SAP SSL Test Server Certificate

[Ayax]

I have configured a SAP Web Dispatcher to support SSL as it is explained in http://help.sap.com/saphelp_nw70/helpdata/EN/39/09a63d7af20450e10000000a114084/frameset.htm but when testing the result I get this error message:

There is a problem with this website's security certificate.

The security certificate presented by this website was not issued by a trusted certificate authority.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

We recommend that you close this webpage and do not continue to this website.

Click here to close this webpage.

Continue to this website (not recommended).

The certificate I imported into the Web Dispatcher was a test certificate generated in https://websmp109.sap-ag.de/SSLTest, it is supposed to be valid for eight weeks, should it work ok without that message or the error message is expected?

Regards,

Ayax

[Ayax · Accepted solution]

Correct me if I am wrong:

1. I have to import SAP Server CA Certificate because I am using a test certificate.

2. When I order the real certificate the end users will not have to import any certificate.

Is that right?

Regards,

Ayax

[Former Member · Accepted solution]

100% correct.

Real certificates will be from the accredited source.

No extra work, no warnings as long as

- users are accessing website by the name in the certificate, like ep.corp.com, not IP address or any other alias;

- certificate is not expired.

Regards,

Slava

[Former Member]

Error message is expected.

Your web browser, say IE, has a list of "Trusted Root Certification Authorities".

SAP certificate authority is not in this list by default, thus the warning message.

After 8 week in addition to this warning, in details you will see that certificate is expired as well, but it will continue working if you ignore the warning.

In IE you can see list of "Trusted Root Certification Authorities" in Tools->Internet Options->Content-Publishers tab.

You can upload SAP Root Certifcate to Trusted Publishers and IE will stop complaining.

Hope This Help$,

Slava

Edited by: Slava Plyushchikov on Nov 6, 2008 3:56 PM

[Former Member]

I addition to my post:

You may download "SAP Server CA Certificate" from here to install it to your IE:

https://service.sap.com/tcsrootcert

Regards,

Slava

[former_member188065]

Any hint where to find the tcsrootcert?

The url has "expired" and there is no redirection to the new location

[former_member188065]

Found it here:

Root Certificates | SAP Support Portal

https://support.sap.com/support-programs-services/services/trust-center/download/root-certificates.h...

To install just add ist to Trusted roots (instead of letting windows choose the cert store automatically)