SSL Server PSE

[Former Member]

Hi,

We are in the process of renewing the SSA certificate for our E-rec system.For this how can I generate the SSL Server PSE which needs to be send to CA?I could't find any 'Generate' Option in STRUST.Whether I want to go with the replace option? Or whether I can go directly to 'Create Certificate Request' option and send that to CA?..

Thanks & Regards,

Sam

[achim_hauck2]

Hi,

exactly, you have to send a Certificate Request to the CA.

kr, achim

ps: be sure, that you choose the SSL-Server PSE before creating the request.

Message was edited by: Achim Hauck

[Former Member]

Dear Achim,

We have received the SSL certificate from CA,Please let me know the procedure for importing it to the system.

Regards

Sam

[achim_hauck2]

ETSG Team,

go to transaction STRUSTSSO2, open the SSL-Server node in the left navigation tree, doubleclick the green entry.

click "Import Cert. response" in the top area.

This prerequisites, that you have created the "cert request" before in the same way <b>and import the answer to the SAME request<b> (that means, if you meanwhile have created another request, the anser won't fit to the request.

kr, achim

[Former Member]

Dear Achim,

I tried that,but iam getting the following message

"CA certificate missing in database (or is not unique)"

How to resolve this?

Thanks & Regards,

Sam

[achim_hauck2]

ETSG Team,

you have to import the CA-certs in the SAP database first (I think you don't use already known CAs like Verisign, etc.)

this can be done:

- organize the cert(s) of the CA

- start STRUSTSSO2

- import the cert(s) in the middle window ("Import Cert.")

- export the cert(s) in the middle window ("Export Cert.") and choose the Database tab

- create an database entry for each CA cert.

kr, achim

[Former Member]

Hi Sam,

The below link might be of help

http://help.sap.com/saphelp_nw04/helpdata/en/db/1f1740198d8f5ce10000000a155106/frameset.htm

Regards

Srikishan