0% found this document useful (0 votes)
17 views28 pages

PGP Encryption Guide for SAP PI

The document is a guide on using the PGPEncryption module in SAP PI for encryption and decryption of messages. It outlines the prerequisites, configuration steps, and supported algorithms for encryption, signing, and compression. Additionally, it provides insights into setting up communication channels and troubleshooting common issues encountered during implementation.

Uploaded by

hazapata
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
17 views28 pages

PGP Encryption Guide for SAP PI

The document is a guide on using the PGPEncryption module in SAP PI for encryption and decryption of messages. It outlines the prerequisites, configuration steps, and supported algorithms for encryption, signing, and compression. Additionally, it provides insights into setting up communication channels and troubleshooting common issues encountered during implementation.

Uploaded by

hazapata
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Community
Follow

Ask a Question Write a Blog Post


 Like

 RSS Feed

Shabarish V Nair
April 10, 2012 | 2 minute read

PGPEncryption Module: A Simple How


to Guide
 57  38  98,208

I am sure many of you must have by now been made aware that SAP has released
B2B and SFTP/PGP capabilities for SAP PI. Earlier, we had to depend upon third
party vendors for this service but with SAP filling this gap, I strongly believe that PI is
now in a better position to be provisioned and a true enterprise service bus.

If you are on PI 7.11, the prerequisite for installing and using these new add ons are
SP08. I have been able to get my hands on a PI 7.11 SP08 machine and have
successfully tested the PGP module as a start. In this blog, I will explain how to do
PGP encryption using the SAP provided standard module PGPEncryption.

For simplicity sakes, I have created a simple scenario as follows;

[Link] 1/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

A Basic Introduction to PGP Encryption:

1. Encryption Only

To do encryption, we will use the public key provided to us by the partner. Along with
the public key, we also need to understand what is the encryption algorithm that is
expected by the partner. There are various algorithms and the SAP standard module
supports the following AES_128, AES_192, AES_256, BLOWFISH, CAST5, DES, 3DES
and TWOFISH.

2. Sign and Encrypt

In this case along with the public key provided to us by the partner, we will also need
our own private key and its passphrase that we will use to sign the message. We can
also along with the encryption algorithm, choose what should be the signing
algorithm. Currently the supported algorithms for signing are MD5, RIPEMD160,
SHA1, SHA224, SHA256, SHA384 and SHA512.

3. Compression

We can also define the compression that needs to be carried out on the message
which will help reduce the message size. This is an optional usage but if used the
supported compressions are ZIP, ZLIB and BZIP2

Receiver Communication channel configuration:

In the below communication channel, we will use both Sign and encrypt while
sending the message to Receiver.

[Link] 2/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Note that in the above, we have used the partners public key [Link] for
encryption and our private key [Link] along with its passphrase for signing the
messages. Also we have used ZIP as the compression mode.

By default, the keys can be placed under the path usr/sap/<System ID>/<Instance
ID>/sec. But in case you want to use a different path, then use the parameter
keyRootPath to define your custom path.

Input file used;

Signed and Encrypted message;

[Link] 3/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

In the next blog, I will show you how we can decrypt this file to a human readable
content

Alert Moderator

Assigned Tags

Cloud Integration

SAP Process Integration

pgp

sap b2b

SAP Netweaver Process Orchestration

sap pi

sap process integration

View more... 

Similar Blog Posts 


[Link] 4/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

PGPDecryption Module: A Simple How to Guide


By Shabarish V Nair Apr 10, 2012

PGP and SFTP : FAQ Sheet


By Shabarish V Nair Mar 27, 2013

SAP Cloud Integration - Dynamic PGP Encryption UserId


By Aditya W. Sharma Feb 10, 2021

Related Questions 
Signing and Encrypting using Bouncy castle libraries
By Nitheesh Cherrikkal Jun 26, 2020

CPI simulation does not end


By Christian Riekenberg Oct 07, 2021

CPI Adapter UI with Conditions Question


By René S Aug 09, 2021

57 Comments

Former Member
April 16, 2012 at 11:40 am

Great!!, you have made hands dirty with the new SP feature of PI..

It will be helpful for newbies if you can share the paths of the keys where it has stored..and also any available
tools for generating the keys for playing..

Smiles

Rajesh

Like 0 | Reply | Alert Moderator | Share


[Link] 5/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Shabarish Vijayakumar | Blog Post Author


April 16, 2012 at 2:18 pm

updated the blog to include the key file path.

regarding test tool, there are many tools available online. Just search with the term 'pgp key
generator'. The one i have used was already existing in my landscape.

Like 0 | Reply | Alert Moderator | Share

Former Member
April 16, 2012 at 2:44 pm

Shabarish,

Good to have this nice blog so soon with usage of PGP [Link]

@Rajesh, I have tested the similar functionality with modules provided by other product
vendor - Advantco.

Keys used for testing has been generated by tool PGP Desktop 10.1.1. Hope it should work fine
with this case as well.

Like 0 | Reply | Alert Moderator | Share

Former Member
August 27, 2015 at 9:38 am

Hi Bhavesh,

I have a requirement to implement PGP from Tumbleweed to SAP ECC using SFTP/PGP
modules,i have got the public and private keys from Tumbleweed as .txt format.

As i am following your blog to implement this and noticed that we need Public Keyring(.PKR)
and Secure Keyring(.SKR) from Tumbelweed apart from Public Key and Private Keys to be
used in the PGG Module parameters.

When i ask Tumbleweed team to provide me the .PKR and .SKR,they say they can not share
them.

Is there any way we can generate Tumpleweed .PKR and .SKR files to be used for PGP.

I am able to generate own .PKR and .SKR using PGP Desktop software.

Pls help me with your expert suggestions on how to go about this.

Many Thanks,

[Link] 6/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Naga

Like 0 | Reply | Alert Moderator | Share

Sahithi M
August 27, 2015 at 10:54 am

Hi Naga,

I believe you have your own .PKR and .SKR [Link] to implement the PGP
encryption and decryption,Share your Public key(.PKR) with Tumbleweed and
Tumbleweed should share their PublicKey(.PKR) with you.

Ask Tumble weed to share their .PKR key so that you can decrypt the [Link]
Tumbleweed won't share .SKR as it is private key and cannot be shared with anyone.

If they are using any Signing of the message then you can use your .SKR in the
module as shown above.

Please let usknow if you have any queries.

Like 0 | Reply | Alert Moderator | Share

Rohan DCosta
August 28, 2015 at 7:07 am

Hi Naga,

You can use the public key in the format *.asc this will do.

you you still need a .pkr (Public Key Ring) and .skr(Secure Key ring) you can get many
a tools to generate the key rings like AEDAPTIVe, etc

Just make sure you just place these keys in the tool and generate the key rings.

Like 0 | Reply | Alert Moderator | Share

Vikas Singh
May 30, 2012 at 12:57 am

Thanks for the blog - it really helped !

[Link] 7/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

We required PGP decryption and were able to use it on 7.1 SP4 even though the prerequisite is SP8. We didn't
have to use other features of the add on and hence can't be sure about them .

Cheers,

Vikas

Like 0 | Reply | Alert Moderator | Share

Anupam Ghosh
June 3, 2012 at 11:03 pm

Hi Shabarish,

I am very new to PGP. I

Got a fair idea of the process. Thank you so much for writing this.

Regards

Anupam

Like 0 | Reply | Alert Moderator | Share

Anupam Ghosh
June 3, 2012 at 11:05 pm

Hi Shabarish,

Please keep writing more blogs. If possible I would love to attend some seminars from you.

regards

Anupam

Like 0 | Reply | Alert Moderator | Share

Shabarish Vijayakumar | Blog Post Author


June 5, 2012 at 9:13 am

Thanks for comment Anupam

[Link] 8/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs
Like 0 | Reply | Alert Moderator | Share

Former Member
June 4, 2012 at 11:47 am

Hi Shabarish,

Great blog! Thanks for sharing this valuable information with us.

In the blog you mentioned that currently the following signing algorithms are (standard) supported: MD5,
RIPEMD160, SHA1, SHA224, SHA256, SHA384 and SHA512. However, I cannot see in the screenshots where
do you configure it. Could you please further explain that? For instance what steps are needed in order to
configure a signing algorithm?

Many thanks,

Roberto Viana

Like 0 | Reply | Alert Moderator | Share

Shabarish Vijayakumar | Blog Post Author


June 8, 2012 at 10:13 am

use the parameter signingAlgo with the possible value as MD5, RIPEMD160, SHA1, SHA224, SHA256,
SHA384 or SHA512. By default, the value is SHA1.

Like 0 | Reply | Alert Moderator | Share

Former Member
June 8, 2012 at 9:55 am

Hey Shabraish,

We are trying to implement the new PGPEncyption Module. We are on PI 7.3

Service Pack: 05
Release: NW730EXT_05_REL

[Link] 9/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

and have followed the standard procedure to instal the add-on. On executing a basic encyption scenario , we
get a JNDI:name not found error for the EJB bean localejbs/PGPEncyption.

The receiver communication channel is an NFS based channel.

Did u face this kind of an issue? if yes please help us with possible solutions.

Thanks in advance

Abhishek

Like 0 | Reply | Alert Moderator | Share

Shabarish Vijayakumar | Blog Post Author


June 8, 2012 at 10:08 am

please recheck the spelling of localejbs/PGPEncyption. it should be PGPEncryption.

Like 0 | Reply | Alert Moderator | Share

Former Member
June 12, 2012 at 9:24 am

Hi Shabarish,

Great blog!

We are trying to implement the new PGPEncyption Module. We are on PI 7.11 and SP08 and have followed the standard
procedure to instal the add-on.

In the File Receiver Adapter we use the new PGPEncyption Module only with the parameters:

- encryptionAlgo AES_256

- partnerPublicKey [Link]

But in the communication channel we get the error:

Error PGP Encryption Module: Could not process message, Internal PGP Error ([Link]:
Exception creating cipher)

12.06.2012 11:02:35.990 Error PGP Encryption Module: Could not process message, Internal PGP Error ([Link]:
Exception creating cipher)

[Link] 10/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

12.06.2012 11:02:35.990 Error MP: exception caught with message Could not process message, Internal PGP Error
([Link]: Exception creating cipher)

12.06.2012 11:02:35.990 Error Adapter Framework caught exception: Could not process message, Internal PGP Error
([Link]: Exception creating cipher)

12.06.2012 11:02:35.991 Error Delivering the message to the application using connection File_[Link] failed, due to:
[Link]: [Link]: Could not process message, Internal PGP Error
([Link]: Exception creating cipher).

Can you help us?

Thanks in advance

Octavio

Like 0 | Reply | Alert Moderator | Share

Shabarish Vijayakumar | Blog Post Author


June 12, 2012 at 9:38 am

It could be a potential unlimeted JCE issue.

Could you try as described in the section 'Unlimited JCE' of this document -

[Link]

Like 0 | Reply | Alert Moderator | Share

Former Member
June 12, 2012 at 12:18 pm

Hi Shabarish,

It's solved, thank you very much.

I'd I had forgotten to change the JCE in a folder.

Octavio

Like 0 | Reply | Alert Moderator | Share

Shabarish Vijayakumar | Blog Post Author


June 12, 2012 at 12:56 pm

good to know

Like 0 | Reply | Alert Moderator | Share


[Link] 11/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Former Member
June 26, 2012 at 2:03 am

Hi Shabarish,

Very nice info regarding the config of SFTP scenario. Keep up the good work!

We have implemented the same however we have encountered some peculiar issue. The message does not
pass through after it is done in the module processor. Below is the log:

21.06.2012 16:05:30.170 Information MP: processing local module localejbs/PGPEncryption

21.06.2012 16:05:30.170 Information PGP Encryption Module: Message xxxxxxx-xxxx-xxxx-xxxx-


xxxxxxxxxxxx arrived in PGP Module.

21.06.2012 16:05:30.171 Information PGP Encryption Module: The module-paramteter "asciiArmored"is


not set. Using default value "true"

21.06.2012 16:05:30.171 Information PGP Encryption Module: The module-paramteter "format"is not set.
Using default value "binary"

21.06.2012 16:05:30.171 Information PGP Encryption Module: The module-paramteter "keyRootPath"is


not set. Using default value "/usr/sap/XXX/XXXXXXX00/sec"

21.06.2012 16:05:30.171 Information PGP Encryption Module: Reading public key at


/usr/sap/XXX/XXXXXXX00/sec/[Link]

21.06.2012 16:05:30.194 Information PGP Encryption Module: The module-paramteter "signingAlgo"is not
set. Using default value "SHA1"

21.06.2012 16:05:30.194 Information PGP Encryption Module: Reading private key at


/usr/sap/XXX/XXXXXXX00/sec/[Link]

21.06.2012 16:05:30.201 Information PGP Encryption Module: Creating ASCII-Armor

21.06.2012 16:05:30.201 Information PGP Encryption Module: Applying compression.

21.06.2012 16:05:30.201 Information PGP Encryption Module: Signing

21.06.2012 16:05:30.201 Information PGP Encryption Module: Processing

21.06.2012 16:05:30.666 Information PGP Encryption Module: Applying encryption

[Link] 12/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

21.06.2012 16:05:30.681 Information PGP Encryption Module: Message successfull processed.

21.06.2012 16:05:30.682 Information MP: processing local module localejbs/CallSapAdapter

21.06.2012 16:05:30.682 Information MP: leaving

21.06.2012 16:05:30.683 Information The message was successfully delivered to the application using
connection SFTP_[Link]

21.06.2012 16:05:30.689 Information The message status was set to DLVD.

Could you help me out on this one thanks.

Regards,

Rare

Like 0 | Reply | Alert Moderator | Share

Former Member
August 21, 2012 at 11:40 am

Hi Shabarish,

do you know of any way to not store the message id in the encrypted file?

One of our partners doesn't use PI to decrypt the files we send to them encrypted, but uses PGP8 on their
servers.

Whenever i send them an encrypted file (f.e. original file is [Link], encrypted file written to partners sftp
server is [Link]) it decrypts to the message-id as filename instead of just substracting the .pgp file
extension.

I think this is very annoying. We tried to set asam to the communication channels, but this didn't work.

Best regards,

Peter Hermanns

Like 0 | Reply | Alert Moderator | Share

[Link] 13/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Ravi Maheshwari
August 22, 2012 at 2:26 pm

Hello Shabarish,

Can i use PGP Desktop 10.1.1 , if i am on PI 7.11, SP5.

Regards,

Rachana

Like 0 | Reply | Alert Moderator | Share

Former Member
September 14, 2012 at 5:26 pm

Hello Shabarish,

Can you please help me regarding below issue.

I encrypted the file and sent to my vendor. but while decrypting from vendor side and it is gving the below
error. Just used 2 modules only applyEncryption/PartnerPublicKey

PI - 7.31

Enter
pass phrase: event 23: Decryption symmetric cipher used: CAST5 event3: error -11391 event2: final Error
decrypting file '834_TEST20120914-[Link]'. Corrupt data.

badpacket exitcode= 32

I am using PGP encryption software - GNUPG

and Vendor is using - E-business server.

I just found there were some compatiable issues GNUPG vs E-Business server.

[Link]

please advice your thoughts.

Did any one tested with PI 7.31 encryption/decryption with the vendor.

Regards,

[Link] 14/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Venu.

Like 0 | Reply | Alert Moderator | Share

Chandra Sekhar H
November 27, 2012 at 1:00 pm

Hi Shabarish,

On PI7.3 EHP1, can we use PGP encryption while sending a file as part of multipart HTTPS POST request?

Please let me know...

Thanks,

Chandra

Like 0 | Reply | Alert Moderator | Share

Smith Smith
January 26, 2013 at 12:23 pm

Hi Shabarish,

Is this module supported by PI 7.1 SP06 in FTP channel...please advise.

Like 0 | Reply | Alert Moderator | Share

Former Member
February 5, 2013 at 3:31 pm

SAP note 1695563 specifically says that the module is compatible with the following releases:

SAP NetWeaver PI 7.11 Support Package 8


SAP NetWeaver PI 7.30 Support Package 5
SAP NetWeaver PI 7.31 Support Package 3

and higher.

Best regards,

[Link] 15/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Peter

Like 0 | Reply | Alert Moderator | Share

pavan thiruveedula
March 13, 2013 at 8:07 am

Hi Sabarish,

I am working on your approach as POC. i have few doubts, can you please help me out on these questions

1)do i need to write adapter module for this approach?

2)where i will get partners public key [Link] for encryption and our private key [Link] ?

3) do i need to import those keys in PI trust store in STRUST?

4) do i use filezilla as FTP server?

My PI version is 7.3 SP5.

Thanks & Regards

Pavan

Like 0 | Reply | Alert Moderator | Share

Former Member
March 21, 2013 at 10:25 am

Dear Pavan,

1) no, the necessary modules are all provided by SAP as part of the B2B add-on and can be
downloaded seperately from the SAP support portal.

2) your partners public key is sent to you by your partner, your private key you have to create on your
own. Please find the documentation on how to create a GPG public/private keypair for your operating
system on the net or on the SCN.

3) no... just put them into the file system as specified in the SFTP/PGP adapter/module
documentation.

4) you can use whatever ftp server you want.

Best regards,

[Link] 16/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Peter

Like 0 | Reply | Alert Moderator | Share

Former Member
July 24, 2013 at 5:25 am

Hi ,

Can anyone please suggest how to use RSA Encryption Algorithm in PGP Module

Regards,

Amit

Like 0 | Reply | Alert Moderator | Share

Former Member
July 25, 2013 at 12:36 pm

In a default installation RSA encryption algorithm is not possible. According to the configuration guide
the only possible encryption algorithms are:

AES_128, AES_192, AES_256, Blowfish, CAST5, DES, 3DES and Twofish.

Best regards,

Peter

Like 0 | Reply | Alert Moderator | Share

Roberto Vidotti
August 6, 2013 at 10:59 am

Hi Shabarish,

I found this article just today, it's a good work.

I would add just a warning in the blog: being a guide for beginners I would add that some algorithms have long
been dead or otherwise unsafe like MD5, DES definitily unsafe or SHA1, RIPEMD160, CAST5, 3DES that are at
risk at least theoretically.

[Link] 17/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Kind regards

Roberto

Like 0 | Reply | Alert Moderator | Share

Former Member
January 24, 2015 at 1:26 am

Nice job.

I also run into this article today and found it pretty useful for my first time working with the PGP
addon.

Thanks to both of you for sharing your knowledge.

Kind regards,

Eric

Like 0 | Reply | Alert Moderator | Share

Former Member
August 8, 2013 at 7:10 am

Nice Work !

Like 0 | Reply | Alert Moderator | Share

Former Member
August 8, 2013 at 4:02 pm

Hi Shabarish,

Need your help : I want to replicate exact scenario in my System.

But i didn't get this , Where to get to private and public Key . as I am creating a test scenario . So abt Client
Public Key - Can I generate it from Somewhere ?? and our Private key - Do i have to generate it some where in
SAP PI System ???

Like 0 | Reply | Alert Moderator | Share

[Link] 18/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Shabarish Vijayakumar | Blog Post Author


August 8, 2013 at 4:05 pm

please refer - [Link]


sftp-faq-sheet

Like 0 | Reply | Alert Moderator | Share

Ajeet Phadnis
June 21, 2016 at 9:43 am

Hello Shabarish,

Although the thread is quite long existed, but still relevant. I present a scenario just as in your
blog. And it is the decryption stage where I face problems. I am using the following for
encription in the sftp receiver adapter:

[Link] 19/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

And the sftp sender adapter decryption settings are :

And when I send a file, its encrypted correctly (I decrypt it locally). But the receipient

can not decrypt the file, the sftp adapter gives the following error:

I will highly appreciate if you could give me some hints / solution on this

issue.

Ajeet Phadnis

Like 0 | Reply | Alert Moderator | Share

Former Member
June 21, 2016 at 9:52 am

And what is the problem exactly?

Like 0 | Reply | Alert Moderator | Share

Ajeet Phadnis
June 21, 2016 at 10:03 am

[Link] 20/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Hello Peter,

Thanks for the prompt reply. The problem is decryption fails, and get the
following exception:

Error while sending message: Cannot send message to module

processor [Link]:

PGPDecryption Module:

Error 6/21/16 Error:

11:26:32 [Link]

AM chAlgorithmExcepti

on: No such

algorithm:

IDEA/CFB/NoPadd

ing

I am using AES_128 algol, and still the Decryption module fails.

While in Sabharish's blog, he has successfully demonstrated

the decryption stage to work.

Appreciate your suggestions.

Ajeet Phadnis

Like 0 | Reply | Alert Moderator | Share

Former Member
June 21, 2016 at 10:16 am

Have you encrypted the message? Or your partner? I ask because it makes
no sense, beside a proof of concept, to encrypt your message and then
decrypt it afterwards with a second interface.

Just a guessing from my side (in hope that it helps):

If your partner has encrypted the file please ask him which algorithm he has
used, because your error message says that AES_128 wasn't used, but an
IDEA algorithm probably used by an OpenPGP implementation.

[Link] 21/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

The libraries used by the PGP module (bouncycastle) do not support them as
far as i know.

So please ask the one providing you the file which kind of pgp, pgp version
and algorithm he is using for encrypting the file.

If this is sorted out please let him use compatibility modes or algorithms that
the SAP PGP module supports.

Like 0 | Reply | Alert Moderator | Share

Ajeet Phadnis
June 21, 2016 at 10:25 am

Thanks, Peter

Yes, its a scenario I am running on my PI instance. Created a sender that


encrypts the message (pic 1 in my first query) the file is placed on sftp server
directory.

Then I have created a resipient that picks this encrypted file decrypts it (pic 2
in my first query) and sends to another sftp server location.

And its this resipient decryption stage that fails (pic 3 in my first query).

Ajeet Phadnis

Like 0 | Reply | Alert Moderator | Share

Former Member
June 21, 2016 at 10:45 am

Ok, so some kind of proof of concept.


Did you try to do the same with two key pairs? I.e. generate a second key pair
to simulate a receiver/sender different from your system?

Like 0 | Reply | Alert Moderator | Share

Ajeet Phadnis
June 21, 2016 at 10:51 am

Yes, I have two keyrings one used for sender and other for resipient.

Like 0 | Reply | Alert Moderator | Share

Former Member
June 21, 2016 at 10:56 am

Then i have no idea to be honest.

[Link] 22/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Sorry.

Like 0 | Reply | Alert Moderator | Share

Former Member
November 27, 2013 at 2:58 pm

Hi there

Below error is occurred when using PGP Module in File adapter with localejbs/PGPEncryption. Kindly advise.

"[Link]: Exception in XML Parser (format

problem?):'[Link]: Content is not allowed in prolog.'"

Like 0 | Reply | Alert Moderator | Share

pavan thiruveedula
November 28, 2013 at 11:03 am

Hi Ravi,

Are you using FCC in your scenario. If yes please use Module transform bean instead of using normal
FCC content conversion. That will solve your PGP problem.

Thanks,

Pavan T

+91 9892398599

[Link]
htm

Like 0 | Reply | Alert Moderator | Share

Former Member
December 2, 2013 at 9:36 pm

Thanks Pravan.. The prolog error is solved .

I used Module transform bean already.. Only think I missed is normal FCC is [Link]
you for your inputs.

Like 0 | Reply | Alert Moderator | Share

[Link] 23/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Former Member
September 23, 2014 at 6:18 am

Dear Vijay,

Kindly confirm , whether we need to delete the module parameter "localejbs/ModuleProcessorExitBean " .
when we are using this , we are getttig the below exception,could you please guide me.

"MessagingException: [Link]: SFTP "

Regards

Raju

Like 0 | Reply | Alert Moderator | Share

Rohan DCosta
April 23, 2015 at 2:38 pm

Hi All,

We are getting the following error in the receiver channel.

nested exception is: [Link]: while trying to invoke the method


[Link]() of an object loaded from local
variable 'msMessage'

BASIS has confirmed that JCE unlimted has been installed and System was restarted.

Could you kindly help

Like 0 | Reply | Alert Moderator | Share

[Link] 24/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Rohan DCosta
April 24, 2015 at 6:08 am

Hi Guys,

And unlimited JCE unlimited and the Module sequence solves this.

Found out the 'CallSapAdapter' was the culprit. Once I removed it, the PGP module worked.

Like 0 | Reply | Alert Moderator | Share

Former Member
February 4, 2016 at 9:35 am

How to use "Diffie-Hellman" algorithm in PGP ENCRYPTION in SAP PO

Like 0 | Reply | Alert Moderator | Share

Muhammad Abdullah
April 9, 2016 at 12:26 pm

Hi,

We are using PI 7.3 and for B2B requirement we are supposed to send the MT100 message to banks after
signing the message using PKCS7 standard algorithm. Can any one explain how this would be achieved?

Like 0 | Reply | Alert Moderator | Share

[Link] 25/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Remo Sha
October 5, 2016 at 10:51 am

Hi,

anyone can you tell me, can we encrypt CSV files in PI and send to file adapter?

Like 0 | Reply | Alert Moderator | Share

Former Member
October 5, 2016 at 11:11 am

Yes...
all in receiver adapter as described in the official SAP documentation.

Best regards,

Peter

Like 0 | Reply | Alert Moderator | Share

Remo Sha
October 5, 2016 at 11:36 am

Hi Peter,

in our case when we try with simple txt file, its happening. ie its converting into encrypted
document. But when its CSV file its not happening. same flat file is processing to reciver
folder.

Note: sender is SFSF adapter and reciver is File adapter.

Thanks.

Like 0 | Reply | Alert Moderator | Share

Former Member
October 5, 2016 at 11:39 am

File adapter on receiver side is totally ok. Sender adapter doesn't play any role as
encryption is only done in the receiver adapter.

Any hints to errors in the audit log? Are there any hints about the encryption at all in
the audit log?
If not, then recheck your adapter module settings in the receiver channel of your
interface.

Like 0 | Reply | Alert Moderator | Share

[Link] 26/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Manoj Kh
October 5, 2016 at 11:40 am

Sree,

It may be because of the wrong sequence of the modules in Receiver channel. can you
create a separate thread and put the screenshot of channel config there.

Br,

Manoj

Like 0 | Reply | Alert Moderator | Share

Remo Sha
October 5, 2016 at 11:42 am

Sure, thank you Manoj

Like 0 | Reply | Alert Moderator | Share

Pavithra N
April 14, 2020 at 12:50 pm

Hi,

If we are using partnerPublicKey to encrypt the message and send to the third party ,then what is the use of
encryptionAlgo parameter in PGP .In some of the cases i see the parameter encryptionAlgo has not been
used.

Thanks

Like 0 | Reply | Alert Moderator | Share

Add Comment

Find us on

[Link] 27/28
3/2/23, 8:22 PGPEncryption Module: A Simple How to Guide | SAP Blogs

Privacy Terms of Use

Legal Disclosure Copyright

Trademark Preferencias sobre cookies

Newsletter Support

[Link] 28/28

Common questions

Powered by AI

The prerequisites for using the PGPEncryption module in SAP PI 7.11 include having Support Package 08 installed. This is necessary to utilize the new B2B and SFTP/PGP capabilities released by SAP for SAP PI .

To configure the receiver communication channel, one must first select both 'Sign' and 'Encrypt' options for the message. The public key provided by the partner is used for encryption, whereas the user's own private key and its passphrase are required for signing the message. Additionally, compression such as ZIP may be applied to reduce the message size .

Key files in the SAP PGP encryption setup can be customized by using the parameter 'keyRootPath' to define a different path from the default location under usr/sap/<System ID>/<Instance ID>/sec. This allows for flexible file management to suit organizational needs and security policies .

The integration of PGP/SFTP capabilities in SAP PI significantly reduces the dependency on third-party vendors. With these built-in functionalities, SAP can now offer a more comprehensive enterprise service bus solution, enhancing flexibility and control for its users. This integration allows SAP PI users to handle encryption and secure data transmission more seamlessly, eliminating the need for external solutions and likely resulting in cost savings and increased efficiency .

To resolve algorithm mismatches in SAP's PGP encryption module, it is recommended to first verify the encryption algorithm used by the partner and the capabilities of the SAP PGP module. If a mismatch occurs, communicate with partners to agree on compatible algorithms supported by both systems, ensuring seamless encryption/decryption processes. Consider utilizing compatibility modes or shared standards like AES algorithms .

SAP's PGP encryption module supports a variety of encryption algorithms, allowing flexibility in encrypting messages according to partner requirements. The supported algorithms include AES with 128, 192, and 256-bit keys, BLOWFISH, CAST5, DES, 3DES, and TWOFISH. Users need to select the appropriate algorithm based on the partner's specification .

A potential issue that can arise involves algorithm compatibility. For instance, if a partner encrypts a message using an algorithm not supported by the SAP PGP module, such as IDEA/CFB/NoPadding, decryption will fail. This incompatibility can lead to errors like 'java.security.NoSuchAlgorithmException' during the decryption process, highlighting the necessity for both parties to agree on supported algorithms .

When selecting a signing algorithm in SAP’s PGP module, considerations should include the level of security needed and compatibility with the partner's systems. Supported algorithms are MD5, RIPEMD160, SHA1, SHA224, SHA256, SHA384, and SHA512, with SHA algorithms generally preferred for their stronger security properties. The choice also depends on any regulatory requirements or organizational policies regarding data integrity and authentication .

Using both signing and encryption enhances message security and authenticity in SAP PI. Encryption ensures data confidentiality by preventing unauthorized access, while signing provides authenticity and integrity, verifying the sender's identity and ensuring the message has not been altered in transit. This dual-layer security is critical in secure communication between business partners, especially in sensitive data exchanges .

A scenario where a PGP encrypted file's filename changes during decryption can occur when a non-PI tool is used for decryption, such as PGP8, which might use the message-id instead of the original filename. To address this, one can adjust settings in the communication channel or work with partners to standardize encryption/decryption tools to ensure filenames are preserved accurately .

You might also like