cancel
Showing results for 
Search instead for 
Did you mean: 

SSL Certificate Update for SAP Web Client (10PL02(HANA))

yuyukyi
Participant
0 Kudos

Hi All,

I would like to deploy domain certs for sap web client. Please advise what sap notes to refers. I tried to find in the sap portal but I cannot find any notes which is related to this. We would like to access SAP web client via public access. Thanks

Accepted Solutions (1)

Accepted Solutions (1)

kothandaraman_nagarajan
Active Contributor
0 Kudos

Hi,

During web client installation, you can install third party SSL certificate. Refer Administration guide for more information.

Regards,

Nagarajan

yuyukyi
Participant
0 Kudos

Hi Nagaranjan K,

thanks for your reply. I tried to follow administration guide to update ssl cert for external access with domain name. Howerver, i still getting the error and webclient cert is still pointing to self signed cert.Kindly refer as screenshot the steps that I have followed. Thanks

Answers (2)

Answers (2)

michael_esser
Member
0 Kudos

First update your sld certificate

  1. /usr/sap/SAPBusinessOne/Common/SLD/tools/update_https_certificate.sh

Then you can do it this way ( webclient installer will copy certificate from sld )

  1. /usr/sap/SAPBusinessOne/setup # uninstall > webclient
  2. /usr/sap/installer/Packages.Linux/ServerComponents/install # webclient
  3. vi /usr/sap/SAPBusinessOne/WebClient/env.sh # edit port here and in ControlCenter as it will be occupied in step 2

Or this way ( update webclient to use sld certificate )

  1. /usr/sap/SAPBusinessOne/Common/sapjvm_8/jre/bin/keytool -list -storetype pkcs12 -keystore /usr/sap/SAPBusinessOne/Common/tomcat/cert/https.p12 -v # check your alias
  2. /usr/sap/SAPBusinessOne/Common/jre/bin/java -jar /usr/sap/SAPBusinessOne/Common/support/bin/encryptionTool.jar -e "lala" # encrypt your sld certificate password
  3. vi /usr/sap/SAPBusinessOne/WebClient/env.sh # update WEBCLIENT_TLS_KEYSTORE, WEBCLIENT_TLS_PASSWORD_ENCYPTED, WEBCLIENT_TLS_KEY_ALIAS

Then systemctl restart sapb1servertools & webclient accordingly.

HTH!

yuyukyi
Participant
0 Kudos

thanks a lot for your reply. I will try it and update you again.

yuyukyi
Participant
0 Kudos

Hi Michael Esser,

Thanks a lot for help. It works.

kothandaraman_nagarajan
Active Contributor
0 Kudos

Have you restarted the server after installing the SSL certificate?

yuyukyi
Participant
0 Kudos

Yes, i did restarted but it is still pointing hana server self signed cert. the new cert still not reflected. Is there any sap notes i can follow for sslcert update for web client? Thanks