No 3DES encryption of Repository Passwords in SAP NW IdM 7.1, SAP security note 1667064

SAP security note 1667064, “No 3DES Encryption of Repository Passwords in SAP NW IdM 7.1”, is a program error note released on March 13, 2012. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

After installing the Designtime Components, 3DES encryption is not set as the default encryption algorithm in the Management Console.

Solution

• Apply the Patch: Download the patch for SAP NetWeaver Identity Management 7.1 SP6 Designtime Components from the Download for SNOTE.
• During Installation: If you have not installed the Designtime Components yet, 3DES will automatically be set as the default encryption algorithm upon installation.
• Post-Installation Configuration: If the Designtime Components are already installed, you can change the default encryption to 3DES by opening the Management Console, navigating to the Tools > Options... dialog box, and setting 3DES as the default encryption algorithm. Review the SAP NetWeaver Identity Management Security Guide thoroughly before making configuration changes. Passwords will be re-encrypted with 3DES the next time they are edited.
• Upgrade Notice: No patch is required for SAP NetWeaver Identity Management 7.1 SP7 and later versions.

Affected components

• SAP NetWeaver Identity Management 7.1 SP6 or older