Providing the Certificates for the Java Client (SAP Library

Providing the Certificates for the Java Client

Purpose

The Java client requires the following so that it can communicate with the Web server using a secure connection:

· A client certificate

· The root certificate of the CA that issues the client certificate

You manage both certificates for the Java client using the Structure link J2EE Engine Visual Administrator.

The J2EE Engine Visual Administrator is a graphical user interface (GUI) that you can use to administrate and monitor the J2EE Engine. For more information on the tool, see the documentation on J2EE technology on the SAP Web Application Server. (Java Technology in SAP Web Application Server ® Administration Manual ® Server Administration ® SAP J2EE Engine Administration Tools)

Process Flow

The graphic below depicts the steps required and the order in which you carry them out.

...

1. You use the J2EE Engine Visual Administrator to create a keystore for the Java client on the server of the application using TREX. The keystore is a file that contains the public and private key of the certificate owner and that is protected by a password.

2. You then create a certificate request.

3. Send this request to the CA.

4. As soon as the CA has issued the client certificate, you can collect it along with the root certificate of the CA.

5. You import both the client and the root certificate using the J2EE Engine Visual Administrator.

6. You then create user-based permissions so that all users have access to the keystore you created (TREXKeyStore).

Configuring Authentication on the TREX Web Server

When you provide the certificates for the TREX Web server, you enter the owner and issuer of the client certificate into the configuration file TREXcert.ini (Windows/IIS) or httpd.conf (UNIX/Apache Web Server) so that the Java client can authenticate itself with the Web server. You do this after providing the certificates for the TREX Java client.