Cloud Connector and Backend Trust Store adding X.509 cert

[mario_bisonti2]

Hi to everyone.

Following Configure Trust | SAP Help Portal I could activate 

"Backend Trust Store" adding X.509 certificates.

If I create a RFC connection to an On-Premise backend, which is the X.509 certificate I need to export from, I suppose, strustsso2 transaction?

"System PSE" or "SSL Server Standard" or what else?

Thanks a lot.

Mario

[MarkusTolksdorf · Accepted solution]

Hi,

Typically the root CA in the chain of the certificate in the SSL server standard PSE. 

Best regards,
Markus

[mario_bisonti2 · Accepted solution]

Did you mean the Certificate of the "Issuer Certificates"?

[MarkusTolksdorf · Accepted solution]

Yes, this is what I meant.

Best regards,
Markus

[mario_bisonti2 · Accepted solution]

BTW, if I choose the "Issuer Certificates" instead of the single backend certificate, I am trusting every backend using the same CA authority.

[MarkusTolksdorf · Accepted solution]

This is indeed how this is usually done and best practice.

Best regards,
Markus