Enabling and Configuring Administration Encryption for SAP Mobile Server

Enable encryption to securely transfer data between the SAP Mobile Server administration listener and SAP Control Center.

1. In the left navigation pane, select Configuration.
2. In the right administration pane, select the General tab.
3. From the menu bar, select SSL Configuration.
4. In the Configure security profile table:
   1. Enter a name for the security profile.
   2. Select a certificate alias from the drop down list.
      This is the alias of a key entry in the keystore. Make sure the key password of this key entry is the same as the keystore password.
   3. Select a mutual SSL setting:
      • true – the value of the securityCharacteristic  is ‘default_mutual’. The security profile authenticates both the client and the server, the client is also required to authenticate using a certificate; both the client and server will provide a digital certificate to be accepted or rejected by the other.
      • false – the value of securityCharacteristic  is ‘default’. The security profile authenticates only the server, only the server must provide a certificate to be accepted or rejected by the client.
5. Click Save.
6. From the menu bar, select Components.
7. Select Management and click Properties.
8. Enter the IIOPS Secure port (default is 2001), and ensure that SAP Control Center's Managed Resource properties match. By default, IIOPS is already configured between SAP Mobile Server and SAP Control Center.
9. Select the correct security profile name that provides the details for locating the correct certificates.
10. Click OK.
11. Save the changes and restart the server.