5/22/2017 SAPBusinessObjectsBI4.

2SP04,SecurityUpdates|SAPBlogs

Products
Products Industries
Industries Support
Support Training
Training Community
Community Developer
Developer Partner
Partner

About
About

Home / Community / Blogs + Actions

SAPBusinessObjectsBI4.2SP04,
SecurityUpdates
May18,2017 | 224Views |

AshutoshRastogi
morebythisauthor

SAPBusinessObjectsBusinessIntelligenceplatform

share
1 share
2 tweet share
9 3
like

Follow

https://blogs.sap.com/2017/05/18/sapbusinessobjectsbi4.2sp04securityupdates/ 1/5
5/22/2017 SAPBusinessObjectsBI4.2SP04,SecurityUpdates|SAPBlogs

Likeanyotherrelease,BI4.2SP04isalsopacked
withnewinnovations.Wehavebeenworkingontomake
theBIplatformmoresecure,andIamhappyto
announcethatagoodpartofthosechangesare
deliveredwithBI4.2SP04.

IwillkeepthisblogfocusedonkeysecurityupdatesinBI
4.2SP04.Incaseyouareinterestedinallthatsnewin
BIplatformthenreferthisWhatsNewDocument

OpenSSLupdate
OpenSSLcryptographiclibrarieshavebeenupdatedwith
thisrelease.Thiswouldenableyoutohavemoresecure
communicationchannels.

SupportforSAPSecureLogon
SAPSecurelogonisaSingleSignon(SSO)solution
fromSAPthatworksacrossproductsandallows
customerstohaveseamlessSSOexpereincefortheir
endusersacrossapplications.

Withthisreleasewesupporttwofactorauthentication
andSSOviaSecurelogonsolutiontothinclientsofSAP

https://blogs.sap.com/2017/05/18/sapbusinessobjectsbi4.2sp04securityupdates/ 2/5
5/22/2017 SAPBusinessObjectsBI4.2SP04,SecurityUpdates|SAPBlogs

BusinessObjectssuite.

RSAandSAPCryptoupdates
RSAlibrariesaregraduallybeingreplacedwithSAP
Cryptolibraries,somechangescomeswiththisrelease,
morewouldfollowinsubsequentreleases.Wherewe
couldnotalreadyreplaceRSAwehaveupdatedthemto
laterversions.Thisallowsustoprovidecustomerswith
strongerciphers,stricterandstrongeralgorithmsand
continuedFIPScompliance.

Andyes,wehavenowdeprecatedSSLv3.

Impactofthesechanges

https://blogs.sap.com/2017/05/18/sapbusinessobjectsbi4.2sp04securityupdates/ 3/5
5/22/2017 SAPBusinessObjectsBI4.2SP04,SecurityUpdates|SAPBlogs

AnydesktoporthinclientsusingolderBIplatform
librariestoconnecttoBIplatformBI4.2SP04willnot
connectanymore.Thisisbecausetheolder
cryptographiclibrariesofBIplatformdonothave
matchingKeyExchange/cipherswithnewcryptographic
librariesinBI4.2SP04.Hence,

Inallcases

ClienttoolsbypartnerorcustomersusingolderBI
platformlibrariesneedstobeupdatedwithlatest
cryptographiclibrariesfromBI4.2SP04.Sothat
theycancontinuetoconnecttoBIplatform
PatchesareplannedforaddonclientslikeLumira
1.x,DesignStudio1.xetc.tomakesurethey
continuetoworkonceBIplatformisupgradedto
BI4.2SP04.

IncaseyouhaveSSLenabledforSIA

BI4.2SP04wouldconnecttoolderBIplatform
systemsforpromotingcontentviaPromotion
management.IfthisisdonewhenSSLisenabled
forSIA,itwouldnotwork.Followingarethe
options
DisableSSLonSIAandpromoteyour
contenttoBI4.2SP04
Or,youneedtoinstalltherightpatch
releasedforyourBI4.1and4.2SPlines.
Thispatchmakessurethereisacommon
cipherbetweentwosystemsand
communicationcanhappen.ReferSAP
Note2413907
NoplanstopatchBI3.xsystems.Hence,
customersneedtomovetoBI4.xsystemfirst,

https://blogs.sap.com/2017/05/18/sapbusinessobjectsbi4.2sp04securityupdates/ 4/5
5/22/2017 SAPBusinessObjectsBI4.2SP04,SecurityUpdates|SAPBlogs

beforetheycanmovetoBI4.2SP04
Youneedtogeneratenewcertificates(minimum
KeySize2048)forolderBIplatformsystems

FormoreinformationyoucanreferSAPNote2433337

AlertModerator

1Comment

HenryBanks

May18,2017at3:07pm

veryencouragedtoseetwofactorSSO.ProofthattheIdeasPlace
feedbackdoeswork,thankyou!

AddComment

Share&Follow
Privacy TermsofUse LegalDisclosure Copyright Trademark Sitemap Newsletter

https://blogs.sap.com/2017/05/18/sapbusinessobjectsbi4.2sp04securityupdates/ 5/5