De-activate HTTP & run PI on HTTPS only

[Former Member]

Hi All,

Our security experts have told only to use HTTPS port in SAP-PI and stop using HTTP service in all links in SAP-PI including IR/ID.

So for doing this we have to stop HTTP in t.code SMICM & in SICF.

Can someone guide me what will be the impact & places BASIS team need to fix use of only HTTPS? And is it realy possible to run PI without HTTP active.

Presently I am checking all places & t.codes all are opening in HTTP in SAP-PI & SAP-ECC/BW/SOLMAN/CLM/SRM relates to SAP-PI java engine related stuff.

And any suggestion on points we need to take care?

Regards

[Former Member · Accepted solution]

Hallo,

How-to for AS ABAP:

Note 510007 - Setting up SSL on Web Application Server ABAP

General overview/recommendations:

Note 1536783 - SAP SECURITY RECOMMENDATIONS - PROTECTING JAVA- AND ABAP BAS

I guess in SICF you would only need to change the top-most parent node to HTTPS because all other services usually use that as the default. However, you can also configure individual SICF services for HTTPS.

Transactions can be enforced to use HTTPS by maintaining them in SE80 and settings HTTPS to X under default values.

Regards,

THomas.

[dileepkrc307]

Dear sir,

Sir earlier PI server Url changes from Http to Https,now we are triggering the data from S4Hana but data is not coming to Pi,in S4Hana it shows SYSTEM ERROR

Please provide valuable information sir

Regards,

Dileep