How to Install SSL Certificates in SAP Web Application

Step 1: Downloading and preparing certificate for installation:

Copy the SSL Certificate from —–BEGIN CERTIFICATE—– to —–END CERTIFICATE—–with no extra lines or spaces or characters and paste the contents of certificate in a text editor and save as .txt file.

Copy the contents of your Root and Intermediate CA into a Notepad file and save it as separate files with a .txt extension.

Step 2: Installing your SSL certificate:

Note: For a PSE that is used by multiple application servers, you only have to import the response into one of the PSEs. The PSE is then redistributed to all of the application servers.

For example, for those application servers that use a system-wide SSL server PSE, you only need to import the certificate request response into the SSL server PSE on one of the servers.

1. From Trust Manager expand the SSL server PSE node.
2. Double click to select the appropriate application server. The application server's SSL server PSE is displayed in the PSE maintenance section.
3. In the PSE maintenance section, choose Import Cert. Response.
4. Paste the contents of your SSL Certificate .txt into the dialog's text box or click Load local file to specify the location and path of your saved SSL Certificate .crt.
5. Your SSL Certificate is imported into the server's SSL server PSE, displayed in the PSE maintenance section.
6. You can view the certificate by selecting it with a double click. The certificate information is then shown in the certificate maintenance section.
7. Save the data.

Note: Depending on where how you set up your system you will import your Intermediate CA and Root Certificate in one of these location steps.

Step 2a. Importing the CA's Root Certificate if it is Located in the Certificate Database

1. In the certificate section, choose Import certificate.
2. The Import Certificate dialog appears.
3. Select the Database tabstrip.
4. Select the certificate from the certificate database and choose Enter. The certificate appears in the certificate section.
5. Choose Add to Certificate List.
6. The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
7. Save the data.

Step 2b. Importing the CA's Root Certificate if it is Located in the File System

1. In the certificate section, choose Import certificate.
2. The Import Certificate dialog appears.
3. Enter the corresponding file name from the file system.
4. Select the certificate's file format: Base 64.
5. Choose Enter. The certificate appears in the certificate maintenance section.
6. Choose Add to Certificate List. The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
7. Save the data.