How To Fix SECAUDIT054 - Control of RFC calls

SAP Error Message - Details

• Message type: E = Error

• Message class: SECAUDIT - Message class for security audit

• Message number: 054

• Message text: Control of RFC calls

What causes this issue?

RFC function call events recorded in Security Audit Log. Depending on
the setting (see below), the following events are reported to the
monitoring architecture:
Call successful
Call failed
STYLE S_DOCUS1
In the Security Audit Log, the system records actions relevant for
system security. You use the configuration function of the Security
Audit Log to set which actions are recorded and which actions trigger
an alert in the alert monitor. To configure the Security Audit Log,
choose <LS>Tools -> Administration -> Monitor -> Security Audit Log ->
Configuration</> (transaction SM19)
For more information, see the "Application Help" for the Security Audit
Log.
STYLE *

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SECAUDIT054 - Control of RFC calls ?

  The SAP error message SECAUDIT054 pertains to the control of Remote Function Call (RFC) calls in the SAP system. This message is part of the security audit log and indicates that there is a potential security issue related to the RFC calls being made in the system.
  Cause:
  The error message SECAUDIT054 is triggered when the system detects that an RFC call is being made that does not comply with the security policies set in the system. This could be due to several reasons, including:
  
  Unauthorized Access: An RFC call is being made by a user or system that does not have the necessary authorizations.
  Configuration Issues: The RFC destination may not be properly configured, or the security settings for RFC calls may not be correctly set.
  Security Policies: The system's security policies may be too strict, leading to legitimate RFC calls being flagged as potential security risks.
  
  Solution:
  To resolve the SECAUDIT054 error, you can take the following steps:
  
  
  Check User Authorizations: Ensure that the user or system making the RFC call has the appropriate authorizations. You can do this by reviewing the user's roles and profiles in transaction SU01 or SUIM.
  
  
  Review RFC Destination Configuration: Check the configuration of the RFC destination in transaction SM59. Ensure that the destination is correctly set up and that the user credentials used for the RFC call are valid.
  
  
  Audit Security Settings: Review the security settings related to RFC calls. This can include checking the parameters in transaction RZ10 or RZ11 that control RFC security.
  
  
  Adjust Security Policies: If the security policies are too strict, consider adjusting them to allow legitimate RFC calls while still maintaining a secure environment.
  
  
  Consult SAP Notes: Check for any relevant SAP Notes that may address this specific error message or provide guidance on best practices for RFC security.
  
  
  Monitor Logs: Use transaction SM19 to monitor the security audit logs for any additional information related to the error. This can help identify patterns or specific calls that are causing the issue.
  
  
  Related Information:
  
  RFC (Remote Function Call): A protocol used in SAP systems to enable communication between different SAP systems or between SAP and non-SAP systems.
  Security Audit Log: A feature in SAP that allows you to log and monitor security-related events in the system.
  Transaction Codes:
  
  SM59: Manage RFC destinations.
  SU01: User maintenance.
  SUIM: User information system.
  SM19: Security audit log configuration.
  RZ10/RZ11: Profile parameters management.
  
  
  
  By following these steps and reviewing the related information, you should be able to address the SECAUDIT054 error effectively. If the issue persists, consider reaching out to SAP support for further assistance.