Change of AS2 Certificate

Hi All,
We have a scenario using AS2 adapter which was working fine.
Now the AS2 Certificate has expired and our partner has given us the new certificate and asked us to upload it.
I have changed the Certificate name in all Sender and Receiver agreements in XI ,now I receive this error:
For AS2 receiver:
Error type: COMPONENT_ERROR,NOT_TRANSMITTED >> Error date: 4/17/09 8:22 AM >> Description: AS2 Adapter failure java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: There is no certificate with such alias com.seeburger.as2.AS2Plugin.execute(AS2Plugin.java:321) [4/17/09 8:22 AM]
For AS2 Senders:
Error type: PANIC >> Error date: 4/17/09 6:48 AM >> Description: Initiate Error:com.seeburger.util.configuration.ConfigurationException: Failed to lookup report channel for failed inbound message. Reason : com.seeburger.xi.config.ConfigException: No matching inbound binding (report) found for FromParty: ToParty: subject:SDPACK [4/17/09 6:48 AM]
Kindly let me know what else has to be done at our end.
Thanks.
Regards,
Shweta

Hi Ravi,
This is really a useful information.
We have received a certificate file from our partner as you have mentioned.
I am in contact with BASIS colleague and trying if he could do it.
I would update the thread once it is resolved.
Thanks.
Best Regards,
Shweta

Similar Messages

Seeburger AS2 Certificates updates

Dear Experts,
We're having a problem to add in new certificates from our partner. For your info we're using Seeburger AS2 connect and no one knows how to update the certificates including our vendors. Please let me know how to update the certificates. Thank you

Hi,
if you are on PI 7.1x go to Netweaver Administrator (http://server:port/nwa)
Then go to Configuration Management --> Security --> Certificates and Keys
There you shold find several Key Stores ("Key Storage Views")
Select the Keystore which holds the AS2 certificates.
If you are not sure which one is the correct one, check your Sender/Receiver Agreements in the Integration Directory.
The certificates that you specified as TRUSTED\<keystore>\certificate-name in your AS2 configuration are the ones you have to change.
In the "Key Storage View Details" you can add, modify, delete,... the certificates.
regards,
Daniel

How do I change the default certificate in Java Web Console?

I have a 3rd party issued server keystore & truststore ready to go in both jks and p12 file formats. I wish to use this in the Sun Java Web Console instead of the self signed certificate. I cannot find any documentation as to changing the certificate. I did find commands to change the keystore and truststore passwords, but I want to change the entire certificate.
I tried manually messing with the /var/webconsole/domains/console/conf/server.xml configuration file but realized it was more complex than that. Is there a documented procedure for changing the default certifcate?
Thanks

Siri will use the default calendar specified in the Mail, Contacts, Calendars setting.
Go to Settings/Mail,Contacts,Calendars, then scroll down, and change the default in the Calendars section to your the one you prefer.
hope this helps.

AS2 Certificate Problem

Hi,
I'm doing one IDOC to AS2 Scenario. Where we are posting the IDOC successfully, but we are not able to receive the message.
It is giving some certificate error. Definitely some connectivity issue.
The exact error is :
"Message processing failed. Cause: javax.resource.ResourceException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # , SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # "
Can someone please tell what exactly can be done to ensure the trusted certificate.
FYI : The SSL certificate in the communication channel and the Encryption certificate and authentication certificate in receiver agreement are all same.
Thanks,
Vikas

HI Vikas,
Can you check the expiry date on the AS2 certificate?
Regards,
ravi

AS2 Certificate

Can anybody expalin for B2B communication using de-central Adapter Framework how to import AS2 certificate.?

Hello
Just follow these steps:
->Launch the Visual Administrator
->Goto to ServicesKey Storage
->Choose load and select the file containing the certificate (.cer or .crt file)
As the XI configuration will refer to the certificate by name, the name should be somewhat self-describing. The certificate name should not include any date or time.

AS2 Certificate widget scoring issue

I received a fix from someone on the Captivate forum that is supposed to fix the AS2 Certificate widget scoring issue. The results on my Score Results page appear correctly, but the results on the certificate do not match those on the Score Results page. I tried to use the fix the provided (another widget that you insert at the beginning of the project) but it did not solve my problem. I am desperate for a solution to this and have tested the project what feels like 100 times to try to figure out how to fix this problem. I apologize in advance if this has been addressed in another string. I have spent a great deal of time going through the forums and have found some discussion on this issue, but no concrete solution anywhere. Can anyone offer any insight?
FYI: I am using Captivate 4 and my project is set to AS2.
Thanks!

Weird ... I need to ask a totally unrelated question and came to the forum using a link I'd bookmarked ... to the "Certificate Not Widget Scoring Correctly" thread. And here's your post at the top of the list.
I haven't played with scoring in quite awhile, so I'm not much help and maybe you've already read this thread, but just in case: here's the link: http://forums.adobe.com/thread/598503.
Hope it's helpful.

AS2 Certificate Issue

Hi all,
While loading AS2 certificate of the Trading Partner in our system it is asking for the password to unloack the certificates but when i contacted the Trading Partner they have not set any password for the certificates . Can any one help what could be the issue ?
Thanks
Laks

Can be one of 2 reasons;
1. Your partner has provided you with the private key rather than the public cert. What is the extension of this certificate?
2. There is some enconding issue ; think Xi VA can import only, .cer, .crt and .der files; am not sure though.
Regards
Bhavesh

AS2 Certificate Install for B2B Use

Oracle Team -
Is there a comprehensive set of instructions available on the FULL process necessary to get an AS2 connection up and running ?
I am looking for something that starts with the installation of the certificate in to the Oracle Wallet all the way thru setting up the Delivery Channel in B2B.
I have already looked at the tutorial in the B2B tech notes -- that starts after the certificate has already been installed.
Thanks,
Alice Raia

Hello,
We have sent the white paper on security to you.
As a summary,
10.1.2.0.2 B2B engine uses the certificate from the repository for both signing and encryption and also a lookup to the wallet for Private key, however this architecture has a significant change in subsequent releases.
Signing and Encryption for Host : Store the certificate in both wallet and repository
Signing and Encryption for TP : Store the certificate in repository. Please see the details of the same in the security document.
Rgds,Ramesh

Change SSL self-certificate email contact and default apple ID on mac mini server

Hello,
I just received my mac mini server and started to set it up.
I bought this computer with my regular apple id account that I use with my 2 MBPs.
When installing the mac mini computer I connected my Mac Mini Server to my regular apple ID account.
The issue is that I don't want to share my MBP account details on this Mini Server computer (software update, server notification push, SSL certificate contact e-mail...) not to mess things up between all my macs.
My question is :
I created a new apple ID for this computer with a different contact email etc.
How do I change the default ID for the whole mac mini settings ?
I already changed the user settings in the OSX user pref pane, the new mail is updated.
I already changed the icloud apple ID with the new one it's updated.
I already changed the alert notification push recipient e-mail in server.app it's updated.
BUT still, if I want to change the "self-SSL certificate" for a new one with my new apple ID account, the e-mail contact is still my old one which I bought the computer with.
How do I change that ?
Also I want to be able to update my apps on this computer without using the apple ID account I bought the mac mini with (and my 2 MBP, iphone etc), but with the new dedicated apple ID for this McMini.
Is there a software transfer trick to separate computers softwares from a mac to another?
thanks for your precious help.
Damian

Hello,
I just received my mac mini server and started to set it up.
I bought this computer with my regular apple id account that I use with my 2 MBPs.
When installing the mac mini computer I connected my Mac Mini Server to my regular apple ID account.
The issue is that I don't want to share my MBP account details on this Mini Server computer (software update, server notification push, SSL certificate contact e-mail...) not to mess things up between all my macs.
My question is :
I created a new apple ID for this computer with a different contact email etc.
How do I change the default ID for the whole mac mini settings ?
I already changed the user settings in the OSX user pref pane, the new mail is updated.
I already changed the icloud apple ID with the new one it's updated.
I already changed the alert notification push recipient e-mail in server.app it's updated.
BUT still, if I want to change the "self-SSL certificate" for a new one with my new apple ID account, the e-mail contact is still my old one which I bought the computer with.
How do I change that ?
Also I want to be able to update my apps on this computer without using the apple ID account I bought the mac mini with (and my 2 MBP, iphone etc), but with the new dedicated apple ID for this McMini.
Is there a software transfer trick to separate computers softwares from a mac to another?
thanks for your precious help.
Damian

Seeburger AS2 Certificate Issue

Hey,
We are facing an Issue while posting an EDI order to XI.
The sender system receives an error https 403 forbidden.
I assume this is an authorization error.
We had a certificate say XYZ.cert taht expired and hence we uploaded a new certificate say XYZ_1.cert
Now when the sender sends the data, the AS2ID is XYZ and the private key is XYZ.
i would like to know if any of these two values determine the certificate. because if that is the case then the sender data will refer to the old certificate which has expired.
Also if anyone has a different explanation for the error, please mention.
regards,
Milan Thaker

Hi Milan,
If you receiving EDI documents from your partner then in the sender agreement you will specify following certificates
1. Authenticate Certificate - Partner Public Key used to validate the signature of the partner
2.Decryption Key- Your Private Key (your certificate) to decrypt the message
So if you changed your certificate then you need to give your new certificate (public key) to your partner for encrypting.
Regards,
Prakash

BizTalk AS2 Certificate configuration problem

Hi,
I'm having a problem with signing a certificate to send port. I have imported 2 diferent certificates in mmc to "Local Computer\Other People" and "Local Computer\Trusted Root Certification Authorities". Then I went to BTAdmin and select
some Send Port then Certificate then Browse. One of certificates was there and other was not.
Then I went on this page
http://msdn.microsoft.com/en-us/library/bb728096.aspx and found this:
"Certificates used for AS2 transport must have the attributes required for their
intended use. For signing and signature verification, the Key Usage attribute
of the certificate must be Digital Signature.
For encryption and decryption, the Key Usage attribute
of the certificate must be Data Encipherment or Key
Encipherment. You can verify the Key
Usage attribute by double-clicking the certificate, clicking the Details tab
in the Certificate dialog
box, and checking the Key Usage field."
I have noticed that the certificate that is not showing in BTAdmin, does not have field "Key Uasge", but other one does have and its value is "Digital Signature, Key Encipherment (a0)". Is there any way to configure that
"not working" certificate, so that I can select it in BTAdmin or this is dead end?
Thanks in advance,
TG

In AS2 BizTalk a certificate on a Send Port would be is for signing and/or for encryption. So there is not any way to configure the existing/in present certificate. So one should have
to request a new one with there right key usage.
http://www.athenainfotech.co.uk/managed-b2b-services

AS2 certificates in B2B

I'm trying to setup an AS2 connection through B2B and having trouble setting up the host certificate. I've created a wallet and certificate request in OWM, installed the oracle certificate authority (oca), submitted the request and created the certificate. However, when I try to import the certificate back into owm I get an error saying that the installation failed with the possible errors: - input was not a valid certificate, - no matching request was found, or - ca certificate needed for certificate chain not found.
I installed the ca certificate from oca but I'm still getting the same error. Is there any documentation available on how to get owm and oca to work together?
Thanks!
-Sean

I got the same problem on iAS 9.0.4 and fininally gave it up. I installed iAS 9.0.4 to integrate 10g (only iAS 9.0.4 is support to integrate with Oracle apps 11.5.10).

Help changing AS3 -- AS2 please

I was following a tutorial in AS3 with a MouseEvent but really want to use it in AS2.
There is an Input Text box named boxOne that a user enters their name
You click on myButton and in then in boxTwo should appear the test "Welcome to our class" and what
was entered in boxOne.
The error message says " the class or interface MouseEvent could not be loaded
The AS3 code is :-
stop();
function handleClick(pEvent:MouseEvent):void {
var myFirstVariable = boxOne.text;
boxTwo.text = "Welcome to our class " + myFirstVariable;
myButton.addEventListener(MouseEvent.MOUSE_UP, handleClick);
I'd really appreciate some help - thanks
ActionScript Beginner.....but trying

Diavonex indicated how to change the avatar for this web site. My impression is that is not what you are trying to do.
The iPad isn't set up with individual user accounts at the OS level. There is no function on it as you are describing. If I'm wrong, perhaps you could describe what you re referring to in more detail.

Changing Administration Connector Certificate

I have installed OUD using a CA issued certificate during installation using the --useJavaKeystore option and I see that the LDAPS connector is utilizing this certificate. However the Administration Connector is still using a self-signed certificate. I would like to replace this self-signed certificate with the CA issued certificate. I tried finding instructions but all I found was this link (Managing Administration Traffic to the Server - Oracle Fusion Middleware Administration Guide for Oracle Unified Directo…) which had this small blurb: "You can manage the administration connector certificate using external tools, such as keytool."
From doing a little digging I think I have come up with the correct sequence/steps to get this working. Basically I have removed the admin-cert from the two keystores:/config/admin-truststore and /config/admin-keystore. I then imported the keypair I created for the initial install. I also changed the /config/admin-keystore.pin to match the pin I used when creating the keystore.
This appears to be working but I would like to know if this is the correct method and if there would be any side effects to replacing the certificate used by the Administration Connector.
The exact steps I followed are below:
Generate keypair and keystore: keytool -genkeypair -dname "CN=server-cert,dc=myorg" -alias server-cert -keyalg RSA -keypass 'myKeyPass' -storepass 'myKeyPass' -keystore mykeystore.jks
Generate certificate request keytool -certreq -alias server-cert -keystore mykeystore.jks -file myCertRequest.csr
Obtain x509 server certificate from CA (server.crt) and root CA public Cert (rootca.crt)
Import root CA cert into keystorekeytool -import -trustcacerts -alias root -file rootca.crt -keystore mykeystore.jks -storepass 'myKeyPass'
Import CA issued certificate into keystorekeytool -import -trustcacerts -alias server-cert -file server.crt -keystore mykeystore.jks -storepass 'myKeyPass' -keypass 'myKeyPass'
Change keystore password of default OUD Admin truststorekeytool -storepasswd -keystore $OUD_INSTANCE/config/admin-truststore -storepass 'contents of admin-keystore.pin' -new 'myKeyPass'
Change keystore password of default OUD admin keystorekeytool -storepasswd -keystore $OUD_INSTANCE/config/admin-keystore -storepass 'contents of admin-keystore.pin' -new 'myKeyPass'
Change clear text password file to the new keystore passwordvim /$OUD_INSTANCE/config/admin-keystore.pin ## replace with new key [myKeyPass]
Import root CA cert into default OUD admin truststorekeytool -import -trustcacerts -alias root -file rootca.crt -keystore $OUD_INSTANCE/config/admin-truststore -storepass 'myKeyPass'
Import root CA cert into default OUD admin keystorekeytool -import -trustcacerts -alias root -file rootca.crt -keystore $OUD_INSTANCE/config/admin-keystore -storepass 'myKeyPass'
Delete self-signed admin-cert from default OUD admin truststorekeytool -delete -alias admin-cert -keystore $OUD_INSTANCE/config/admin-truststore -storepass 'myKeyPass'
Delete self-signed admin-cert from default OUD admin keystorekeytool -delete -alias admin-cert -keystore $OUD_INSTANCE/config/admin-keystore -storepass 'myKeyPass'
Import CA issued keypair into default OUD Admin keystorekeytool -importkeystore -srckeystore mykeystore.jks -destkeystore $OUD_INSTANCE/config/admin-keystore -srcstorepass 'myKeyPass' -deststorepass 'myKeyPass' -srcalias server-cert -destalias admin-cert -srckeypass 'myKeyPass' -destkeypass 'myKeyPass'
Import CA issued keypair into default OUD truststorekeytool -importkeystore -srckeystore mykeystore.jks -destkeystore $OUD_INSTANCE/config/admin-truststore -srcstorepass 'myKeyPass' -deststorepass 'myKeyPass' -srcalias server-cert -destalias admin-cert -srckeypass 'myKeyPass' -destkeypass 'myKeyPass'

There is a report in sap in which you can create the ticket

AS2 Certificates and URL

Hi,
We are setting up a party and going to exchange via AS2.
As the messages would involve outbound and inbound, they had forwarded their certificates along with URL path.
Also, they were requesting GLN number. Please let me know what is it about.

Hi Krish,
>>As the messages would involve outbound and inbound, they had forwarded their certificates along with URL path.
Nwo you need to provide your certificates and url.. Generally there shoudl be a template for exchanging this information...
GLN number is an identification number, through which your messages are identified.. we call it as AS2ID
Regards
Suraj

Change of AS2 Certificate

Similar Messages

Maybe you are looking for