Entrust Certificate Services Support Knowledge Base

Audience: General
Last Modified: 2008-09-30 13:10:11.0

TN 7599 - Installation of SSL Certificate into SAP Web Application Server 6.10+

Entrust will send you a certificate request response that contains the signed public-key certificate for the application server. Once you have received this response, import it into the corresponding PSE.

For a PSE that is used by multiple application servers, you only have to import the response into one of the PSEs. The PSE is then redistributed to all of the application servers.

For example, for those application servers that use a system-wide SSL server PSE, you only need to import the certificate request response into the SSL server PSE on one of the servers.

Prerequisites

The certificate request response contains either the signed public-key certificate in PEM format and the issuing CA's root certificate exists in the server's certificate store, or the response adheres to the PKCS#7 certificate chain format.

You have access to the certificate request response. For example, it exists as a file in the file system.

Procedure

From the Trust Manager screen:

1. Expand the SSL server PSE node.
2. For each application server that is to receive a signed certificate:
   1. Select the application server with a double click. The application server's SSL server PSE is displayed in the PSE maintenance section.
   2. In the PSE maintenance section, choose Import Cert. Response. The dialog for the certificate request response appears.
   3. Insert the contents of the certificate request response into the dialog's text box (using Paste) or select the response from the file system by using Load local file. The signed public-key certificate is imported into the server's SSL server PSE, which is displayed in the PSE maintenance section. You can view the certificate by selecting it with a double click. The certificate information is then shown in the certificate maintenance section.

Save the data.

Importing the CA's root certificate if it is located in the Certificate Database

1. In the certificate section, choose Import certificate.
   The Import Certificate dialog appears.
2. Select the Database tabstrip.
3. Select the certificate from the certificate database and choose Enter.
   The certificate appears in the certificate section.
4. Choose Add to Certificate List.
   The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
5. Save the data.

Importing the CA's root certificate if it is located in the File System.

1. In the certificate section, choose Import certificate.
   The Import Certificate dialog appears.
2. Enter the corresponding file name from the file system.
3. Select the certificate's file format.

If you are not sure which format to select, open the certificate in a text browser that does not use formatting, for example, Notepad. If the contents are readable (although encoded), then the format is Base 64. Choose Enter.

The certificate appears in the certificate maintenance section.

4. Choose Add to Certificate List.
   The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
5. Save the data.

Importing the CA's root certificate if it is located in Different PSE.

1. Expand the node for the PSE that contains the certificate and select one of the application servers with a double click.
   The PSE and its certificate list appear in the PSE maintenance section.
2. Select the certificate with a double click.
   The certificate appears in the certificate maintenance section.
3. Select one of the application servers under the SSL server PSE node with a double click.
4. Choose Add to Certificate List.
   The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
5. Save the data.

Affected Products:

• Entrust Certificate Services Enhanced Service Account Version Not Applicable Language Not Applicable Platform Not Applicable