C4C and CRM Integration using HCI Certificate-based Authentication

[rajiv_juarbal]

Hi Experts,

We are integrating C4C and CRM using HCI certificate-based authentication. We have performed all the necessary configurations in HCI (iFlow setup to use certificate based, certificates imported in keystore), C4C, and CRM-onprem (SSL setup, imported/exported the needed certificates both in SSL Server and Client PSEs) for certificate-based authentication but we're still facing 403-Forbidden error, both for C4C to CRM and CRM to C4C message flows.

For CRM to C4C, we try to do a connection test in SM59 and we already set to not use user logon but the below window still prompts.

Proving the S-USER authorized in HCI tenant, same error we get 403-Forbidden. We're thinking that the above window should not show if we set the logon procedure to use certificate, please advice what other configurations should we set in CRM on-premise side.

Thanks in advance.

Regards,

Rajiv

[rajiv_juarbal]

In addition, now I just tested again, the ping reached HCI already but I'm not sure if it used the certificate as I was asked with a logon user, where I used the SUSER authorized in our HCI tenant.

Furthermore, for Inbound communication using the service IDOC, is the following configuration correct?

Regards,

Rajiv

[chandansb]

Rajiv,

Please refer the below screenshots specifying the configurations maintained in ECC.

From SM59:

Maintained above is the name of folder structure where all the relevant certificates are imported into STRUST. Also check if you ain't missing any certificates. (Global Root Certificates, CyberTrust certificates, HCI relevant Baltimore and other vertificates)

Kindly verify if you following same.

Hope this helps.

Regards,

Chandan