Skip to Content
avatar image
Former Member

Connect SFTP server to SAP -PI via RSA keys

Hi Experts,

This will be inbound interface --- > Bank SFTP server --- > PI ---- > SAP - ECC

We need to use the RSA keys for the authentication purpose to estabhish the SSH connection with Bank SFTP server from PI .

Can PI create the keys and share the public key with Bank SFTP server or is that something Bank server has to create the keys and share it with PI team ?

I was referring link http://wiki.scn.sap.com/wiki/display/XI/Generating+SSH+Keys+for+SFTP+Adapters+-+Type+2

Please confirm my understanding on this.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

2 Answers

  • Oct 28, 2013 at 10:51 AM

    Hi Anitha,

    In your scenario the PI will do a poll in the Bank SFTP server therefore the PI will need the bank public key in order to can do the poll an retrieve the files.

    Regards.

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Anitha,

      Did you mean that if PI team creates RSA keys in PI NWA and using putty generator and if we share the public key to Bank then Bank cannot connect to PI system ?

      No, I dont want to say that. PI can't act like SFTP server. With Sender SFTP, the PI will do a poll to a external SFTP server to get a file/s, and with SFTP receiver, PI will do a connection to a SFTP server to to put the file/s.

      If the SFTP server is your company responsability, your basis team must create a public Key in order to let the BANK and the PI to connect to that SFTP server.

      Regards.

  • avatar image
    Former Member
    Oct 28, 2013 at 12:57 PM

    Hi Inaki ,

    Bank is a 3rd party server here, so this means that either way it is going to work even if it is Inbound interface i.e Bank --- > PI ---- > SAP-ECC

    ----- PI can creates the keys and share it with Bank

    ------ Or Bank can create the keys and share it with PI .

    Please confirm ??

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Anitha,

      Bank is a 3rd party server here, so this means that either way it is going to work even if it is Inbound interface i.e Bank --- > PI ---- > SAP-ECC

      As far i understand your scenarios , it seems that the SFTP server maintenance belongs to the Bank infrastructure, isn't it?. Therefore the bank should to create the public key, host, port and the path for PI connectivity.

      Regards.