Certificate based authentication SAP CRM - SCPI

[former_member621894]

Could you please help and advise how to configure certificate based authentication with SCPI in SAP CRM? What I found in the documentation https://archive.sap.com/kmuuid2/70620696-64be-3110-28a1-fbdfa47443b9/How%20to%20Configure%20SAP%20HC... it is necessary to generate in SAP CRM certificate request and then have it signed by CA. What is the procedure of signing certificate (where and what is the cost)?

[former_member621894]

I generate certificate request in STRUST of SAP CRM, then have to sign it by certifcate authority (CA) that is trusted by SCPI Load Balancer. Here I found the list of trusted CAs https://help.sap.com/viewer/368c481cd6954bdfa5d0435479fd4eaf/Cloud/en-US/4509f605e83c4c939a91b81eb3a... I have checked that in SCPI keystore have for example certificates like:

• Baltimore CyberTrust Root
• DigiCert Global Root CA
• DigiCert Global Root G2
• VeriSign Class 3 Public Primary Certification Authority - G5
• VeriSign Universal Root Certification Authority
• How do I make it signed by one of those CAs and what is the cost? Is it necessary step for certificate based authentication that is recommended in productive environments?

[former_member608139]

there are some differents points what you need check first:

- for sign you will need a certificate with the private key

- your receive side need the certificate chain in his server side application to valid your message signature

after you are shure about the certificate, you just need youse a pattern in sap PI to sign you message