SPNEGO Key generation error

[steven_bier]

Hello,

i want to configure SPNEGO on a NW 731 and getting a warning message by generating the Keys during the configuration:

Error during generation of encryption key with type AES256-CTS-HMAC-SHA1-96: Illegal key size. Check the crypto policy file in use and also SAP Note 1240081

The sAPCryptolib and JVM is up to date.

Thanks

Steven

[Former Member · Accepted solution]

How are you generating the keys? Not by using the SPNEGO wizard, I assume. Anyway, AES is not supported, you will have to use DES or RC4-HMAC. See SAP note 1457499 for details.

https://service.sap.com/sap/support/notes/1457499

[former_member203984 · Accepted solution]

Hi Samuli,

I have installed EHP1 for NW 7.3 in windows 2008 R2. Is that AES is supported?

What I have to follow?

I am getting an error as "etype 18" no key .

Can you please help out?

Regards

G.Partheeban

[Former Member · Accepted solution]

Yes, SPNEGO in NW731 supports AES. Encryption type 18 is AES256-CTS-HMAC-SHA1-96, I myself use encryption type 17 which is AES128-CTS-HMAC-SHA1-96 and that works. Is the etype listed in the key configuration for the SPNEGO realm? You could configure the SPNEGO realm to use etype 17 or even etype 23 (RC4-HMAC), it should work although AES is recommended.

[former_member203984 · Accepted solution]

Hi  Samuli,

Thanks for the reply.

Can you see this blog and reply me? Can you give me solution to overcome this problem?

Regards

G.Partheeban

[anja_engelhardt2]

moved to SAP NetWeaver Single Sign-On by moderator