Renew SSL certificates for SAP CAL System

[alex_geppart]

Hello CAL community,

I would like to know how to renew SSL certificates for a SAP S4HANA 1909 launched via SAP CAL.

Here we can see that given certificates are not more valid (16.02.2021):

How to get new SSL certificates for a system launched via SAP CAL?

[JoergWolf · Accepted solution]

Hello Alexander,

you can create a new self-signed System PSE in tCode STRUST if needed.

Since the ABAP ICM PSE will then be changed, you also have to re-establish the trust with the web dispatcher.

There is a guide for generating and importing SSL certificates (signed by a TA) and host names on https://blogs.sap.com/2019/04/23/sap-s4hana-fully-activated-appliance-demo-guides/ > A) Demo Guides > Technical .

Pp. 36/37 describe the trust re-establishing in detail, and you might also want to explore the option for a fully-qualified host name and a trusted SSL certificate in general.

Best, Joerg