Authenticating at the Network Edge with Relay Server

Enable HTTP with mutual certificate authentication at the network edge with a Relay Server.

• Preparing Certificates
  The client, Relay Server, RSOE and SAP Mobile Server each use their own certificate; you can create or sign these certificates from one root certificate.
• Configuring a Web Site to Require a Client Certificate
  Use Internet Information Services (IIS) Manager to configure settings for the Relay Server's Web site.
• Configuring Relay Server to Forward Client Certificates to SAP Mobile Server
  Modify the Relay Server configuration file (rs.config) to include backend farm information. Two backend farms are required, one for registering the application, and one for synchronizing data. The two farms have the same properties, except the ID.
• Configuring SAP Mobile Server SSL Configuration
  Configure the keystore, security profile, and authentication properties for SAP Mobile Server.
• Configuring Relay Server Connection
  Add Relay Server information and Outbound Enablers (RSOEs) to the SAP Mobile Server, and start the RSOEs.