Defining Certificates for SSL Encryption

Specify keystore and truststore certificates to be used for SSL encryption of SAP Mobile Server communication ports. All security profiles use the same keystore and truststore.

  1. In the left navigation pane, select Configuration
  2. In the right administration pane, select the General tab.
  3. From the menu bar, select SSL Configuration.
  4. To configure SSL encryption for all security profiles, complete these fields:
    • Keystore Location – the relative path name indicating the location where the keys and certificates are stored. Certificates used for administration and data change notification ports are stored in the keystore. The path should be relative to SMP_HOME\Servers\UnwiredServer.
    • Keystore Password – the password that secures the key store.
    • Truststore Location – therelative path name for the public key certificate storage file. The Certificate Authority (CA) certificates used to sign certificates store their public keys in the truststore. The path should be relative to SMP_HOME\Servers\UnwiredServer.
    • Truststore Password – the password that secures the truststore.
    Note: If at any point you have changed the password for the keystore and truststore with keytool, then you must remember to update the password here as well. The password must be used with all aliases as well. To update the alias, use a command similar to this one:

    keytool -keypasswd -alias sample1 -keypass changeit -new changeit2 -keystore keystore.jks

    keytool -keypasswd -alias sample2 -keypass changeit -new changeit2 -keystore keystore.jks

  5. Click Save.
Next
Create an SSL security profile that uses the selected certificates.