Use X.509 Certificate for Client Authentication ????

[Former Member]

I have this option, in the FTPS adapter

Use X.509 Certificate for Client Authentication

sap help says

"Set this indicator if the adapter, in contrast to the FTP server, is to use X.509 certificate and public-key cryptography to authenticate itself. The corresponding key/certificate pair must previously be saved in a keystore view of the J2EE server by using the Visual Administrator."

What does this exactly mean?

My assumption is: Client Authentication is where the client presents its certificate to XI and XI authenticates it by checking if its in the list of its TrustedCA's is this right?

but the sap help extract doesnt seem to be complying with this.

please clarify

[henrique_pinto · Accepted solution]

XI's file adapter in FTP mode is never an FTP server; it's always an FTP client, either connecting to the server and downloading files (sender) or connecting to the server and uploading files (receiver).

So, Client authentication for FTPS means that XI will authenticate itself.

You need a private key in the KeyStore of J2EE (load it through visual admin).

Regards,

Henrique.

[Former Member · Accepted solution]

Oh ok just what i was missing here. Thanks a lot Henrique.

[Former Member · Accepted solution]

But why is this optional the XI Server has to authenticate itself all the times isnt it?

[henrique_pinto · Accepted solution]

Not necessarily it will be a FTPS connection (FTP + SSL).

It can be a normal FTP connection with user/pass authentication.

Regards,

Henrique.

[Former Member · Accepted solution]

Do i have to open a separate FTPS port like for HTTPS?

[Former Member]

answered

[Former Member]

Follow up