How to Install SSL Certificate on SAP Application Server?

Welcome to this article, where we will guide you to install an SSL Certificate on your SAP Application server successfully. We have divided the article into three parts to help you understand the process better:

How to generate a CSR?
How to install an SSL cert on the SAP Application server?
Where to purchase an SSL certificate for your SAP Web Application Server?

Why wait – Let’s dive in!

How to Generate a CSR?

To generate a CSR for a SAP Application server, you can use any one of these options:

Generate it manually or
Use our automatic CSR Generation Tool.

You must submit a CSR (Code Signing Request) to a trusted CA (Certificate Authority) to get an SSL certificate issued. A CSR is an encoded block of text that the CA uses to validate the authenticity of a website or server that’s requesting the certificate.

If the validation is successful, the CA sends the SSL certificate, intermediate certificates, and private key to the registered email in a .zip file.

Note:

If you plan to generate CSR manually, ensure all the information is accurate and updated. If the CA finds any inaccuracy, it may decline to sign the certificate.
The duration for certificate files to reach you may differ depending on the type of validation (DV, OV, or EV) you have selected for your website.

How to Install an SSL Cert on the SAP Application server?

Installing an SSL certificate on the SAP Application server is a straightforward process, comprising of only these four steps:

Unzip the SSL Files
Convert the Files to .txt Extension
Upload the Primary SSL Certificate
Import Root and Intermediate Certificates

Unzip the SSL Certificate Files

Follow the steps mentioned below to unzip the certificate files:

Download the .zip folder.
Unzip the contents of this folder using Zipware or WinZip tools.
Extract all the content on your local machine.

After unzipping the .zip folder, you will have the following:

A Root certificate
An SSL cert (.crt/x509/.cer/.pem extension).
.CA Bundle (Intermediate/Chain Certificates)

Note: To comply with the trust manager’s requirements, both – the CA’s root certificate and the signed public-key certificate must conform to the PKCS#B certificate chain format. Another option is for the CA to provide a public-key certificate in PEM format.

Convert the Files to .txt Extension

Follow the steps mentioned below to convert the SSL certificate files (SSL certificate, the root certificate, and the CA bundle) into a file with a .txt extension:

Click Search, placed on the taskbar.
Type Notepad and press Enter.
The Notepad window will appear.
Open the SSL certificate file.
Copy the section starting from, including – “BEGIN CERTIFICATE” to “END CERTIFICATE.”
Press Ctrl + V on your Keyboard to paste the data into the new Notepad file.
Save the file.

Note: Perform the same steps twice to convert the Root certificate and CA bundle files into separate files with the .txt extension. After this procedure, you should have three files with a .txt extension.

Upload the Primary SSL Certificate

Follow the steps mentioned below to upload the primary SSL certificate:

Enter your credentials to log in to your admin console.
Navigate to Trust Manager.
Expand SSL server PSE node.
Double-click your application server.
Under the PSE maintenance section, select Import Cert. Response.
Click on the Load local option to upload your SSL certificate. (You can load the cert by loading the .crt file or pasting the contents of the .txt files in the adjacent box.)
Verify that the uploaded SSL cert is displayed in the PSE maintenance section.

Import Root and Intermediate Certificates

Depending on your system setup, you will need to import your Intermediate CA and Root Certificate to either one of these locations:

File System
A Different PSE
Certificate Database

Here are the steps for importing your intermediate and root certificates from a file system:

Under the certificate section, choose Import certificate.
The Import Certificate dialog box will appear.
In the File name, type the associated file name.
From the certificate’s file format list, select Base 64.
Click Enter.
Click Add to Certificate List
Click on the Save the data option.

Follow the steps mentioned below if you want to import your intermediate and root certificates from a different PSE:

Expand SSL server PSE node.
Select one of your application servers by double-clicking on it.
Under the PSE maintenance section, from the certificate list, double-click on your certificate.
Under the SSL server PSE node, double-click to select a single application server.
Click on Add to Certificate List.
Save the data.

Follow the steps mentioned below if you want to import your intermediate and root certificates from a certificate database:

Under the certificate section, select Import certificate.
The Import Certificate dialog will open.
Click on the Database tab.
Click on your certificate.
Hit Enter.
Verify that the certificate is displayed in the certificate section.
Click Add to Certificate List
Save the data.

Congratulations! You have successfully installed your SSL certificate on the SAP Application server.

Test Your Installation

Now that you have installed the SSL certificate on the SAP Application server, you may think you have completed the installation process. However, there is one more step left, and that is to test the SSL certificate installation.

There is a possibility of SSL errors and vulnerabilities existing within the ecosystem. So, to be sure that there are no issues, use reliable testing tools like SSL Checker, SSL Labs, etc., to run diagnostic tests before marking the task as complete.

Where to purchase an SSL certificate for your SAP Web Application Server?

The best platform to buy an SSL certificate for your SAP Web Application Server is “cheapsslweb.com.” The reasons being:

SSL certificates for SAP servers are available for just $2.29 and comply with the latest encryption and CA/B standards.
Dedicated 24*7 SSL Support
Wide variety of SSL Certificates (Wildcards, Multidomain, etc.)
Free tools – CSR generator, SSL checker, Certificate Key Matcher, etc.
Backed by authorized Certificate Authorities like Sectigo, Comodo, Certera, etc.
30-day money-back period.

How to Install an SSL on SAP Application Server?

How to Generate a CSR?