SSL Issue

[Former Member]

Dear,

Our CRM System SSL Certificate renewal Request rose to SAP but we got replay stating that u201Ckey length isn't in accordance with the new minimum key length of 2048 Bitsu201D.

SAP Recommended to implement SAP Note: 509495 Trust manager: Generating PSEs with a key length > 512 bits

According to note just we need to change below parameters and recreate and generate PSE , If I am not wrong

sec/rsakeylengthdefault  2048

sec/dsakeylengthdefault  1024

Kindly suggest

Reagards,

Kumar

[Former Member · Accepted solution]

Hi:

The link below shows the detailed procedure,

http://help.sap.com/erp2005_ehp_03/helpdata/EN

/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

Regards

Derek

[Former Member]

Hi,

When using STRUST, re create a new SSL server certificate and choose 2048 as key length.

There is no need to change system parameters and to restart the system...

Regards,

Olivier

[Former Member]

re create a new SSL server certificate and choose 2048 as key length

Can you please suggest steps for recreation for NEW SSL Server certificate ..

Regards,

Kumar

[Former Member]

Hi,

For steps:

Go to STRUST and on the left hand pane, select the PSE type (ex. system pse) to be recreated and right click and select recreate (or similar option, i dnt remember exact word)..

This will recreate the PSE.

Regards,

Shitij

[Former Member]

STRUSTSSO2 --> System PSE or SSL Server --> Right Click --> Check, Distibute, Replace and Delete.

Right click on System PSE or SSL Server it represents all servers, is it possible to select individual ones then recreate?

Please suggest for recreate do i need to select Replace ? and System PSE or SSL Server?

Kindly suggest,

Appreciated your inputs.

Regards,

Kumar

[Former Member]

Try to understand what you want to achieve and the answer will come by itself...

[Former Member]

As we received SSL Server Certificate for an SAP Web Application Server for CI and App's from SAP.

i just want to know the procedure on how to renew SSL Certificates.

As i know the process by STRUSTSSO2 Transaction and import it but our CRM System is dual stack.

Appreciate your inputs,

[former_member185031]

Yes. Change the parameter and bounce the SAP to make it effective.

Regards,

Subhash

[Former Member]

Subhash,

Does it required bounce because Dynamically Switchable Parameters.

Kindly suggest

[former_member185031]

If it is dynamic then no need to bounce, but whenever you will bounce it will be roll back and you will have problem with PSE. So change it on RZ10 and bounce the system.

Regards,

Subhash