Install a server certificate in SAP NetWeaver ABAP – 3.6 Import CA certificate into SAP NetWeaver ABAP PSE

Published by Tobias Hofmann on

1 min read

In case your ICF will serve only as a HTTPS server, you do not need to do this. In case you want your ABAP server to connect to another web server, this may be of interest. In that case, your ABAP server acts as a client and will receive a server certificate, just like your browser does. While a browser comes with a pre-installed list of CAs, the PSE does not have this. Therefore, ABAP will reject the server certificate received when opening a TLS connection. To make ABAP accept the certificate, either the server certificate must be imported or the CA certificate. Importing each server certificate is not the best approach (number of servers, lifetime, management), importing the CA certificate will make ABAP accept connects too, as long as the received server certificate was issued by this CA.

Transaction: STRUST

Open the SSL server standard PSE and switch to edit mode. Click on import certificate

Select the tab File and give the path to the CA certificate.

Check the information of the certificate.

If everything is OK, add the certificate to the certificate list.

Click save


CA certificate is imported into the PSE. With this, the PSE can validate successfully each certificate received and that is signed by the CA.

Let the world know

Tobias Hofmann

Doing stuff with SAP since 1998. Open, web, UX, cloud. I am not a Basis guy, but very knowledgeable about Basis stuff, as it's the foundation of everything I do (DevOps). Performance is king, and unit tests is something I actually do. Developing HTML5 apps when HTML5 wasn't around. HCP/SCP user since 2012, NetWeaver since 2002, ABAP since 1998.


Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.