requested via Service Marketplace Public Key Infrastructure (PKI)
Key storage     In file system
Operating system     SAProuter resides on a computer
therefore it is necessary to harden the security at the operating system level (for example, C2 level OS) to minimize the risk of the machine being hacked from the Internet
Additional expertise     SAProuter knowledge usually available, SNC configuration requires additional knowledge
Standards     Based on SNC, SAP proprietary standard
Contributing to costs     u2022     Firewall hardware and software
u2022     Firewall administration costs
u2022     No additional license fee for security library based on SECUDE
Regards,
Srini Nookala

PO via direct XML from ECC to SNC

Hi Guru's..
Can somebody help me to know how PO's can be send directly via XML message from ECC to SNC?
The requirement is we do not want to have output message / Idoc created in ECC to send the PO.
Thanks in advance!
Vipin

Hi Vipin,
Refer the below link
PO Delivery Tolerances to SNC
Regards,
Nikhil

SAP SNC Supplier Network Collaboration integration with SAP ERP via BizTalk - experiences?

Hello,
had anybody experience in integration of SAP SNC Supplier Network Collaboration with SAP ERP via BizTalk Server?
Versions: SAP ECC 6.0 Ehp5 SPS11, SAP SNC current version (7.0?)
We will have to integrate following processes:
Master Data integration, PO Purchase Order, Forecast, SMI Supplier Managed Inventory
Usually SAP takes an SAP PI middleware for this, where the full implementation can be downloaded from the SAP marketplace, but we want to avoid having an additional Integration Platform with maintenance etc.
Are there experiences, success stories, pitfalls, issues to be known, recommendations, known efforts in this forum?
Thanks in advance.
Jens

HI Jens,
In our forum, we discussed topic about BizTalk & SAP Integration before, hope it helps you.BizTalk
& SAP Integration
Best regards,
Angie
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

SNC via SAPCRYPTOLIB

Similar Messages

Maybe you are looking for