Provisioning the Public RSA key from the Messaging Server for MBS Encryption

If you are not using Afaria, you can install the client application, then connect to the corporate LAN using Wi-Fi or other method of your choosing in order to provision devices with required files. This allows you to seed public RSA keys to the device so that over-the-air connections to SAP Mobile Server can be mutually-authenticated and you can minimize the possibility of a rogue server intercepting your initial synchronization and providing its own RSA public key.

Follow these steps to ensure that the public RSA key required for future secure communication is correctly and reliably installed.

  1. Provision the application to the device.
  2. Connect to the corporate LAN on which the SAP Mobile Server cluster is installed.
  3. Use a device connection that connects directly to SAP Mobile Server.
    SAP Mobile Server seeds the client with the public key. The client uses this public key for all subsequent connections.
Related concepts
Security Artifacts That Require Provisioning