How to Guide SAP Security Optimization Self-Service This document describes how to use the SAP Security Optimization Self Service in your local Solution Manager 1 Creation of the Security Optimization Session 1. Connect to the solution manager system and call the Solution Manager using the transaction code DSWP or using the correspondent entry in the EasyAccess Menu 2. Choose Solution XXX Production 3. Select A Operations in the navigation bar on the left 4. Select B Service Plan -> C Self Delivered Services" in the header menu of the main window. 5. Select D Create using the button in the main window. 6. Mark the self services SAP System Security Optimization and hit the button "Create" 7. In the net screen select a date and confirm.
8. Now you can find the created service in the Service Plan for Self Delivered Services. Select the Session (not the service) to see details of the session 9. On the tab "Documents and SDCCN Data you can check the status of the required data download from the managed system. OR 10. The required SDCCN Download will be available within 24 hours. You can either start processing the session questionnaire while you are waiting the automatic download, Start the ST14-Analysis of force the collection and transfer of the SDCCN download data. 2 Forcing the SDCCN Download Prerequisite: Get the local session number in your Solution Manager: Transaction DSWP -> Operations -> Service Plan -> Self Delivered Services -> Expand the required Service SAP Security Optimization -> Click on the Session Name -> Click on tab 'Processing Information' and copy the 'Local Session Number'. 1. Login to SSM Solution Manager -> execute DSWP 2. Switch to the tab "Service Plan" -> "SDCCN Data".
3. You may enter the 'Local Session Number' as selection criteria. Hit the button 'Display'. You may get asked to enter you logon data. Check the status: If the status is 'initial' execute: "Send Download Request". 4. If the status is 'Request sent' select 'Start Data Collection' in the drop down menu next to the Execute Button and hit 'Execute. Once you have done this, the SDCCN Download will be available on the Solution Manager within several minutes. Note: The status will not change from 'Download request sent' unless the download has been received on the Solution manager. This will change the status to 'receive data' (meaning 'Data received)
3 Creation of the ST14 Download in the analysed system Create the ST14download in the PRD system that should be analyzed with the Security Optimization Service and send it to the Solution Manager. 1. Connect to the satellite system and call transaction ST14 2. Select the application Security Optimization 3. Press the pushbutton Schedule job 4. Complete the input parameters of the selection screen as described in the picture below and press Schedule job.
Tried J2EE-- 5. In the main menu of transaction ST14 select Utilities -> Analysis browser 6. ST14 menu Utilities -> Job overview to survey jour job. 7. ST 14 Utility Analysis Browser. Selected as Remote system and sends the analysis to the Solution Manager using the Send push button. Confirm the two dialog popup using the Send and the OK button.
Note: wait till the status changed into COMPLETE then Send
4 Completing the Questionnaire for the Service Session The Questionnaire is used to influence the content and the look of the resulting service report. 1. Enter the detailed data of you session by double clicking the System Security Optimization session on the Service Plan -> Self Delivered Services tab 2. Click on the open session work bench Remember to Reset Session Workbench 3. In the bottom line of the detailed data sheet of you session hit "Create Questionnaire" to create the session. The button name switches to "Edit Questionnaire". Hit Edit to process the questionnaire. o Tip: In the Word Document it s not easy to add lines, but it s easy to add, copy, insert in SAP (import the DOC then edit and then export for next time s use). 4. Check if the selected applications are correct and press Save. The questions corresponding to the selected applications show up when you open the corresponding sub tree in the menu on the left hand side. 5. Complete the questions
5 Include the ST14 download in your analysis session and create the service report 1. In your Solution Manager session: Double click on the session SAP Security Optimization - Self Service. 2. Select the check Collect ST14 data into session. Call the analysis browser with the push button Analysis browser and search for the correct GUID. Then Copy and Paste the GUID into the GUID field of the check table. 3. You can now close the analysis browser again.(if you know the GUID you can also copy it directly into the check table without calling the Analysis Browser.) 4. Press Done 5. Go to check Read St14 Download, set the flag in the column Execute in from of your GUID and press Save 6. The session should now look like this: 7. Now you can generate the service report using the push button Word Document. MS Word will start and the document will be generated. Please be patient until the report generation is finished.