Practical, step-by-step guides for buying, installing, and renewing TLS/SSL certificates across your SAP landscape – written for BASIS teams, not marketing. Each pair covers a component end to end: get a certificate installed once, then stop doing it manually.
Not sure which certificate you actually need first? Start with Which SSL certificate do you need for your SAP landscape? – it walks through domain coverage and validation level before you buy anything.
SAP Web Dispatcher
Installing an SSL/TLS certificate on SAP Web Dispatcher – generating the CSR, getting it signed, importing it, and reloading without downtime, on Linux/Unix and Windows.
Automating SAP Web Dispatcher certificate renewal – using SAP Secure Login Server (sapslscli) or a DIY cron-based script, so this stops being a manual job as certificate lifetimes shrink under SC-081.
SAP ECC & S/4HANA (ABAP/STRUST)
Installing an SSL/TLS certificate on ECC and S/4HANA (STRUST) – generating the CSR, getting it signed, and importing it through transaction STRUST.
Automating ECC and S/4HANA certificate renewal – enrollment and renewal through SAP Secure Login Server, using the SSF_CERT_ENROLL and SSF_CERT_RENEW background jobs.
NetWeaver AS Java (PI/PO)
Installing an SSL/TLS certificate on NetWeaver AS Java (PI/PO) – generating the CSR, getting it signed, and importing it through NetWeaver Administrator’s Key Storage.
Automating NetWeaver AS Java certificate renewal – enrollment and scheduled renewal through SAP Secure Login Server’s CLM application.
SAP managed cloud (Integration Suite / CPI)
Installing an SSL/TLS certificate on SAP Integration Suite (CPI) – custom domain certificates via Custom Domain Manager, and keystore certificates for outbound/inbound trust.
Automating CPI certificate renewal – using the Security Content OData API to monitor expiry and replace keystore certificates automatically.
Troubleshooting
SAP TLS Certificate Troubleshooting: Common Errors and How to Fix Them – a companion reference for when installation or renewal doesn’t go to plan, covering all four systems above.
That covers the core SAP landscape – Web Dispatcher, ECC/S4HANA, NetWeaver AS Java, and the managed cloud. Missing something you need? Let us know.
Already know what you need? You can browse and buy certificates directly.