how to enable HTTPS service for SAP MII12.1?

[Former Member]

i've been trying to enable the https service for our newly installed MII system 12.1. do not know the exact procedure(do we have to download a certificate from market place?)

can anybody help?

[Former Member]

Hi Nikhil,

You would configure HTTPS for Netweaver and MII since sits on Netweaver becomes HTTPS too.

To configure https, check the link

Configuring the Use of SSL on the AS Java - Network and Transport Layer Security - SAP Library

you could also check

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/705ba11c-2f35-2b10-2a93-9e9a86...

Regards

Tufale Ashai.

[Former Member]

Hi Tufale,

We've been going through a lot of documents but still in vain. we have installed Cryptographic Library and are trying to generate our own signed certificate. No document gives the exact step by step procedure for this small activity we've been trying for a month now!

Thanks for your response though

[Former Member]

Hi Nikhil,

  You are welcome. So if I understand your query correctly, the HTTPS configuration is already done in SAP MNC's ICM . You have installed the libraries too. Now all you need to do is install the certificates.

Here's how I did it for my machine.

Point of reference: Configuring the SSL Key Pair and Trusted X.509 Certificates - Network and Transport Layer Securit...

Create a new certificate::

1.  Go to Certificates and Keys sections in NWA (NWA -> Configuration Management -> Security -> Certificates and Keys) and select the “ICM_SSL_<instance_id>” keystore view. Remove the ssl-credentials and ssl-credentials-cert from the “Key Storage View Details” section.

2.Now, click "Create". On the first page of the wizard enter your fully qualified hostname as the "Entry Name". The fully qualified hostname depends on whether your CPU has a static or dynamic IP address. For example, in case of static IP address, it is something like <machine_name>.ind.abc,corp, for dynamic IP it looks like <machine_name>.dhcp.ind.abc.corp. Select the “Store Certificate” checkbox and leave everything else as it is. Click “Next”

3.Repeat your fully qualified hostname as the commonName and mention you country shortname in countryName. Leave everything else as it is and click “Finish”.

You will see two entries as <your fully qualified hostname> and <your fully qualified hostname>-cert in the “Key Storage View Details” section.

Now we would have to sign the certificate::

Point of reference :: the above link and Sending the Certificate Requests to a CA (SAP Library - SAP NetWeaver by Key Capability)

1. Select <your fully qualified hostname> entry and click “Generate CSR Request”.

2. In the popup window, select File Type as “Base64 PKCS#10” and click the “Download” link.

3. Save the <your fully qualified hostname>.pem file on your machine. Open it in notepad and copy all the content.

4. depending upon the CA you choose/have you would send/paste the data there. (Step 2 of above link)

5.download/copy paste the response to you file systm . keep the extension as cert.

6.Go back Certificates and Keys window in NWA and select <your fully qualified hostname> entry from the “Key Storage View Details” and click “Import CSR Response”.

   Import Order:: 1. newly created .cer fle 2. Root certificate SAP Trust Center Service - Root Certificates

Restart the server. check for issues. follow Testing the SSL Connection - Network and Transport Layer Security - SAP Library

Hope it helps

Regarrds,

Tufale Ashai