SAP Note 1622837 - Secure connection of AS ABAP to Oracle via SSFS

Component : Database Interface / DBMS for Oracle -

Solution : https://service.sap.com/sap/support/notes/1622837 (SAP Service marketplace login required)

Summary :
SAP Note elaborates on the shift in Oracle database connection methodology for SAP systems using ABAP and SAP tools. Supported from release 11g, Oracle no longer endorses the OPS$ remote connection. SAP introduces the "Secure Storage in File System" (SSFS) in kernel release 7.20, which stores the encrypted database password in the file system, rather than in the database via the OPS$ADM.SAPUSER table. This change boosts security by negating the need for database-stored passwords. Systems still on kernels up to 7.40 and using Oracle up to version 11.2 can use the legacy connection methods, but transitioning to SSFS is recommended for enhanced security.

Key words :
rsec_ssfs_datapath = /usr/sap/<sid>/sys/global/security/rsecssfs/datarsec_ssfs_keypath = /usr/sap/<sid>/sys/global/security/rsecssfs/keyrsdb_ssfs_connect = 1, oracle priority recommendations / additional info category program error validity software componentfrom rel, 21  support packages & patches support package patchessoftware componentsupport packagepatch levelsap kernel 7, customer component bc-db-ora-sys database interface / dbms, > > sqlplussql> connect system/<pwd>sql> drop table ops$<sid>adm, sql> alter system reset remote_os_authent [scope=spfile], operating system user <sid>adm, database user ops$<sid>adm, oracle user ops$<sid>adm, __%pdfstyle%__ / } symptom previously

Related Notes :

1868094Overview: Oracle Security SAP Notes
1843967Oracle: Add. Information - Software Update Manager 1.0 SP09
1843966Oracle: Add. Information - Software Update Manager 1.0 SP08
1764043Support for secure storage in BR*Tools
1678336RSecSSFs: UTF8 conversion failed with returncode 1
1639578SSFS as password storage for primary database connect
1611877Support for ABAP SSFS during database connect
1431798Oracle 11.2.0: Database Parameter Settings
830576Parameter recommendations for Oracle 10g
700548FAQ: Oracle authorizations
157499OPS$ connect and security aspects