To use encrypted communication between Xtract IS and SAP you can use Secure Network Communication (SNC) to connect to your SAP system. The following section explains the necessary configuration of the SAP “Connection Manager”, depending on your SAP system. For more information about SNC configuration, see the official SAP Help Site.

Configuring Connection Manager #

Tip: Values to fill out the forms can be found in the SAP logon pad in the Properties or acquired from SAP Basis team.

  1. Click [Additions] within “Xtract IS Connection Manager” window. The window “Xtract IS Connection Manager Additions” opens. SNC
  2. Enable the checkbox SNC enabled. The fields SNC Library (32 Bit. & 64 Bit), Partner Name and Quality of Protection become customizable. SNC
  3. Check the SAP parameter snc/gssapi_lib to determine, which library is used for encryption in your SAP system.
    Your SAP basis has to import and configure the same library on the application server and on the machine, where Xtract IS is running.
  4. In the SNC library fields (1), fill in the complete path to the library location for 32 Bit & 64 Bit e.g., C:\Program Files (x86)\SAP\FrontEnd\SecureLogin\sapcrypto.dll.
  5. Fill in the SAP Partner Name (2) configured for the SAP application server e.g., p:SAPserviceERP/do_not_care@THEOBALD.LOCAL.
  6. Define the SNC level of protection e.g., 9 - Maximum default value.
    The preferred security level can be set with the property Quality Of Protection. For more details see the official SAP Help Site.
  7. Click [OK] to confirm.
  8. Click [Test Connection] to test the successful connection. The confirmation window opens.
  9. Click [OK] to confirm.

Download the Kerberos DLLs #

It is also possible to use Kerberos libraries for encryption between client and SAP server. For more information, see the official SAP Help Site. Different DLLs for 32-bit (gsskrb5.dll) and 64-bit (gx64krb5.dll) platforms are provided with SAP Note 2115486.