Tuesday, 14 March 2023

What to Setup SSL Certificate Signed in ECC/S4HANA STRUSTSSO2 ?

When you create a new Certificate using the Transaction Code STRUSTSSO2, 

1: navigate to "SSL Server Standard" and see the certificate status like (Self-Signed or Signed by your CA).

If the certificate status is "Self Signed" this certificate needs to be signed by the Certified Authority (CA).












Here's the procedure to get an SSL Certificate Signed by your (CA)

a: Click the Button – “Create Certificate Request” ->  “Save as Local File”. Save the txt file as <request>.txt.

b: Send the saved Certificate file to the Certified Authority to get the file certified. (Example: In our place the networking team certifies the file using IIS web server, It may be different at each organization).

c: Once you receive the Certified (<signed-cer>.cer) file from your Certified Authority [in Base64 format].  Open the .cer file, open the “Certification Path” Tab, Select the Root Certificate, Click on “View Cerificate” button -> Click on “Details” tab and click on “Copy to File” Button and select the Export file format as “Base-64 encoded X.509(.CER)”, Save the file as <root-cer>.cer.


Now we can import the signed certificate using 

Transaction Code STRUSTSSO2 -> SSL Server Standard with the following procedure.

STRUSTSSO2 -> SSL Server Standard – Click on  “Import Cert Response”. In the text editor Copy & Paste the contents from <root-cer>.cer followed by <signed-cer>.cer  


And click on save button, Now you will have the CA signed certificate installed.