How to – Guide SAP Security Optimization Self-Service

This document describes how to use the SAP Security Optimization Self Service in your local Solution
Manager

1 Creation of the Security Optimization Session

1. Connect to the solution manager system and call the Solution Manager using the transaction code
“DSWP” or using the correspondent entry in the EasyAccess Menu

2. Choose Solution XXX Production

3. Select A “Operations” in the navigation bar on the left
4. Select B “Service Plan” -> C “Self Delivered Services" in the header menu of the main window.
5. Select D “Create” using the button in the main window.

6. Mark the self services “SAP System Security Optimization” and hit the button "Create"

7. In the net screen select a date and confirm.

 8. Now you can find the created service in the Service Plan for Self Delivered Services.
Select the Session (not the service) to see details of the session

9. On the tab "Documents and SDCCN Data you can check the status of the required data
download from the managed system.

OR

10. The required SDCCN Download will be available within 24 hours. You can either start
processing the session questionnaire while you are waiting the automatic download, Start the
ST14-Analysis of force the collection and transfer of the SDCCN download data.

2 Forcing the SDCCN Download

Prerequisite: Get the local session number in your Solution Manager: Transaction DSWP ->
Operations -> Service Plan -> Self Delivered Services -> Expand the required Service SAP
Security Optimization -> Click on the Session Name -> Click on tab 'Processing Information' and
copy the 'Local Session Number'.

1. Login to SSM Solution Manager -> execute DSWP

2. Switch to the tab "Service Plan" -> "SDCCN Data".

3. You may enter the 'Local Session Number' as selection criteria. Hit the button 'Display'. You
may get asked to enter you logon data. Check the status: If the status is 'initial' execute: "Send
Download Request".

4. If the status is 'Request sent' select 'Start Data Collection' in the drop down menu next to the
Execute Button and hit 'Execute’. Once you have done this, the SDCCN Download will be
available on the Solution Manager within several minutes. Note: The status will not change
from 'Download request sent' unless the download has been received on the Solution
manager. This will change the status to 'receive data' (meaning 'Data received)
3 Creation of the ST14 Download in the analysed system
Create the ST14download in the PRD system that should be analyzed with the Security Optimization
Service and send it to the Solution Manager.
1. Connect to the satellite system and call transaction ST14
2. Select the application “Security Optimization”

3. Press the pushbutton “Schedule job”

4. Complete the input parameters of the selection screen as described in the picture
below and press “Schedule job” .
Tried J2EE--

5. In the main menu of transaction ST14 select “Utilities”-> “Analysis browser”

6. ST14 menu “Utilities”-> “Job overview” to survey jour job.

7. ST 14 Utility Analysis Browser. Selected as Remote system and sends the analysis to the
Solution Manager using the “Send” push button. Confirm the two dialog popup using the “Send”
and the “OK” button.
Note: wait till the status changed into “COMPLETE” then “Send”
4 Completing the Questionnaire for the Service Session
The Questionnaire is used to influence the content and the look of the resulting service
report.

1. Enter the detailed data of you session by double clicking the System Security Optimization session on
the Service Plan -> Self Delivered Services tab

2. Click on the open session work bench

Remember to Reset Session Workbench

3. In the bottom line of the detailed data sheet of you session hit "Create Questionnaire" to create the
session. The button name switches to "Edit Questionnaire". Hit Edit to process the questionnaire.

o Tip: In the Word Document it’s not easy to add lines, but it’s easy to add, copy, insert in SAP
(import the DOC then edit and then export for next time’s use).

4. Check if the selected applications are correct and press “Save” . The questions corresponding to
the selected applications show up when you open the corresponding sub tree in the menu on the
left hand side.

5. Complete the questions

5 Include the ST14 download in your analysis session and create the service report
1. In your Solution Manager session: Double click on the session “SAP Security Optimization - Self
Service”.

2. Select the check “Collect ST14 data into session”. Call the analysis browser with the push button
“Analysis browser” and search for the correct GUID. Then “Copy and Paste” the GUID into the
GUID field of the check table.

3. You can now close the analysis browser again.(If you know the GUID you can also copy it directly
into the check table without calling the Analysis Browser.)

4. Press “Done”

5. Go to check “Read St14 Download”, set the flag in the column “Execute” in from of your GUID and
press “Save”

6. The session should now look like this:

7. Now you can generate the service report using the push button “Word Document”. MS Word will
start and the document will be generated. Please be patient until the report generation is finished.