SAP Basis Basics Part 34

Renew SSL certificate

Since the SSL certificates are now only valid for 1 year (thanks Apple :( ) and therefore have to be renewed every year, the easiest way is to simply create a new certificate response (this makes the CA) every year to the certificate request (CSR) with which the certificate was created.

This certificate response is then imported into the certificate request.

ABAP:

1.) TA STRUST
2.) Click on the glasses/pencil icon at the top to switch to change mode
3.) Double click on the ssl server standard certificate, then on “Import certificate response”
4.) The certificate response comes into the window + the root CAs that are required for the certificate chain.
5.) Then click ok and save the PSE.

JAVA:

1.) open the NWA.
2.) go to Certificates and Keys: Key Storage
3.) click on you private key certificate
4.) click on “Import CSR Response”
5.) add the response and import it.
6.) As a last step, click on “Export View to PSE” to write it from the NWA to the PSE on the file system. Otherwise it will be gone after rebooting the system.