By default, SAP Mobile Server includes two security
profiles, which are used by secure management of SAP Mobile Server from
SAP Control Center and Data Change Notification (DCN) listeners:
default and default_mutual.
The security profile you use determines which certificate file you need,
and where they need to be deployed. The most secure profile is default_mutual, whereby components are mutually authenticated.
For details about what cipher suites are supported for domestic and domestic_mutual
authentication, see Creating an SSL Security Profile in
SAP Control Center in the SAP Control Center
for SAP Mobile Platform.
- The default security profile uses
domestic authentication. With this authentication type,
SAP Mobile Server sends its certificate to the client (that is,
either SAP Control Center or DCNs). However, it does not require
a certificate in return from the client. If you choose this option then you need
to:
- Use the alias of "sample1".
- Configure the SAP Control Center to
trust the SAP Mobile Server certificate.
- The default_mutual security profile uses
domestic_mutual authentication. If you use this option then you
need to:
- Use the alias of "sample2".
- Ensure both SAP Control Center and
SAP Mobile Server truststores each contain a copy of the other
component's certificate.