Are smartcards for authentication and digital signatures supported?
Companies often want to use the same SmartCard for entering the company building, logging on to the computer, and for digital signatures. SAP supports this possibility in principle. Authentication for a SAP system can be performed using an X.509 certificate. If a logon to an SAP system with a SmartCard using a web browser is desired, the customer must ensure that the certificate on the SmartCard is sent to the browser using Microsoft CAPI (Internet Explorer) or PKCS#11 (Netscape / Mozilla). An external security product that supports MS-CAPI or PKCS#11 is required to do this. If a logon to an SAP R/3 system with a SmartCard using the SAP GUI for Windows is desired, Secure Network Communication (SNC) must be installed between the front end and the back end. The external security product must therefore support SNC. If you wish to create digital signatures using cryptographic hardware, you need to make use of an external security product . Note that neither SAPSeculib/SAPCryptolib nor the
