Getting Certificate Request signed from SAP CA - SAP Q&A Page 1 of 3

Community
(http://www.sap.com/)
(https://community.sap.com)
(/users/login.html?redirect_to=%2Fquestions%
2F11742414%2Fgetting-certificate-request-signed-
from-sap-ca.html)
Ask a Question (https://answers.sap.com/questions/ask.html) Write a Blog Post (https://blogs.sap.com/wp-admin/post-new.php) Login (/users/
/ Sign-up

Not what you're looking for? Search community questions.

Former Member

Getting Certificate Request signed from SAP Follow (/users/login.html?redirect_to=%

signed-from-sap-ca.html%3Fs_action%3DvoteUp%26s_data%3D11742414%26s_csrf%3D1583849093632.7285) 2Fquestions%2F11742414%2Fgetting-
0 CA certificate-request-signed-from-sap-
ca.html%3Fs_action%3Dfollow%26s_csrf%
signed-from-sap-ca.html%3Fs_action%3DvoteDown%26s_data%3D11742414%26s_csrf%3D1583849093632.7285)
29 05 2015 um 10:57 | 1.5k Views 3D1583849093632.7285)

RSS Feed
Hi guys,

I've upgraded solman to 7.1 SP12 recently and I'm currently configuring Technical operations. At one stage,
there's a requirement to configure SSL for ABAP and enable HTTPS in SMICM. I'm following note 510007. Related questions
I've done the following steps: Verisign SSL Certificate for SAP SSL SOAP Client
(https://answers.sap.com/questions/10899247/verisign-
1) In t-code STRUSTSSO2, under 'SSL Server Standard', I created a PSE. ssl-certificate-for-sap-ssl-soap-client.html)
2) Under 'Own Certificate', I clicked on 'Create Certificate Request' which gives me a text file having the By Former Member
'Begin certificate request' and 'End certificate request' details. ( https://people.sap.com/former.member) , May 09,
2014
From here, I'm supposed to get the request signed from sapmarketplace under Trust Center Services.
Visual Admin settings/configuration for setting up SSL
From here, I don't know how to proceed. Please advise. (HTTPS)
(https://answers.sap.com/questions/7388749/visual-
regards,
admin-settingsconfiguration-for-setting-up-.html)
Suraj By User Satyam
( https://people.sap.com/user.satyam) , Jun 02, 2010
NW AS Java Administrator (NWA) (/tags/350991270579841525753072979612318)

3 Antworten

Sort by: Stimmen | Erstellt | Oldest

Beste Antwort

Manuel Martins ( https://people.sap.com/manuel.martins)

(/users/5515/manuelmartins.html)

29 05 2015 um 12:13

Hi,
ca.html%3FchildToView%3D11742647%23answer-11742647%26s_action%3DvoteUp%26s_data%3D11742647%26s_csrf%3D1583849093632.7285)
3 When you create the PSE, automatically a self signed certificate is created.
ca.html%3FchildToView%3D11742647%23answer-11742647%26s_action%3DvoteDown%26s_data%3D11742647%26s_csrf%3D1583849093632.7285)
Then you make double click on it. It's data will be shown on the "Certificate" tab (second one on right). After that click on button "Add to
ACL". From now on it can be used on for SSL logon tickets.

Regards,

Share

Matt Fraser ( https://people.sap.com/matt.fraser)

(/users/569/mattfraser.html)
29 05 2015 um 17:17

Does it have to be signed by SAP CA? For SolMan purposes, I'm guessing you really only need your internal servers and clients to trust the
ca.html%3FchildToView%3D11743164%23answer-11743164%26s_action%3DvoteUp%26s_data%3D11743164%26s_csrf%3D1583849093632.7285)
3 certificate. So, you can either use an internal CA, such as Microsoft Certificate Services (which is handy for pushing trust of the CA to internal IE
browsers via group policy), or you can manually add the self-signed certificate to the trust stores of those servers and clients that actually need it.
ca.html%3FchildToView%3D11743164%23answer-11743164%26s_action%3DvoteDown%26s_data%3D11743164%26s_csrf%3D1583849093632.7285)
Share

11 Comments

Former Member  Former Member

05 06 2015 um 05:16 (/comments/11755246/view.html)

Hi all,

The issue got resolved after updating the sapcryptolib.

I'll close the discussion now.

https://answers.sap.com/questions/11742414/getting-certificate-request-signed-from-s... 10.03.2020
 Getting Certificate Request signed from SAP CA - SAP Q&A Page 2 of 3

Thanks & regards,

Suraj

Gefällt Mir (/users/login.html?redirect_to=%2Fquestions%2F11742414%2Fgetting-certificate-request-signed-from-sap-ca.html%3FchildToView%3D11755246%

23comment-11755246%26s_action%3Dlike_comment%26s_data%3D11755246%26s_csrf%3D1583849093632.7285)
1
Share

Show all

Former Member

29 05 2015 um 12:38

Hello Suraj,
ca.html%3FchildToView%3D11742617%23answer-11742617%26s_action%3DvoteUp%26s_data%3D11742617%26s_csrf%3D1583849093632.7285)
0 Earlier it was possible to submit the CSR request that you created in STRUST in SAP's Test SSL CA.
ca.html%3FchildToView%3D11742617%23answer-11742617%26s_action%3DvoteDown%26s_data%3D11742617%26s_csrf%3D1583849093632.7285)
And SAP portal would provide a signed response , which you then import back into your PSE.

Followed by downloading the 'root' certificate of SAP Test CA into your STRUST root database.

You then had 30 days untill you make a decision to buy the SSL certificate.

However, now I can't see a link to submit the CSR, I can see the link to download 'root' certificate of SAP Test CA though.

You will have to find/purchase an SSL certificate from another CA or SAP CA. You could also try enabling SSL using self signed certificates. Self
signed certificates can be generated using openssl, you can find commands if you google them.

Regards,

Siddhesh

Share

https://answers.sap.com/questions/11742414/getting-certificate-request-signed-from-s... 10.03.2020
 Getting Certificate Request signed from SAP CA - SAP Q&A Page 3 of 3

Find us on

/twitter.com/SAPCommunity) (https://www.youtube.com/c/SAPCommunities) (https://www.linkedin.com/company/sap) (https://instagram.com/sap/)

Privacy (http://sap.com/about/legal/privacy.html) Terms of Use (http://sap.com/corporate/en/legal/terms-of-use.html)

Legal Disclosure (http://sap.com/about/legal/impressum.html) Copyright (http://sap.com/about/legal/copyright.html)

Trademark (http://sap.com/about/legal/trademark.html) Cookie-Präferenzen

Newsletter (https://www.sap.com/cmp/nl/sap-community-voice/index.html) Support (mailto:sapnetwork@sap.com)

https://answers.sap.com/questions/11742414/getting-certificate-request-signed-from-s... 10.03.2020