SSL using X509 cerificates to XI via SAP Web Dispatcher

[Former Member]

Hello

We are a bit bogged down try to make this thing happen.

What we are trying to do is to set up SSL from a Mobile PDA to a Web Dispatcher located in a DMZ that passes messages to our XI system (50001 https J2EE port).The mobile device passes on the users credentials using certificates when the messages are being sent to the XI system.

Does anyone have any experience of this type of configuration? And what are the steps involved

Colum

[Former Member]

Hi Colum -

In addition to info provided by Sam, you'll need to consider whether you're going to configure End-to-End SSL via the web dispatcher or terminate the SSL connection at the dispatcher and reinitiate either another SSL connection or non-SSL connection to the XI server - your network security requirements will dicate this.

More info provided here: <a href="http://help.sap.com/saphelp_nw04/helpdata/en/d8/a922d7f45f11d5996e00508b5d5211/frameset.htm">Web Dispatcher and SSL</a>

Regards,

Jin

[sam_raju]

Hi Colum,

Refer to the XI Security documentation at the following links

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/content.htm">HTTP and SSL config in XI</a>

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/a8/d9d53a9aa9e933e10000000a114084/frameset.htm">Configuring the System for Using X.509 Client Certificates</a>

Refer to this How-to-Guide <a href="http://service.sap.com/~form/sapnet?_SHORTKEY=01200252310000071155&_SCENARIO=01100035870000000202&_OBJECT=011000358700002767992005E">How to configure message level security in XI 3.0</a> which can be of some help to you.

Also refer to "SAP Security Guide XI" at service market place.

Regards,

Sam Raju