Vous êtes sur la page 1sur 5

30/1/2017 ManagingPSEfilesattheWebDispatcherApplicationServerInfrastructureSCNWiki

GettingStarted Store

CommunityWIKI SAPCommunity Welcome,Guest Login Register SearchtheCommunity


ApplicationServerInfrastructure / SAPClientServerTechnology / SAPWebDispatcher(WDP)

ManagingPSEfilesattheWebDispatcher
CreadoporIsaiasFreitas,modificadoporltimavezenmay16,2016

Purpose
HelpmanagingthePSEfilesattheWebDispatcher.ThePSEfilesarerequiredwhenconfiguringSSL(HTTPS)attheWebDispatcher.Theyarealso
neededwhenatrustrelationshipisbeingconfiguredbetweentheWebDispatcheranditsbackendsystem(s).

Overview
ThispageshowshowtousetheWebAdministrationpageoftheSAPWebDispatcherinordertocreateandmanagethePSEfilesrequiredforSSL
(HTTPS)configuration.

TheWebAdministrationpage
TheWebAdministrationpageisconfiguredwiththeparametericm/HTTP/admin_X.
ThisparametercanrestricttheaccesstotheWebAdministrationpagetoacertainport.Bydefault,theinterfacecanbeaccessedthroughtheURL:
http://<Webdispatcherserver>:<port>/sap/wdisp/admin

Formoreinformationabouttheparametericm/HTTP/admin_X,accessthefollowingSAPHelpwebpage.
http://help.sap.com/saphelp_nw70ehp3/helpdata/en/48/3e191a252f72d0e10000000a42189c/frameset.htm

AuserisrequiredtoaccesstheAdministrationpage.ThedefaultuserIDisicmadm.Thepasswordisconfigured/generatedatinstallationtime.
Inordertocreatemoreusers,orchangethepasswordofexistingusers,youcanusethewdispmontool.
YoucanseeanexampleofhowtochangethepasswordatthisWIKIpage.
Formoreinformationaboutthistool,readthisSAPHelpwebpage.

ManagingPSEfilesthroughtheWebAdministrationpage
Inolderreleases,thesapgenpsecommandlinetoolhadtobeused.ThistoolwillnotbecoveredinthisWIKI.
TheSAPnote2009483deliveredanewfeaturethatallowsthePSEfilesoftheWebDispatchertobemanagedthroughitsWebAdministrationpage.
SincetheSAPWebDispatcherrelease742isthecurrentlyrecommendedversion,thisisthereleasethatwillbecoveredinthisWIKI.
IfyourcurrentWebDispatcherisfromareleaselowerthan742,itispossibletoupgradeitto742orevento745.TheWebDispatcher745iscompatible
withallbackendreleases.Thereisnoneedtoupdatethebackendsystem(s)aswell.YoucanreadmoreabouttheWebDispatcherreleasesand
backendcompatibilityattheSAPnote908097.
AfteraccessingtheWebAdministrationpage,accessthemenuoptionPSEManagementontheleft.

https://wiki.scn.sap.com/wiki/display/SI/Managing+PSE+files+at+the+Web+Dispatcher 1/5
30/1/2017 ManagingPSEfilesattheWebDispatcherApplicationServerInfrastructureSCNWiki

YoucanchoosewhichPSEwillbemanagedattheManagePSEdropdownmenu.
SAPSSLS.pseServercertificatePSE
SAPSSLC.pseClientcertificatePSE
ClickonRecreatePSEinordertopreparethecertificatedetailswithappropriatevalues(completeDistinguishedname).

FilltheDistinguishednamewiththecompletevalueandclickonCreate.

ClickonCreateCArequest.

https://wiki.scn.sap.com/wiki/display/SI/Managing+PSE+files+at+the+Web+Dispatcher 2/5
30/1/2017 ManagingPSEfilesattheWebDispatcherApplicationServerInfrastructureSCNWiki

Copythecertificaterequestfromthetoptextboxandsaveitasatextfile(usingnotepad).

SendtherequesttotheCertificationAuthority(CA).
Onceyoureceivedtheresponse(thesignedcertificate),ensurethatyoualsohaveallthecertificatesinthecertificationpath.
Forexample,anIntermediateCAcouldhavesignedthecertificate.SuchIntermediateCAisbelowaRootCA.Inthiscase,youwillneedtopaste
theCAresponse,theIntermediateCAcertificateandtheRootCAcertificateintotheImportCAresponsetextbox.
Inthisexample,theRootCAsignedtherequestdirectly.

https://wiki.scn.sap.com/wiki/display/SI/Managing+PSE+files+at+the+Web+Dispatcher 3/5
30/1/2017 ManagingPSEfilesattheWebDispatcherApplicationServerInfrastructureSCNWiki

AfterclickingonImport,youcanseethattheimportwassuccessfulatthetopofthewindow.Youcanalsoseethedetailsofthecertificate,likethe
Subject,theIssuerandtheValidity.

Now,youcanimportanyothercertificatesrequiredusingtheImportcertificatebutton.Forexample,ifyouwillenableSingleSignOn(SSO),import
theRootCAcertificate(andallIntermediateCAcertificates)fromtheCAthatwillissuetheenduserscertificatesintotheWebDispatcherServerPSE
file.

https://wiki.scn.sap.com/wiki/display/SI/Managing+PSE+files+at+the+Web+Dispatcher 4/5
30/1/2017 ManagingPSEfilesattheWebDispatcherApplicationServerInfrastructureSCNWiki

ThisisrequiredsotheWebDispatchercanvalidatethecertificateitreceivedfromtheenduser.
TheprocedureabovecanbeappliedwhencreatingtheClientPSEfile,whichisrequiredforconfiguringthetrustrelationshipbetweentheWeb
Dispatcherandthebackend.Thistrustrelationshipconfigurationisnotmandatory.However,itintroducesanotherlevelofsecurity.
Therewouldbenoneedtosigntheclientcertificateaswell.YoucanexporttheselfsignedcertificateoftheClientPSEandimportitattheServerPSE
fileofthebackend,whenconfiguringthetrustrelationship.

RelatedContent
RelatedDocuments
InternetCommunicationManager(ICM)icm/HTTP/admin_<xx>
InternetCommunicationManager(ICM)CreatingAdministrationUsers
ManaginguserIDsfortheWebAdministrationPage

RelatedNotes
SAPnote908097:SAPWebDispatcher:Release,Installation,Patches,Documentation
SAPnote2009483:PSEManagementinWebAdministrationInterfaceofSAPWebDispatcher
SAPKBA2160678:SSOstopsworkingwhenconfiguringthe"icm/HTTPS/trust_client_with*"parameter

Sinetiquetas

ContactUs SAPHelpPortal
Privacy TermsofUse LegalDisclosure Copyright FollowSCN

https://wiki.scn.sap.com/wiki/display/SI/Managing+PSE+files+at+the+Web+Dispatcher 5/5