Preparing SSL for HTTPS Listeners

SSL requires that two self-signed certificates installed by default need to be replaced: one for SAP Mobile Server, and one for SAP Control Center. Once the certificates have been imported, you can configure the security profile for these components in SAP Control Center.

1. Determining Certificate Requirements Based on Security Profile Chosen
   By default, SAP Mobile Server includes two security profiles, which are used by secure management of SAP Mobile Server from SAP Control Center and Data Change Notification (DCN) listeners: default and default_mutual.
2. Changing Installed Certificates Used for SAP Mobile Server and SAP Control Center HTTPS Listeners
   Both SAP Mobile Server and SAP Control Center include default certificates that are used for these components' HTTPS listeners. Since all installations use the same certificates by default, you must change these certificates with production-ready ones after you install SAP Mobile Platform. SAP Mobile Server and SAP Control Center share the same keystore (that is, SMP_HOME\Servers\UnwiredServer\Repository\Security\).
3. Enabling and Configuring Administration Encryption for SAP Mobile Server
   Enable encryption to securely transfer data between the SAP Mobile Server administration listener and SAP Control Center.
4. Managing Ciphers in Security Characteristics
   Manage security characteristic ciphers from SAP Control Center.