Importing the Certificate Request Responses

Use

The CA sends you a certificate request response that contains the signed public-key certificate for the SAP Web Dispatcher. Once you have received this response, import it into the SAP Web Dispatcher's corresponding PSE. You can either use the trust manager or you can use the configuration tool sapgenpse. See the procedures below.

Prerequisites

If you are using sapgenpse, then each certificate request response exists as a file in the file system. Otherwise, if you are using the trust manager, then the responses can either exist as a file or you can use Copy&Paste to insert it into the PSE.
If the certificate request responses do not contain the CA's root certificate, then you also have access to this certificate. If you are using the trust manager, then it must exist in the trust manager's database. If you are using sapgenpse, then it exists as a file in the file system.

Procedure

You can use either the configuration tool sapgenpse or the trust manager to import the certificate request into the PSE.

Recommendation

Use the same tool that you used to create that PSE(s) and certificate request(s).

Importing the Certificate Request Response Using SAPGENPSE

If you are using sapgenpse, use the tool's command import_own_cert to import the certificate request as shown below.

sapgenpse import_own_cert <Additional_options> -p <PSE_file> -c <Cert_file> [-r <RootCA_cert_file>] -x <PIN>

The tables below show the options to use with the command line.

Option	Parameter	Description	Allowed Values	Default
`-p`	`<PSE_Name>`	Path and file name of the PSE.	Path description (in quotation marks, if spaces exist).	None
`-c`	`<Cert_file>`	Path and file name of the certificate request response.	Path description (in quotation marks, if spaces exist).	None
`-r`	`<RootCA_ cert_ file>`	File containing the CA's root certificate (and any intermediate CA certificates). This parameter is necessary if the CA root and any intermediate CA certificates are not included in the certificate request response.	Path description (in quotation marks, if spaces exist).	Not set
`-x`	`<PIN>`	PIN that protects the PSE.	Character string	None

Result

The certificate request response is imported into the PSE.

Example

The following command line imports the certificate request response ( ABC.cer) into the SAP Web Dispatcher's SSL server PSE that is stored at C:\Program Files\ SAP\ SAPWebDisp\ sec\ SAPSSLS.pse. The environment variable SECUDIR is set to C:\Program Files\ SAP\ SAPWebDisp\ sec. The PIN that protects the PSE is abcpin.

sapgenpse import_own_cert -c ABC.cer -p SAPSSLS.pse -x abcpin