Creating a Client PSE 

Use

You can use the CLIENT_ICM_SSL_<instance_ID> keystore view of the SAP NetWeaver Administrator to create a client Personal Security Environment (PSE). The system associates this view with a PSE file named SAPSSLC.pse. This PSE can be used by an AS ABAP that uses the same key pair as the AS Java (for example, in a dual-stack installation) to authenticate itself on other Web servers. More information about the PSEs used by the AS ABAP: PSE Types.

Prerequisites

·        You are logged on to the NetWeaver Administrator with administrative privileges.

Procedure

       1.      Open the Key Storage by navigating to Configuration Management → Security → Certificates and Keys.

       2.      Select the CLIENT_ICM_SSL_<instance_ID> view (by default this view is empty) and choose Edit.

       3.      Import or create a new certificate. Choose Display.

The system detects the changes in the view and proposes to automatically export the view to a PSE file and to restart the Internet Communication Manager (ICM). If you want to restart the ICM later, you must manually export the view to a PSE file:

                            a.      Select the CLIENT_ICM_SSL_<instance_ID> view. Choose Edit.

                            b.      Choose Export View to PSE.

More information about importing or creating new certificates: Configuring the SSL Key Pair and Trusted X.509 Certificates.

Result

When you export the CLIENT_ICM_SSL_<instance_ID> view, the system creates the file SAPSSLC.pse in the /usr/sap/<SID>/JC<XX>/sec directory. After you restart the ICM, it starts using this file to set up the default client PSE.

If you want to stop using the CLIENT_ICM_SSL_<instance_ID> view as the default client PSE, you must remove all entries from this view and also delete the file SAPSSLC.pse.

More Information

You can also use the command line tool sapgenpse.exe to create a PSE. More information: Creating an SNC PSE for the AS Java.