Self Signed Certificate in SAP PI

[Former Member]

Dear All,

Does anyone know how to create self signed certificate in SAP PI (NWA) with below key usage parameters? What is the process?

Certificate extensions      :

   [critical]

         KeyUsage: digitalSignature | keyEncipherment | dataEncipherment

Thanks,

Ankit

[former_member204100 · Accepted solution]

Hi Ankit,

you can use the OpenSSL tool to generate any key pairs and self signed certificates.

https://www.openssl.org/

This is a very professional toolkit which provides a lot of possibilities.

If you prefer not to use command line based tools, but rather some GUI based product than you can use for example the Keystore Explorer tool:

KeyStore Explorer

I hope this helps.

Best Regards,

Viktor

[Former Member]

With the help of Keystore Explorer, we can generate self signed certificate.

[iaki_vila]

Hi Ankit,

If your PI is a dual stack, this wiki can help you STRUSTSSO2 - Setup SSL Certificate Signed in ECC - Basis Corner - SCN Wiki

Regards.

[Former Member]

Thanks for the response.

The link provided by you talks about the sending the self signed certificate to CA for signing.

I want to create self signed certificate with below key usage parameters. Anyone aware, please let me know.

Certificate extensions      :

   [critical]

         KeyUsage: digitalSignature | keyEncipherment | dataEncipherment

Regards,

Ankit

[Harish]

Hi Ankit,

Please refer the below help page

Creating a PSE for the Server Using SAPGENPSE - Transport Layer Security on SAP NetWeaver AS for ABA...

AFAIK - the key generated from NWA are already self-signed, and if you want to have CA signed then you will send to to CA. Please refer the below page to generate the key from NWA

Creating a Key Pair and Public-Key Certificate and Signing It - System Security - SAP Library

regards,

Harish

[Former Member]

Any pointers please?