HCL Workload Automation, Version 9.4

Securing data communication

You can increase the security of your SAP system through the use of an external security product. Secure Network Communications (SNC) can integrate the external security product with the SAP system.

Data communication paths between the client and server components of the SAP system that use the SAP protocols RFC or DIAG are more secure with SNC. The security is strengthened through the use of additional security functions provided by an external product that are otherwise not available with SAP systems.

SNC provides security at application level and also end-to-end security. HCL Workload Automation is extended to read SNC configuration parameters and forward them to the SAP RFC communication layer used when logging in to the SAP system. HCL Workload Automation does not provide or ship SNC software but instead enables the use of third-party SNC products to secure the RFC communication.

Levels of protection

You can apply one of the following levels of protection:
Authentication only
This is the minimum level of security protection available with SNC. The system verifies the identity of the communication partners.
Integrity protection
The system detects any changes to the data which might have occurred between the two components communicating.
Privacy protection
This is the maximum level of security protection available with SNC. The system encrypts the messages being transferred so that any attempt to eavesdrop is useless. Privacy protection also includes integrity protection of the data.
The following options in the local options file are used to configure SNC for HCL Workload Automation:
  • r3snclib: the path and file name of the SNC library.
  • r3sncmode: enables or disables SNC between r3batch and the SAP R3 system.
  • r3sncmyname: the name of the user sending the RFC for SNC.
  • r3sncpartnername: the SNC name of the SAP R3 communication partner (application server).
  • r3sncqop: the SNC protection level.
See Defining the local options for a description of these options in the local options file.