The following procedure describes how to install the certificate or certificates on your SAP BC Server.

1 Start the Certificate Toolkit. See “Starting the Certificate Toolkit” on page 12 for instructions.

2 Select Convert and Save Certificates for use with SAP Software certificates .

3 Supply the following information:

Select the file that contains the CA's response

The directory path and name of the file that contains the response from the CA.

4 Click Next .

5 Enter information in the following fields:

If the CA's response contains their certificate as well, you will see these fields:

Note: The toolkit automatically converts certificates that are in a non-DER format to DER format.

Making the Certificates Available to Your SAP BC Server

For this parameter… Specify…

Select the file that contains the CA's response

The directory path and name of the file that contains the

response from the CA.

For this parameter… Specify…

Enter certificate file name Name of the file to which you want the toolkit to write the converted version of your server's certificate, for example: MyServerCert. The toolkit automatically appends the der extension.

Select a location for the certificate

The directory path of the file to which you want the toolkit to write your server's certificate.

Make sure the directory is in a location the SAP BC Server can access, such as \server\config

If the CA's response contains their certificate as well, you will see these fields:

Enter CA certificate file name

The name of the file to which you want the toolkit to write the converted version of the CA's digitial certificate.

Typically you will have a directory set aside just for CA certificates.

Select a location for the CA's certificate

The directory path of the file to which you want the SAP BC Certificate Toolkit to write the converted version of the CA's

certificate.

Make sure the directory is in a location the SAP BC Server can access, such as \server\config.

6 Click OK .

If you did not receive the CA's certificate, see “What to Do if the Certificate Authority Does Not Send You Their Own Certificate” below.

Now you are ready to configure your SAP BC Server to use SSL. Refer to the section “Configuring the Server to Use SSL” in the chapter “Managing Server Security” in the SAP BC Administration Guide .

Enter CA certificate file name

The name of the file to which you want the toolkit to write the converted version of the CA's digitial certificate.

Typically you will have a directory set aside just for CA certificates.

Select a location for the CA's certificate

The directory path of the file to which you want the SAP BC Certificate Toolkit to write the converted version of the CA's

certificate.

Make sure the directory is in a location the SAP BC Server can access, such as \server\config.

What to Do if the Certificate Authority Does Not Send You Their Own Certificate

Sometimes a CA will send a signed version of the certificate for your Integration Server

without including a copy of the CA's certificate. You need a copy of the CA's certificate to

ensure secure communication; therefore if you did not receive one, try one of the

following methods to obtain one:

_ Contact the Certificate Authority —some Certificate Authorities allow you to copy their

certificate from their website. If that option is not available, get in touch with your CA

through their website, e-mail, or by phone and ask them to send you the certificate.

_ Import it from your browser —most Web browsers that support SSL are shipped with the

certificates of well-known Certificate Authorities. Some browsers provide a method

for you to import the certificate from the browser to a file. The method you use to

obtain the certificate depends on your browser.

_ Import it from the SAP BC Server's certificate —You might be able to obtain the CA's certificate by following the certificate path from your Integration Server's certificate.On an NT machine, double click your converted certificate file, for example certificate.der. Select the Certification Path tab. If the CA certificate is available, it will appear above your certificate in the path. Double click this file and copy the CA certificate to a file with the der extension, for example cacert.der. Place the file in the directory where you store CA certificates.