Determining Certificate Requirements Based on Security Profile Chosen

By default, SAP Mobile Server includes two security profiles, which are used by secure management of SAP Mobile Server from SAP Control Center and Data Change Notification (DCN) listeners: default and default_mutual.

The security profile you use determines which certificate file you need, and where they need to be deployed. The most secure profile is default_mutual, whereby components are mutually authenticated.

  1. When using the default security profile, SAP Mobile Server sends its certificate to the client (that is, either SAP Control Center or DCNs). However, it does not require a certificate in return from the client. If you choose this option, then you need to:
    • Use the alias of "sample1".
    • Configure the SAP Control Center to trust the SAP Mobile Server certificate.
  2. When using the default_mutual security profile, you need to:
    • Use the alias of "sample2".
    • Ensure both SAP Control Center and SAP Mobile Server truststores each contain a copy of the other component's certificate.