Contactez-nous Suivez-nous sur Twitter En francais English Language

Freely subscribe to our NEWSLETTER

Newsletter FR

Newsletter EN



How to encrypt credit cards and other information in SAP R/3 for PCI compliance

October 2008 by Ulf Mattsson, CTO, Protegrity Corporation

Some organizations are encrypting the credit card information and other information in SAP R/3 tables by using third party encryption solutions that are PCI compliant. My experience is that it is important to carefully pick the tables to encrypt. You should consider operational aspects including performance and patching. With SAP Retail and SAP BW (PIPE) encryption can be added to the SAP Z tables with decryption of credit card numbers in the file creation process in PIPE, decryption of the card numbers with store key and encrypt the with the PIPE key and encrypt a credit card number in the search module.

I suggest that you review some additional resources on best practices for data encryption: , , and and Please also review and for some additional information about database encryption solutions from different vendors.

See previous articles


See next articles

Your podcast Here

New, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55

All new podcasts