rsecnote via mail

11
How to Send Results of RSECNOTE Using Mail

Upload: gangshm

Post on 25-Nov-2015

41 views

Category:

Documents


8 download

DESCRIPTION

Documents show how we can automate the sap security notes to the sent to security team.

TRANSCRIPT

  • How to Send Results ofRSECNOTE Using Mail

  • 2011 SAP AG. All rights reserved. 2

    Send Results of RSECNOTE Using MailOnline Help

    SAP Connect Configurationhttp://help.sap.com/saphelp_nw70/helpdata/EN/2b/d926324b8a11d1894c0000e8323c4f/frameset.htm

    You have to configure at least all steps which are related to the sending processbased on SMTPIn addition we like to highlight the topic concerning Secure E-Mailhttp://help.sap.com/saphelp_nw70/helpdata/EN/6f/d02041cfb7f423e10000000a155106/frameset.htm

    Defining Output Devices for Printing Using E-Mailhttp://help.sap.com/saphelp_nw70/helpdata/EN/ae/16193ce8fac413e10000000a114084/frameset.htm

    On the following slides we show some of the configuration settings

  • 2011 SAP AG. All rights reserved. 3

    Send Results of RSECNOTE Using MailDefine MAIL Printer (1)

    Transaction SPAD

    Define a virtual printer which sends thespool request to the mail server using SMTP

    Typically, you choose the device type PDF1to create mails containing a PDF attachment

  • 2011 SAP AG. All rights reserved. 4

    Send Results of RSECNOTE Using MailDefine MAIL Printer (2)

    Transaction SPAD

    Set the Host Spool Access Method to M

    The recipients mail address will be definedlater as part of the background job definition

  • 2011 SAP AG. All rights reserved. 5

    Send Results of RSECNOTE Using MailCreate Role for Background User (1)

    Transaction PFCG

    Create a role for thebackground user

  • 2011 SAP AG. All rights reserved. 6

    Send Results of RSECNOTE Using MailCreate Role for Background User (2)

    Authorizations of the Role:

    Authorization Object S_TCODEFields:TCD = ST13

    Authorization Object S_ADMI_FCDFields:S_ADMI_FCD = ST0R

    Authorization Object S_PTCH_ADMFields:ACTVT = 02COMPONENT = SECURITY-CHECKTABLE = '

    Authorization Object S_SPO_DEVFields:SPODEVICE = %MAI, MAIL

    Authorization Object S_DATASETFields:AVTVT = 33FILENAME = *PROGRAM = /SSA/NXS

    Required only for testing purpose as long as you want to create the reportmanually using this user. As soon as the background job works well you canremove this authorization and set the user type of the user to System.

    Required to execute the report.

    This authorization enables the background user to check for requiredSecurity Notes and to produce the report.

    This authorization enables the background user to send mails

    This authorization is required to load the current Online Recommendationsfrom the SAPNet and to check the digital signature which is attached tothem.

  • 2011 SAP AG. All rights reserved. 7

    Send Results of RSECNOTE Using MailCreate Background User

    Transaction SU01

    Create a background user andassign the role

    The mail address is mandatoryand will be used as the sender(and reply) address

  • 2011 SAP AG. All rights reserved. 8

    Send Results of RSECNOTE Using MailCreate Report Variant for Background Job

    Transaction SA38

    Create a variant RSECNOTEfor the report /SSA/NXS

    Set the service parameter tothe value SECURITY_CHECK

  • 2011 SAP AG. All rights reserved. 9

    Send Results of RSECNOTE Using MailSchedule Background Job

    Transaction SM36

    Create a background job

    Add a step for the report /SSA/NXS withvariant RSECNOTE

    ?Use the background user RSECNOTE?Set the MAIL printer?Set the receiver mail address?Define a titleAdd more steps for every receiver whoshould get the report

    Consider, to add a last step for sendingthe mail at once using reportRSCONN01 with variant INT

    Schedule the job regularly, e.g. weekly

  • 2011 SAP AG. All rights reserved. 10

    Send Results of RSECNOTE Using MailResult

  • 2011 SAP AG. All rights reserved. 11

    No part of this publication may be reproduced or transmitted in any form or for any purposewithout the express permission of SAP AG. The information contained herein may bechanged without prior notice.

    Some software products marketed by SAP AG and its distributors contain proprietarysoftware components of other software vendors.

    Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of MicrosoftCorporation.IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x,System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer,z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server,PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER,OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP,RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX,Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registeredtrademarks of IBM Corporation.

    Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.

    Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks orregistered trademarks of Adobe Systems Incorporated in the United States and/or othercountries.Oracle is a registered trademark of Oracle Corporation.

    UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.

    Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin aretrademarks or registered trademarks of Citrix Systems, Inc.HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C, WorldWide Web Consortium, Massachusetts Institute of Technology.

    Java is a registered trademark of Sun Microsystems, Inc.

    JavaScript is a registered trademark of Sun Microsystems, Inc., used under license fortechnology invented and implemented by Netscape.SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer,StreamWork, and other SAP products and services mentioned herein as well as theirrespective logos are trademarks or registered trademarks of SAP AG in Germany and othercountries.

    2011 SAP AG. All rights reserved

    Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, CrystalDecisions, Web Intelligence, Xcelsius, and other Business Objects products and servicesmentioned herein as well as their respective logos are trademarks or registered trademarksof Business Objects Software Ltd. Business Objects is an SAP company.

    Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybaseproducts and services mentioned herein as well as their respective logos are trademarks orregistered trademarks of Sybase, Inc. Sybase is an SAP company.

    All other product and service names mentioned are the trademarks of their respectivecompanies. Data contained in this document serves informational purposes only. Nationalproduct specifications may vary.The information in this document is proprietary to SAP. No part of this document may bereproduced, copied, or transmitted in any form or for any purpose without the express priorwritten permission of SAP AG.

    This document is a preliminary version and not subject to your license agreement or anyother agreement with SAP. This document contains only intended strategies, developments,and functionalities of the SAP product and is not intended to be binding upon SAP to anyparticular course of business, product strategy, and/or development. Please note that thisdocument is subject to change and may be changed by SAP at any time without notice.

    SAP assumes no responsibility for errors or omissions in this document. SAP does notwarrant the accuracy or completeness of the information, text, graphics, links, or other itemscontained within this material. This document is provided without a warranty of any kind,either express or implied, including but not limited to the implied warranties ofmerchantability, fitness for a particular purpose, or non-infringement.SAP shall have no liability for damages of any kind including without limitation direct,special, indirect, or consequential damages that may result from the use of these materials.This limitation shall not apply in cases of intent or gross negligence.

    The statutory liability for personal injury and defective products is not affected. SAP has nocontrol over the information that you may access through the use of hot links contained inthese materials and does not endorse your use of third-party Web pages nor provide anywarranty whatsoever relating to third-party Web pages.