Create an end-user certificate to reside on the mobile device. Each user must have a
unique certificate.
Prerequisites
On the Windows machine where
SAP Mobile Platform is installed, download OpenSSH or
another tool that supports Linux commands. Run the commands using an account
for which you have Administrator privileges.
Procedure
- Create the client key and a certificate-signing request (CSR):
- In a Linux command window, run:
“openssl genrsa -des3 -out ssodemo.key 1024”
“openssl req -new -key ssodemo.key -out ssodemo.csr”
- Set the common name to “ssodemo” and enter the other values requested
by openssl.
- Run:
“openssl x509 -req -days 365 -in ssodemo.csr -CA Root_CA.crt -CAkey Root_CA.key -set_serial 01 -out ssodemo.crt”
- Convert the client key to PKCS, and merge the certificate and the private key
into a single file:
“openssl pkcs12 -export -clcerts -in ssodemo.crt -inkey ssodemo.key -out ssodemo.p12”
