cancel
Showing results for 
Search instead for 
Did you mean: 

Help with Certificate - Please!

Former Member
0 Kudos

Dear all experts,

We had a certificate request (CSR) created and got a certificate from Verisign and had it installed correctly. This eas in the Visual admin in the XI box (PI 2004S Sp10).

Now there is a twist in the story.

I went on to document the procedure and by mistake deleted the key pair against which the certificate was issued and installed. I am not sure if I made a big mistake. How do I get them back? Will the system work without those key pair (name and name.cert for instance).

I need to get this fixed with in a day.

Could you please help?

Thanks a lot in advance and I will award points for any helpful reply.

Cherry.

Accepted Solutions (0)

Answers (4)

Answers (4)

Former Member
0 Kudos

We got the certificate re-issued.

Thanks for all your help.

Former Member
0 Kudos
Former Member
0 Kudos

Hi,

see below FAQs

Q: How to install a server-side certificate?

A: To install and enable a server-side certificate, you have to either load the

certificate or generate one using the Keystore Service panel in Visual

Administrator. Then go to SSL Service runtime panel and select the SSL socket

for which you want to enable the certificate. From the Certificates subtab click

the “Add” button and choose your certificate from the list of available ones. Note

that when adding a new certificate the old one that was enabled is replaced.

Q: How to generate a certificate-sending request?

A: You can generate a certificate-sending request (CSR) for a key in SAP J2EE

Engine keystore using the “Generate CSR” function in Keystore runtime panel of

SAP J2EE Engine Visual Administrator.

Q: How to self-sign a certificate?

A: You must specify that a certificate is self-signed when creating it. Use the

“Certificate Generation” tab of Keystore Service runtime panel in SAP J2EE

Engine Visual Administrator. Specify the required properties of the certificate. To

generate a self-signed certificate, do not specify any alias in the “CA Key Alias”

drop-down menu.

SAP J2EE Engine does not support self-sign on already existing certificates.

For more information about how to generate certificates, see Administration

Manual -> Services Administration Reference -> Keystore Service ->

Certificate Generation section.

Q: How to load a certificate?

A: You can load an existing certificate either using Keystore Service runtime panel

in Visual Administrator or using the LOAD shell command from the KEYSTORE

command group.

For more information about the Keystore Service shell commands, see

Administration Manual -> Shell Commands Reference.

For more information about the Keystore Service runtime functions, see

Administration Manual -> Services Administration Reference -> Keystore Service

section.

Q: How to store a certificate/key?

A: You can store a certificate either using Keystore service runtime panel in Visual

Administrator or using the STORE shell command from the KEYSTORE

command group. Alternatively you can use the “Write” function in Keystore

service runtime panel in Visual Administrator or the WRITE shell command from

KEYSTORE command group to store certificates and keys in ASCII format. If

using Visual Administrator, the default store is ../admin.

For more information about the Keystore Service shell commands, see

Administration Manual -> Shell Commands Reference.

For more information about the Keystore Service runtime functions, see

Administration Manual -> Services Administration Reference -> Keystore Service

section.

Regards

Chilla..

Former Member
0 Kudos
Former Member
0 Kudos

Chilla:

Thank you for the timely. We have XI (PI 7.0) sp10 part of Netweaver 2004s. The visual admin looks and feels different. Please let me know if I could use what is suggested in the first doc you sent so I can try to match my version.

Thanks again.