Security Guide for the Solution Manager Diagnostics

The Solution Manager Diagnostics is a Java-based tool within the SAP Web Application Server 6.40 that provides essential functions to centrally monitor and analyze a complete NetWeaver solution landscape. It especially provides functionality to support Java-based components – therefore it is mandatory that an active Java stack is used within your NetWeaver system. The displayed information is gathered by agents: saposcol, sapccmsr, Introscope Agent, Component Analyzer.

As of NetWeaver 04 Service Package 10, the Solution Manager Diagnostics is part of the standard NetWeaver installation. It is mandatory to install one Solution Manager Diagnostics system within your NetWeaver solution landscape. All functions of the Solution Manager Diagnostics can be used via a standard Web browser.

With SP 10 the Solution Manager Diagnostics is released for use by SAP Support only. As of SP 12, the Solution Manager Diagnostics is released for customers. Before SP12, Solution Manager Diagnostics do not allow any changes to the monitored operational NetWeaver landscape. As of SP 12, the Solution Manager Diagnostics will be extended to administrative functionality.

The security aspects that apply to the Solution Manager Diagnostics are described in the following topics:

·        Technical System Landscape: Security-Relevant Interfaces

·        User Authorization and Client Authentication

·        Users and Roles

·        Trace and Log Files