Configuring SAP Solution Manager using RAC Secure Network Connection (SNC)


You can use RAC Secure Network Connection (SNC) to add values to the configuration variable for configuring SAP Solution Manager. 

You can use /SSM/SYSTEMS/javaExecuteArguments to configure these variables.

When configuring RFC with Secure Network Communications (SNC), certain parameters need to be set for the RFC configuration as described in the following example:

"/SSM/SYSTEMS/javaExecuteArguments" = { REPLACE = "-DsncFlag=true -DsncMode=1 -DsncLib=sapcrypto.dll -DsncQop=3 -DsncMyname=\"SAPCC, O=BMC, C=US\" -DsncPartnername=\"snc/identity/as\" -DsncConnString=test" }

In the above example, if:

  • -DsncFlag=true: The following RFC INI configuration is applied.
  • -DsncFlag=false: The following RFC INI configuration is not used.

The following table provides information about the configuration variables for configuring SAP Solution Manager.

 RFC INI Configuration Parameters 

Parameter

Description

-DsncMode

Enables or disables the use of Secure Network Communications (SNC).

Possible values:

  • 0: Not activated
  • 1: Activated

-DsncLib

Absolute path of the SAP Cryptographic Library that facilitates secured network connections.

Example paths based on operating systems:

  • For MS Windows: C:\usr\sap\<SID>\SYS\exe\uc\<OS>\sapcrypto.dll
  • For Linux, HP-UX, Solaris: /usr/sap/<SID>/SYS/exe/uc/<OS>/libsapcrypto.so
  • For AIX: /usr/sap/<SID>/SYS/exe/uc/<OS>/libsapcrypto.o

Where <SID> is the system identifier, and <OS> is the operating system.

-DsncQop

Security level for secured network connections.

Possible values:

  • 1: Authentication only
  • 2: Integrity protection
  • 3: Privacy protection
  • 8: Use the value from snc/data_protection/use on the SAP Application Server

-DsncMyname

Name of the secured network connection, overriding the default secure network connection partner.

For SAP Convergent Charging, you must use p:CN=SAPCC, O=<MyCompany>, C=US

SAP SE recommends setting this value to ensure correct SNC name usage.

-DsncPartnername

SNC name of the Application Server acting as the SNC partner.

-DsncConnString

User provided name to identify the RFC connection. 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*