Question Re: HTTPS external und internal to SAP PI - certificate configuration under STRUSTSSO2 in Technology Q&A https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768586#M3934544 <HTML><HEAD></HEAD><BODY><P>Hello Jörg,</P><P></P><P>many thanks for answer.</P><P>The problem is, all SAP PI incoming connections terminates on the ICM (ABAP). So the HTTPS configuration has to be done in transaction STRUSTSSO2.</P><P></P><P>Regards,</P><P></P><P>Jochen</P></BODY></HTML> Tue, 02 Dec 2014 12:27:24 GMT Former Member 2014-12-02T12:27:24Z HTTPS external und internal to SAP PI - certificate configuration under STRUSTSSO2 https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaq-p/10768584 <HTML><HEAD></HEAD><BODY><P>Hello Colleagues,</P><P></P><P>we have following problem.</P><P></P><P>We have company internal and company external HTTPS interfaces to our SAP PI system.</P><P></P><P>For HTTPS in Transaction STRUSTSSO2 under "SSL server Standard" we have to trust (certificate sign request "CSR") the own certificate.</P><P></P><P>Currently, the ssl own certificate is trusted by our own internal CA.</P><P></P><P>Now the problem. For external HTTPS interfaces to our SAP PI system we need to have a own certificate trusted by an external CA like VeriSign.</P><P></P><P>How we are able to configure this, internal and external trusted sign under transaction STRUSTSSO2 for SSL server Standard?</P><P></P><P>Many thanks in advance!</P><P></P><P>Regards,</P><P></P><P>Jochen Schertel</P></BODY></HTML> Tue, 02 Dec 2014 09:41:44 GMT https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaq-p/10768584 Former Member 2014-12-02T09:41:44Z Re: HTTPS external und internal to SAP PI - certificate configuration under STRUSTSSO2 https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768585#M3934543 <HTML><HEAD></HEAD><BODY><P>Hello Jochen,</P><P></P><P>is this a PI connection, SOAP adapter, for example? Or do you do plain HTTP? I'd recommend you to go for a SOAP adapter and use keystore in NWA. You'll have a lot more freedom and options there.</P><P></P><P>Regards,</P><P>Jörg</P></BODY></HTML> Tue, 02 Dec 2014 10:13:23 GMT https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768585#M3934543 Former Member 2014-12-02T10:13:23Z Re: HTTPS external und internal to SAP PI - certificate configuration under STRUSTSSO2 https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768586#M3934544 <HTML><HEAD></HEAD><BODY><P>Hello Jörg,</P><P></P><P>many thanks for answer.</P><P>The problem is, all SAP PI incoming connections terminates on the ICM (ABAP). So the HTTPS configuration has to be done in transaction STRUSTSSO2.</P><P></P><P>Regards,</P><P></P><P>Jochen</P></BODY></HTML> Tue, 02 Dec 2014 12:27:24 GMT https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768586#M3934544 Former Member 2014-12-02T12:27:24Z Re: HTTPS external und internal to SAP PI - certificate configuration under STRUSTSSO2 https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768587#M3934545 <HTML><HEAD></HEAD><BODY><P>Hello Jochen,</P><P></P><P>you may be right if that communication is to the ABAP stack directly. However, if you send messages to the AS Java, you have to do the configuration in NWA. See here:</P><P><A href="http://help.sap.com/saphelp_nw74/helpdata/en/4a/015cc68d863132e10000000a421937/content.htm?frameset=/en/4a/0189458d863132e10000000a421937/frameset.htm&amp;current_toc=/en/cd/a3937849b043509786c5b42171e5d3/plain.htm&amp;node_id=146&amp;show_children=false" title="http://help.sap.com/saphelp_nw74/helpdata/en/4a/015cc68d863132e10000000a421937/content.htm?frameset=/en/4a/0189458d863132e10000000a421937/frameset.htm&amp;current_toc=/en/cd/a3937849b043509786c5b42171e5d3/plain.htm&amp;node_id=146&amp;show_children=false">Configuring the Use of SSL on the AS Java - Network and Transport Layer Security - SAP Library</A></P><P>In this case, all configuration in ABAP stack will have no effect and is not required.</P><P></P><P>Regards,</P><P>Jörg</P></BODY></HTML> Tue, 02 Dec 2014 12:43:10 GMT https://community.sap.com/t5/technology-q-a/https-external-und-internal-to-sap-pi-certificate-configuration-under/qaa-p/10768587#M3934545 Former Member 2014-12-02T12:43:10Z