Client certificates not passing from IISPROXY to ICM

[former_member182096]

Issue - 1: While posting https requests, the client certificates from

IISPROXY (Running on IIS DMZ server) are not being received by SAP ICM.

Issue / Scenario - 2: Customer is sending XML files using http(s) post

using digital certificates (X 509) to the DMZ – IIS Server. The

IISproxy (installed on the IIS server) routes the request accordingly

to the WebAS server (Prefix /bw). We have imported client certificates to

SAPGENPSE. Now, SAP ICM receives the IIS client certificate and logins

with a user id mapped to the IIS client certificate.

What is happening to the original client certificate coming along with

the request. Why is ICM receiving the IISproxy client certificate and

not the original client certificate?

[Former Member · Accepted solution]

Hi Srini,

please, have a look at those pages, which describe client certificates handling in exactly the same scenario:

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/f6/20e5ff18b7354eb7f700bc284552c5/frameset.htm">Certificate Login When Using SSL-enabled Proxy</a>

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/ea/301e3e6217b40be10000000a114084/frameset.htm">Configuring the Use of Client Certificates via an Intermediary Server</a>

Hope that helps!

[former_member182096 · Accepted solution]

Thank Ivaylo. We looked at these pages, but did not solve the problem. We noticed that IISproxy is sending the certificate in the http header, but SAP ICM complains 'No certificate received'. Any ideas?