Distributing Certificates to Client Computers

Context

Whitelists can only be used by users if the certificate of the related SAP system was installed on their local PC.

For End Users:

An individual user can execute this local installation using the Installing Certificates button of transaction WDR_ACF_WLIST. In this case, the exact path for storage is suggested automatically (SAPFrontendServices<SystemID><generic String>), and it can be used later for the decryption procedure - the user therefore no longer has to move the certificate to its final storage location manually.

For Administrators:

Administrators on the other hand, can use a file dialog to store the certificate in any location in order to then distribute it centrally to all client computers. For this purpose the button Download Certificate is available in transaction WDR_ACF_WLIST.

Call transaction WDR_ACF_WLIST.
Select the Download Certificate button.
Choose a storage location and save the certificate.
In the next step you can distribute the certificate to all relevant client computers (see also SAP Note 1706291 ).

Note

Following paths must be used to store the certificate:

Local operating system	Path
Linux	`_USER_HOME/.SAPGUI/acf`
Microsoft Windows	`%APPDATA%\SAP`
MacOS X	`_USER_HOME/Library/Preferences/SAP/acf`

If you are using SAP GUI for Java, note the following too:

2180573

Results

After the certificate of the SAP system has been distributed to all relevant client computers, all whitelists (which were also distributed from this system) can be descrypted locally and used.