Patching NetWeaver 7.4 AS Java with SUM SP 16

[former_member280874]

Good day

We recently installed SAP NetWeaver 7.4 AS Java and we want to patch it. this was quite simple with older version of SUM. now with the latest SUM SP16, which is the only one available for download on the SAP marketplace at the moment otherwise i could have downloaded SUM SP13 and avoided all this issues.

To use this tool, i had to update the binaries for SAP Host Agent from version 7.20 to 7.21 patch 10 and secondly i have to configure configure SSL for SAP host Agent and this is were im stuck.

following this link: Configuring SSL for SAP Host Agent on Windows - SAP Host Agent - SAP Library

i was able to execute step 1 and 2 successfully and i have file cred_v2 and SAPSSLS.pse in the sec folder

Step 3 says:

1. Get the certificate as follows:
   1. If you do not use individually trusted certificates, send the certificate signing request to an appropriate CA. 
   2. Assuming that the CA replies to the request file with a CA-response-file which contains the signed certificate in the PKCS#7 format, you can use this file as an input for importing the signed certificate into the server PSE.

This is were im stuck, i just want to patch a AS Java system, why do i need to send CSR to a CA?

Step 4 says: Import the signed certificate into the server PSE, which certificate is this?

can someone please help me get pass this stage and pacth the system

thanks in advance

regards

Steven

[former_member189797 · Accepted solution]

Hi Steven,

Could you try running SUM with port 1128 and http protocol instead of port 1129+https protocol.

Regards,
Gaurav

[former_member280874 · Accepted solution]

Hi Gaurav, i got the screen of SUM i wanted to get, hope all goes well from now on

thanks

Steven

[former_member185239]

Dear Steven,

We have recently updated our system with SUM SP16.

- You can replace the https protocol with http protocol

- Replace the port from 1129 to 1128

http://<servername>:1128/<followed by the java url>

With Regards

Ashutosh Chaturvedi

[Former Member]

Hallo,

no need to get a CA involved.

I had the same issue a few weeks ago and documented the SSL configuration here:

This is for Unix but should work as well for Windows.

Regards

Thomas.

PS: Step 4 would be importing the signed certificate which you would get back from the CA. No need to do this if you don't get your CSR signed.