Ask a Question

Intermediate CA Certificate Installation Instructions for SAP Web Application Server

Solution

This document provides installation instructions for SAP Web Application Server using the Trust Manager. If you are unable to use these instructions for your server, Symantec recommends that you contact the server vendor or the organization, which supports SAP.

SSL certificates are signed by an Intermediate CA certificate using a two-tier hierarchy, which enhances the security of your SSL Certificate.
If the proper Intermediate CA is not installed on the server, your customers will see browser errors and may choose not to proceed further and close their browser.


Note: The Intermediate CA Certificate

  • Supplies the necessary chaining to a trusted root in an SSL connection.
  • Must be installed on the server acting as a chain link between the browser root and server certificate.
  • Does not control encryption step-up. This function is controlled by the server software.


Step 1:  Download the Symantec Root CA and Intermediate CA Certificates

  1. Note: Ensure that the appropriate Root and Intermediate CA certificates have been downloaded for your SSL product.
    To check which certificate type you have purchased, follow the steps from this link: SO13499
  2. Download the Root CA certificate for your SSL product from this link: SO4785
  3. Copy the Root CA certificate and paste it on a Notepad.
  4. Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white spaces, extra line breaks or additional characters have been inadvertently added.
  5. Save the file as root.crt 
  6. Download the Intermediate CA certificate from this link: INFO657
  7. Copy the Intermediate CA certificate and paste it on a Notepad.
  8. Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white spaces, extra line breaks or additional characters have been inadvertently added.
  9. Save the file as intermediate.crt 
     

Step 2: Importing the CA's Root Certificate if it is Located in the Certificate Database

  1. In the certificate section, choose  Import certificate.
  2. The Import Certificate dialog appears.
  3. Select the Database tabstrip.
  4. Select the certificate from the certificate database and choose Enter. The certificate appears in the certificate section.
  5. Choose  Add to Certificate List.
  6. The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
  7. Save the data.


Step 3: Importing the CA's Root Certificate if it is Located in the File System

  1. In the certificate section, choose  Import certificate.
  2. The Import Certificate dialog appears.
  3. Enter the corresponding file name from the file system.
  4. Select the certificate's file format.
    NOTE: If you are not sure which format to select, open the certificate in a text browser that does not use formatting, for example:Notepad. If the contents are readable (although encoded), then the format is Base 64. Otherwise the format is binary.
  5. Choose Enter. The certificate appears in the certificate maintenance section.
  6. Choose  Add to Certificate List. The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
  7. Save the data. 
     

Step 4: Importing the CA's Root Certificate if it is Located in a Different PSE

  1. Expand the node for the PSE that contains the certificate and select one of the application servers with a double-click.
  2. The PSE and its certificate list appear in the PSE maintenance section.
  3. Select the certificate with a double-click. The certificate appears in the certificate maintenance section.
  4. Select one of the application servers under the SSL server PSE node with a double-click.
  5. Choose  Add to Certificate List. The certificate is added to the certificate list for the PSE displayed in the PSE maintenance section.
  6. Save the data.
  7. Verify your installation with the Symantec Installation Checker


SAP

         For more information refer to SAP Support