SAP-GUI Single Sign-On based on SSL certificates

A comprehensive guide on Single Sign-On and SNC encryption between SAP GUI client and SAP server. Starting from client installation to successful login with authentication via client SSL certificate. Also covers the certification authority build.
TOC:
0:21 - My S/4HANA-like Sandbox at home
0:47 - SAP-GU installation with required options
3:08 - Connection setup
3:54 - Logon to my system to check STUST configuration
5:33 - Generation of Certificate Signing Request (CSR)
8:24 - Certification Authority build planning
9:13 - Building own CA witn OpenSSL
17:12 - SAP SNC certificate chain preparation
19:00 - Importing Certificate Resopnse
20:35 - SNC wizard
24:52 - Addding CA to trusted list
27:09 - Configuring SNC encryption in SAP-GUI
27:47 - Trusting SAP server certificate in Windows
30:16 - Successful secure connection to SAP server
31:01 - Client certificate generation and signing
33:59 - PKCS12 preparation
35:23 - Adding user key and certificate to repository in Windows
36:35 - Installing SAP Secure Login Client
37:23 - Secure Login Client configuration
37:50 - Adding SNC string to SAP user account
38:46 - Successful logon with Single Sign-On based on client SSL certificate
39:27 - Summary
#SAP #SSL #security #sapsecurity

[@nadeemdada348]

Thank you !! My concept is now all from clear from A-Z regarding certificate & SNC config.

[@cafeden6868]

This is a great tutorial! Thanks

[@mfiztanb1330]

Excellent sir Please configure SAProuter with SNC

[@ClairBowersbuyu-absadv]

This is Excellent ! Lukasz very well done. Chapeau !

[@danpal6737]

is sapgalf , oww you are both magos blancos gracias😮

[@pk6146]

very good one, if possible plz make a detailed video on strust

[@tonyng1730]

Thank you. I learned a lot even though I do sap for a long time. Been awhile.. Please do more like this. Even the step is boring. What about do x509 connect with Middleware ex. Webmethods or Tivoli....

[@alejandrocolas3540]

I have no words.... Excellent content for a complex subject. Very generous on your side to share your knowledge.

[@frab3930]

one of the best That i have ever seen talking about this topic

[@dayakar9671]

Great tutorial

[@JicArosni]

absolute legend you are, thanks for this. please do more!

[@mfiztanb1330]

Please make video on how to configure R/3 support SAP ERP EHP8 ECC 6

[@Srinivassunrise]

Please create video on scan the data while uploading to SAP culd be excel, pdf etc

[@danpal6737]

how can we work for dialog intances with http certificates, they work on central instance and not in the dialoga, found the ASN is blank , should we ask for an alternate server name, is this snc issue? found notes but only mention web dispatcher is the solution. thanks wizzard sapdalf

[@elverarardon7100]

"promosm" 😍