SSL Certificate import into SAP PO

[Former Member]

Hi Experts,

In One of my current scenarios, i need to connect HTTPS URL of Bank server.

We had generated CSR request and shared it to bank and bank provided us back the certificate with CA signed.

Along with Root and Shared Certificate chain also been provided.

We have imported all the Certificates (.cer) format into Trusted CAs as individual entry.

Our own private key also available in Trusted CAs level.

Requirement:

Need to connect Client's server via HTTPS (SSL) and use private key for signing .

Query:

Do we need to collate all the Certificates and import it? Root/Shared and Server certificate.

If so, how to do the same? Manually copy the certificate details and import it. Kindly confirm.

Best Regards,

Suresh S

[former_member232543 · Accepted solution]

Hi Suresh,

If https service provider is bank , you must import all the certificates into TrustedCAs.

You may have to use .crt format.

regards,

Bekir

[Former Member · Accepted solution]

Hi Manoj and Bekir,

Steps done so far:

1. We have given CN name to bank and bank had given reference no.

2. CSR has been generated based on that reference no. and shared to Bank.

3. Bank signed the certificate with Certificate Authority (CA) and shared Root , Shared and Server Certificates.

4. We have imported Root, Shared and Server Certificate individually (.cer) format into Trusted CA's keystore.

5. Private key associated with this certificate is used for signing

Is that above procedure correct. Bank didn't share any separate Certificate apart from this.

Please confirm if it is suffice to hit the bank's https server.

Best Regards,

Suresh S

[manoj_khavatkopp · Accepted solution]

4. We have imported Root, Shared and Server Certificate individually (.cer) format into Trusted CA's keystore.

How did u import these ? Using "IMPORT ENTRY" Or "Import CSR response".

if its import CSR Response then this is fine , i guess you can now try to connect to the bank server.

Br,

Manoj

[Former Member · Accepted solution]

Hi Manoj,

Thank you for your response...

We have imported using import Entry option and not via CSR response.,

Since import CSR response is available only under ICM_SSL_SID (keystore)

Do we need to import into Trusted CAs as import CSR response?

Else,

Do we need to import CSR response into ICM_SSL_SID (keystore) ???

please confirm. thank you!!

Best Regards,

Suresh S

[manoj_khavatkopp · Accepted solution]

Suresh,

Usually what i do is create a private key the :Generate CSR " by selecting the private key , and once you get the CSR response then import those using "Import CSR " .

this can be done in TrusetdCA or ICM or any view , this is not view dependent.

br,

Manoj

[Former Member · Accepted solution]

Hi Manoj,

Many thanks for your response.

Best Regards,

Suresh S

[manoj_khavatkopp · Accepted solution]

Please close the thread if your query is answered!.

[manoj_khavatkopp]

I hope you have selected your Private key and used "Generaet CSR " once bank has signed and provided then you need to Private key then use "Import CSR response " then import in the same sequence which they have provided.