Configuring Communication with SSL Authentication on Systems Running SAP Basis 7.4

FlexNet Manager Suite 2024 R2 (On-Premises)
The SAP system needs to be configured to accept SSL communication. For this, a cryptographic library has to be installed. For more information, see SAP Note 510007.

To use SSL authentication, you need to install a Root Certificate (steps 16 to 19). Contact the Certificate Authority (CA) for an SSL certificate that is used by the FlexNet Manager Suite server. You can download the Root Certificate in binary format or base64 format.

To configure communication using SSL authentication on a system running SAP Basis 7.4:

  1. Start the SOA Manager on the SAP system on which you want to configure the web service using the transaction code SOAMANAGER.
  2. On the SOA Management page, on the Service Administration tab, click Web Service Configuration.
  3. On the Web Service Configuration page, under Search Criteria, specify the following search parameters:
    • Object Type is All
    • Consumer Proxy contains *SAPSERVICE*.
  4. Click Search.
    The search returns the web service SAPServiceSoap.
  5. In the Internal Name column, click the hyperlinked name for the SAP web service.
  6. On the next page, on the Configurations tab, click Create and choose Manual Configuration.
  7. In the Logical Port Name step, enter the Logical Port Name and an appropriate description.
  8. Select the Logical Port is Default check box.
  9. On the Consumer Security step, select User ID / Password.
  10. In the User ID/Password section, provide the case-sensitive login credentials of the service account that are used in FlexNet Manager Suite.
    The recommended format is domain\user name.
    Note: If the user name and password of the service account changes in FlexNet Manager Suite, you must make the same changes in the SOA Manager.
  11. On the Messaging or SOAP Protocol step, select Suppress ID Transfer from the Message ID Protocol drop-down list. Accept the default values for all other options for this step.
  12. On the Transport Settings or HTTP Settings tab, provide the following information:
    • URL Access Path: Enter the URL access path /SAPService/SAPService.asmx.
    • Computer Name of Access URL: Enter the IP address of the relevant application server for FlexNet Manager Suite.
    • Port Number of Access URL: Enter 443 which is the port number for SSL authentication.
    • URL Protocol Information: Select HTTPS.
    • Accept the default values for all other options on this tab.
  13. On the Operation Specific or Operation Settings step, you need to manually add the SOAP action for every web-service operation.
    1. Select the Use non-default value for SOAP Action check box to ensure that the SOAP action is active for the configuration, and to enable the SOAP Action field.
    2. Add the web-service operations in the grid on the left. For each operation, specify the appropriate SOAP action in the SOAP Action field. The table SOAP Actions for the Web-Service Operation lists the operations and corresponding SOAP action. If you copy the SOAP actions from the table to paste each action into the SOAP Action field, ensure that you copy the entire line.
  14. Click Save.
  15. Connect to the SAP system and run transaction STRUST to start the Trust Manager.
  16. Click Import Certificate .
  17. On the Import Certificate dialog, select the appropriate Root Certificate.
  18. Under File format, select the file format of the Root Certificate. Click OK.
  19. In the system tree on the left pane of the Trust Manager, select SSL client SSL Client (Anonymous) and click Add to Certificate List.
  20. Start the Internet Communication Manager (ICM) using the transaction SMICM. (The ICM sends and receives requests to and from the Internet.)
  21. In the ICM Monitor screen, open the Administration menu and select ICM > Exit Soft > Global.
    This step resets the ICM Monitor. The new certificate is activated only after the reset.
  22. On the toolbar of the ICM Monitor screen, click Services .
  23. On the ICM Monitor - Service Display screen, click Refresh.
If the Active Services grid does not show a line for HTTPS, you need to add it.
  1. Open the Service menu and click Create.
  2. In the Define New Service dialog, provide the following information:
    • New Service Port: Enter 443.
    • Log: Enter HTTPS.
    • Keep Alive (in Sec.): Keep the default value or change to a value of your choice.
    • Max. Processing Time: Keep the default value or change to a value of your choice.
  3. Click OK.

FlexNet Manager Suite (On-Premises)

2024 R2