Securing Platform Administration

Use the Web-based console called SAP Control Center to remotely and securely administer SAP Mobile Platform.

SAP Control Center relies on a Windows service called SAP Control Center X.X that runs on each SAP Mobile Server on the cluster. The service handles communication between SAP Control Center and SAP Mobile Server runtime components.

1. Enabling Authentication and RBAC for Administrator Logins
   Role based access control (RBAC) for administrators is always performed by SAP Mobile Server: SAP Control Center automatically delegates administrator authentication to the providers configured for the "admin" security configuration on the "default" domain. When you install SAP Mobile Platform, only the PreconfiguredUserLogin module is used for the "admin" security configuration. To make the "admin" security configuration production-ready, you must initially log in using the administrator credentials defined with the installer, and replace the PreconfiguredUserLogin module with production-ready providers.
2. Resetting the supAdmin Password
   You can manually reset the current platform administration password.
3. Preparing SSL for HTTPS Listeners
   SSL requires that two self-signed certificates installed by default need to be replaced: one for SAP Mobile Server, and one for SAP Control Center. Once the certificates have been imported, you can configure the security profile for these components in SAP Control Center.
4. Securing Multiple Domains
   To prevent role mapping leaks between multiple tenant domains, configure domains and assign shared security configurations.
5. Configuring Secure Communication With an HTTP Proxy
   If you want SAP Mobile Server connect to an HTTP Proxy, you can set connection properties for it when you optimize SAP Mobile Server performance.
6. Changing the SAP Control Center Database Password
   As a best practice, SAP recommends changing the SAP Control Center database password to ensure security.