PI 7.1 SOAP scenario with SSL certificate

[Former Member]

Hi Experts,

We are running with PI 7.1, one of the SOAP scenario so far configured with hard-coded "user ID & password".

So now we are planning to implement 'certificate' based authentication so looking for guide to implement this method.

Please guide me through with configuration steps to implement certificate based authentication.

Regards

Sekhar

[former_member192295 · Accepted solution]

Hi,

I have implemented successfully your requirement in one of my project. Find below link for more help on certificate configuration. Certificates need to upload through visual administrator window after that we need to enable certificates in sender & receiver agreement window meanwhile we need to enable security profile in both sender & receiver communication level.

SSL Configuration

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

SSL config pdf

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4...

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/23894238-0701-0010-40b0-a0a6d5c4...

SSL Message level security

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d024ca8e-e76e-2910-c183-8ea4ba68...

Certificate Authority

http://www.tc.umn.edu/~brams006/selfsign.html

Digital signature & document entryption

http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/frameset.htm

digital certificate configuration in xi

/people/varadharajan.krishnasamy/blog/2007/05/11/how-to-use-digital-certificates-for-signing-encrypting-messages-in-xi

[former_member200962 · Accepted solution]

I have implemented successfully your requirement in one of my project. Find below link for more help on certificate 
configuration. Certificates need to upload through visual administrator window after that we need to enable certificates in 
sender & receiver agreement window meanwhile we need to enable security profile in both sender & receiver communication 
level

Can we use the SSL implementation of 7.0 in PI7.1.......i doubt if we have VA in 7.1......the configuration now needs to be done through NetWeaver Administrator.....http://<host>:<port>/nwapi......even the links which you gave refer to 7.0......can you clarify??

Thanks,

Abhishek.

[former_member200962]

For SSL configuration in PI7.1 we may not have a ready-made document...you will have to take inputs from help.sap.com.....also the blogs for 7.0 wont be applicable here as we do not have VA in PI7.1 where you store the certificates.....now this is done in Netweaver Administration....check the below SSL related links from help:

http://help.sap.com/saphelp_nwpi71/helpdata/EN/e0/48e13a1522a441e10000000a11405a/content.htm

http://help.sap.com/saphelp_nwpi71/helpdata/en/bc/2ee9a2d023d64eac961745ea2cb503/frameset.htm

http://help.sap.com/saphelp_nwpi71/helpdata/EN/14/ef2940cbf2195de10000000a1550b0/frameset.htm

http://help.sap.com/saphelp_nwpi71/helpdata/EN/49/3d938a501a2009e10000000a42189c/content.htm

The above links also have some links embedded in them which have to be followed for SSL configuration....not mentioning them as the list will bulge (for no reason).....

Regards,

Abhishek.