Securing SAP Mobile Platform Runtime Component Communications

There are two different ports that require encryption: the management port for SAP Control Center (HTTPS), and the management ports used by SAP Mobile Server (IIOPS).

You should also secure the server infrastructure to ensure that runtime binaries for the components performing the communication are protected from internal and external threats.

  1. Securing the Server Infrastructure
    Before you can secure the runtime, you must first secure the underlying infrastructure. This activity prevents files from being tampered with on the host, also allows the SAP Mobile Server to run with existing security mechanisms.
  2. Changing Installed Certificates Used for SAP Mobile Server and SAP Control Center HTTPS Listeners
    Both SAP Mobile Server and SAP Control Center include default certificates that are used for these components' HTTPS listeners. Since all installations use the same certificates by default, you must change these certificates with production-ready ones after you install SAP Mobile Platform. SAP Mobile Server and SAP Control Center share the same keystore (that is, SMP_HOME\Servers\UnwiredServer\Repository\Security\).
  3. Enabling and Configuring Administration Encryption for SAP Mobile Server
    Enable encryption to securely transfer data between the SAP Mobile Server administration listener and SAP Control Center.
Parent topic: Securing Data in Motion Quick Start