Security and Identity Management

At SAP, security has always been an important part throughout the product life cycle, including product development, planning, and quality-assurance. This page provides information about SAP's approach towards IT security and emerging security standards. For specific product information, visit SAP NetWeaver Identity Management and SAP NetWeaver Single Sign-On.

SNC Client Encryption Now Available Free of Charge for SAP NetWeaver Customers New!

SNC (Secure Network Communication) Client Encryption is an optional feature for SAP GUI and the SAP NetWeaver technology platform. This software component enables users to protect communications between SAP GUI and the SAP Application Server ABAP using symmetric encryption algorithms. It also offers encryption of business data for RFC (Remote Function Call) clients, such as the BEx Query Designer. SNC Client Encryption is based on Microsoft Kerberos technology; it does not offer single sign-on capabilities. For detailed information, please refer to SAP Note 1643878. The software is available for download on the SAP Service Marketplace (login required): https://service.sap.com/swdc, then select  Installations and Upgrades. Click on  Browse our Download Catalog, then select  SAP Cryptographic Software and SNC CLIENT ENCRYPTION 1.0

Secure Technical Configuration with the Lifecycle Management Automation Tool New!

The automation of lifecycle management (LM) activities eases the setup and operation of SAP systems by guiding administrators through configuration and operation tasks. LM Automation Standalone 1.0 is a light-weight and easy-to-use automation tool that validates and sets up Secure Sockets Layer (SSL) connections. It  increases the speed, reliability, efficiency and cost effectiveness of your SSL configuration. LM Automation Standalone 1.0 automatically configures your SSL connections and guides the user through the required manual tasks. It also validates the SSL configuration settings for both ABAP and Java environments, and generates HTML reports which can be used for further analysis.