Episode #227
Introduction
In episode 227 of our SAP on Azure video podcast we talk about SNC. In the past we have talked about OData services quite a lot, however, RFC communication is still used by many customers. While RFC provides a seamless and efficient integration to your SAP system, it is by default not secure. That’s where SNC, the Secure Network Communications comes in. But how do you set it up? How do yet get started? Martin Pankraz recently published a blost post that outlines the required steps so that you can use RFC via SNC in your Power Platfrom, Logic Apps or Microsoft Fabric integration scenarios.
Find all the links mentioned here: https://www.saponazurepodcast.de/episode227
Reach out to us for any feedback / questions:
- Robert Boban: https://www.linkedin.com/in/rboban/
- Goran Condric: https://www.linkedin.com/in/gorancondric/
- Holger Bruchelt: https://www.linkedin.com/in/holger-bruchelt/
#Microsoft #SAP #Azure #SAPonAzure #Security #SNC
Summary created by AI
- Holger introduced the 227th episode of the SAP on Azure Video podcast, mentioning that the discussion would focus on SAP and Microsoft-related topics.
- Importance of Secure Network Communication (SNC):
- Holger and Martin discussed the importance of secure network communication (SNC) for RFC communication in SAP systems, highlighting that while RFC provides seamless integration, it is not secure by default. Martin emphasized the need for zero trust and the industry standard of SNC for secure connections.
- RFC Communication: Holger explained that RFC communication is still widely used by many customers for seamless and efficient integration with SAP systems, but it is not secure by default.
- Zero Trust: Martin emphasized the importance of zero trust, stating that every single connection should be protected with the highest security measures possible, which is why SNC remains the industry standard for RFC connections.
- Security Concerns: Holger highlighted the security concerns with RFC communication, noting that without encryption, data transmitted via RFC can be easily intercepted and viewed using tools like Wireshark.
- Industry Standard: Martin reiterated that SNC is the industry standard for securing RFC connections, ensuring encrypted communication and protecting data integrity.
- Martin’s Blog Post on SNC Setup:
- Holger introduced Martin Pankratz’s blog post, which outlines the steps to set up RFC via SNC in Power Platform Logic Apps or Microsoft Fabric. Martin explained that the blog post was created to address customer demands and provide a comprehensive guide for setting up SNC.
- Blog Post Introduction: Holger introduced Martin Pankratz’s blog post, which provides a detailed guide on setting up RFC via SNC in Power Platform Logic Apps or Microsoft Fabric.
- Customer Demand: Martin explained that the blog post was created in response to customer demands for a comprehensive guide on setting up SNC, addressing common issues and providing clear instructions.
- Comprehensive Guide: Holger praised the blog post for its concrete and specific guidance, making it easy for users to follow the steps and set up SNC in their environments.
- Integration with Microsoft: Martin highlighted that the blog post includes references to Microsoft integrations, such as using SNC in Power Platform and Logic Apps, making it relevant for users working with these technologies.
- Steps to Set Up SNC:
- Martin and Holger walked through the steps to set up SNC, including downloading the required tools from SAP, generating certificates, and configuring the SAP system to enable SNC. They emphasized the importance of following the steps carefully and provided troubleshooting tips.
- Downloading Tools: Martin explained the need to download the required tools from SAP, including the crypto library and the SAP car executable, to begin the SNC setup process.
- Generating Certificates: Martin detailed the process of generating certificates using OpenSSL, emphasizing the importance of creating and signing certificates correctly to establish trust between the client and SAP system.
- Configuring SAP System: Martin and Holger discussed the steps to configure the SAP system to enable SNC, including using transactions like SNC0 and S-Trust to maintain client lists and import certificates.
- Environment Variables: Martin highlighted the importance of setting environment variables correctly to ensure the operating system can use the generated certificates during the SNC setup.
- Troubleshooting Tips: Martin provided troubleshooting tips, such as verifying user service authorization and checking connectivity statuses, to help users resolve common issues during the SNC setup process.
- Testing and Troubleshooting SNC:
- Martin shared tips for testing and troubleshooting SNC, such as breaking the SNC name or partner name to see if errors occur, blocking non-SNC ports, and using tools like Frank Buchholz’s security series to verify SNC connections.
- Testing SNC: Martin suggested testing SNC by intentionally breaking the SNC name or partner name to see if errors occur, ensuring that the SNC communication is being triggered.
- Blocking Ports: Martin recommended blocking non-SNC ports (32 and 33) to ensure that only SNC communication is allowed, helping to verify that SNC is being used correctly.
- Verification Tools: Martin mentioned using tools like Frank Buchholz’s security series and unified connectivity transactions to verify SNC connections and ensure secure communication.
- 0:00 Intro
- 1:15 Introducing Martin Pankraz
- 6:50 Blog post - Getting started with SAP SNC for RFC integration
- 10:35 SNC0
- 11:35 SAP Connector for Microsoft .Net Core
- 13:50 Download SAP SNC Crypto Library
- 15:30 Generate a cerficiate for your SNC client app
- 17:55 Establish trust between SNC client and SAP
- 19:30 Verify SAP is configured for SNC yet
- 20:10 Download SAP cert and import into SNC client PSE
- 21:25 Allow your SHIR process to use your SAP PSE
- 23:30 Test communication using SAP SNC