Solution : https://service.sap.com/sap/support/notes/1639578 (SAP Service marketplace login required)
Summary :
This SAP Note provides guidance for implementing "Secure Storage in File System (AS ABAP)" (SSFS) for password storage of the ABAP database user across supported database platforms. It outlines the necessity of replacing traditional platform-specific password storage mechanisms with SSFS, thereby describing the standardized procedure to encrypt and store user credentials. The note specifies compatibility with various databases such as Sybase ASE and Oracle, alongside necessary prerequisites and detailed steps including system preparation and securing the file system. Further dependencies and additional recommended SAP Notes for successful integration and configuration are included.
Key words :
mkdir <dir_global>\security mkdir <dir_global>\security\rsecssfs mkdir <dir_global>\security\rsecssfs\data mkdir <dir_global>\security\rsecssfs\key alternatively, mkdir <dir_global>/security mkdir <dir_global>/security/rsecssfs mkdir <dir_global>/security/rsecssfs/data mkdir <dir_global>/security/rsecssfs/key ---------------------------------------------------------------------- sapglobalhost, chmod 700 <dir_global>/security chmod 700 <dir_global>/security/rsecssfs chmod 700 <dir_global>/security/rsecssfs/data chmod 700 <dir_global>/security/rsecssfs/key, export rsec_ssfs_datapath=<dir_global>/security/rsecssfs/dataexport rsec_ssfs_keypath=<dir_global>/security/rsecssfs/key ---------------------------------------------------------------------- application server, setx rsec_ssfs_datapath <dir_global>\security\rsecssfs\data setx rsec_ssfs_keypath <dir_global>\security\rsecssfs\key ----------------------------------------------------------------------5, setenv rsec_ssfs_datapath <dir_global>/security/rsecssfs/datasetenv rsec_ssfs_keypath <dir_global>/security/rsecssfs/key, oraclebc-db-syb sybase ase database platformbc-sec security priority correction, customer component bc-db-dbi db independent database interface, drwx------ <sid>adm sapsys datadrwx------ <sid>adm sapsys key ---------------------------------------------------------------------- sapglobalhost, chmod 600 <dir_global>/security/rsecssfs/data/ssfs_<sid>
Related Notes :
| 1639578 | SSFS as password storage for primary database connect |
| 1678336 | RSecSSFs: UTF8 conversion failed with returncode 1 |
| 1868094 | Overview: Oracle Security SAP Notes |
| 1764043 | Support for secure storage in BR*Tools |
| 1745266 | RSecSSFs: Restriction of configuration options in kernel |
| 1675104 | |
| 1643080 | SYB: Database connect information for Sybase ASE |
| 1622837 | Secure connection of AS ABAP to Oracle via SSFS |
| 1611877 | Support for ABAP SSFS during database connect |
| 1706410 | SYB: Security - Changing passwords for database users |