About Logon Ticket Import on multiple EP instance

[Former Member]

Hi Experts,

As the term of Login Ticket will expire on 2009/11/12, I have to update it soon.

Though I did it on QAS, but PRD is differences in terms of multiple EP instance.

Could you give me advice?

(QAS is single, but PRD is cluster& it has Central & AP instance)

[Question]

1. about verify.der download on EP

->Do I have to download every instance?

ex) 2 times ->Central , AP

I think that just 1 time is OK, but I don't have confident

2.about strustsso2 on ECC

->Do I have to update every instance?

On QAS , I did it just 1 time to System PSE.

But on PRD it has 2 instance, I don't have confident.

Thank you in advance.

BR

Toshi

URL that I refer

<http://help.sap.com/saphelp_nw70/helpdata/JA/75/c80b424c6cc717e10000000a155106/frameset.htm>

[Former Member]

Hi Toshi,

Please find the procedure to create a new SSO certificate and upload it into SAP system.

I am assuming that you had already generate the certificate in your Portal system.

Login to portal as administrator and browse to to System AdministratoràSystem Configuration-àKeystore Administration

-Click on u2018Download verify.der Fileu2019 button and save this zip file to local machine.

Here are the steps to upload the certificate in SAP system.

1-Logon into R/3 System and go to the transaction STRUSSSO2.

2-Choose certificateàimport from the top menu . Browse to verify.der and select the Binary Format.

3-Click on OK icon to add the certificate. Newly added certificate can be seen in following screen.

4-Add the certificate in the Access Control List by choosing EditàCertificate in ACL from top menu.

5-Following screen will ask for SID and client details. Enter portal system id as SID and portal client number as client. Generally portal client number will be u2018000u2019.

6 Choose EditàAdd Certificate from top menu to add this certificate to the system PSE.

Hope this helps..

Regards,

Sandip Parida

[sunny_pahuja2]

Hi,

> [Question]

> 1. about verify.der download on EP

> ->Do I have to download every instance?

> ex) 2 times ->Central , AP

> I think that just 1 time is OK, but I don't have confident

>

Yes.

> 2.about strustsso2 on ECC

> ->Do I have to update every instance?

> On QAS , I did it just 1 time to System PSE.

> But on PRD it has 2 instance, I don't have confident.

>

In strustsso2, there will be pse for all your app server. So, you have to just upload certificate from your portal system in strustsso2 of CI.

Thanks

Sunny