How to Implement CA Root

[Former Member]

We have a great deal of external web services which we call from SAP via HTTPS. As consumers of the service, each time their certificate expires we have to wait until the provider renews it and re-import it. If we do not do this and the certificate expires we get SSL errors.

But surely SAP supports the idea of a CA Root? In that case we would only need to manage the certificate of the CA Roots (e.g. Verisign, Thawte etc.) and all signed certificates would be trusted. Is there a guide on how to implement this?

[Jozs]

There is no special guide as the procedure is the same you are currently following. (Import the CA Root into the TrustedCAs-view.)

[Former Member]

I thought it must be that easy. I assume then that I don't need to import individual certificates which are signed by the CA and these can then be deleted? I assume that NW will then download the new ones as the old ones expire much like a browser does?

[Former Member]

We don't have a "TrustedCAs-view" in STRUSTSSO2. We have various folders named by us. Based on Samuli's link I understand we just import it and categorize it as "Root CA"?