AS2 Certificate

Can anybody expalin for B2B communication using de-central Adapter Framework how to import AS2 certificate.?

Hello
Just follow these steps:
->Launch the Visual Administrator
->Goto to ServicesKey Storage
->Choose load and select the file containing the certificate (.cer or .crt file)
As the XI configuration will refer to the certificate by name, the name should be somewhat self-describing. The certificate name should not include any date or time.

Similar Messages

AS2 Certificate Problem

Hi,
I'm doing one IDOC to AS2 Scenario. Where we are posting the IDOC successfully, but we are not able to receive the message.
It is giving some certificate error. Definitely some connectivity issue.
The exact error is :
"Message processing failed. Cause: javax.resource.ResourceException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # , SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # "
Can someone please tell what exactly can be done to ensure the trusted certificate.
FYI : The SSL certificate in the communication channel and the Encryption certificate and authentication certificate in receiver agreement are all same.
Thanks,
Vikas

HI Vikas,
Can you check the expiry date on the AS2 certificate?
Regards,
ravi

Change of AS2 Certificate

Hi All,
We have a scenario using AS2 adapter which was working fine.
Now the AS2 Certificate has expired and our partner has given us the new certificate and asked us to upload it.
I have changed the Certificate name in all Sender and Receiver agreements in XI ,now I receive this error:
For AS2 receiver:
Error type: COMPONENT_ERROR,NOT_TRANSMITTED >> Error date: 4/17/09 8:22 AM >> Description: AS2 Adapter failure java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: There is no certificate with such alias com.seeburger.as2.AS2Plugin.execute(AS2Plugin.java:321) [4/17/09 8:22 AM]
For AS2 Senders:
Error type: PANIC >> Error date: 4/17/09 6:48 AM >> Description: Initiate Error:com.seeburger.util.configuration.ConfigurationException: Failed to lookup report channel for failed inbound message. Reason : com.seeburger.xi.config.ConfigException: No matching inbound binding (report) found for FromParty: ToParty: subject:SDPACK [4/17/09 6:48 AM]
Kindly let me know what else has to be done at our end.
Thanks.
Regards,
Shweta

Hi Ravi,
This is really a useful information.
We have received a certificate file from our partner as you have mentioned.
I am in contact with BASIS colleague and trying if he could do it.
I would update the thread once it is resolved.
Thanks.
Best Regards,
Shweta

AS2 Certificate widget scoring issue

I received a fix from someone on the Captivate forum that is supposed to fix the AS2 Certificate widget scoring issue. The results on my Score Results page appear correctly, but the results on the certificate do not match those on the Score Results page. I tried to use the fix the provided (another widget that you insert at the beginning of the project) but it did not solve my problem. I am desperate for a solution to this and have tested the project what feels like 100 times to try to figure out how to fix this problem. I apologize in advance if this has been addressed in another string. I have spent a great deal of time going through the forums and have found some discussion on this issue, but no concrete solution anywhere. Can anyone offer any insight?
FYI: I am using Captivate 4 and my project is set to AS2.
Thanks!

Weird ... I need to ask a totally unrelated question and came to the forum using a link I'd bookmarked ... to the "Certificate Not Widget Scoring Correctly" thread. And here's your post at the top of the list.
I haven't played with scoring in quite awhile, so I'm not much help and maybe you've already read this thread, but just in case: here's the link: http://forums.adobe.com/thread/598503.
Hope it's helpful.

AS2 Certificate Issue

Hi all,
While loading AS2 certificate of the Trading Partner in our system it is asking for the password to unloack the certificates but when i contacted the Trading Partner they have not set any password for the certificates . Can any one help what could be the issue ?
Thanks
Laks

Can be one of 2 reasons;
1. Your partner has provided you with the private key rather than the public cert. What is the extension of this certificate?
2. There is some enconding issue ; think Xi VA can import only, .cer, .crt and .der files; am not sure though.
Regards
Bhavesh

Seeburger AS2 Certificates updates

Dear Experts,
We're having a problem to add in new certificates from our partner. For your info we're using Seeburger AS2 connect and no one knows how to update the certificates including our vendors. Please let me know how to update the certificates. Thank you

Hi,
if you are on PI 7.1x go to Netweaver Administrator (http://server:port/nwa)
Then go to Configuration Management --> Security --> Certificates and Keys
There you shold find several Key Stores ("Key Storage Views")
Select the Keystore which holds the AS2 certificates.
If you are not sure which one is the correct one, check your Sender/Receiver Agreements in the Integration Directory.
The certificates that you specified as TRUSTED\<keystore>\certificate-name in your AS2 configuration are the ones you have to change.
In the "Key Storage View Details" you can add, modify, delete,... the certificates.
regards,
Daniel

AS2 Certificate Install for B2B Use

Oracle Team -
Is there a comprehensive set of instructions available on the FULL process necessary to get an AS2 connection up and running ?
I am looking for something that starts with the installation of the certificate in to the Oracle Wallet all the way thru setting up the Delivery Channel in B2B.
I have already looked at the tutorial in the B2B tech notes -- that starts after the certificate has already been installed.
Thanks,
Alice Raia

Hello,
We have sent the white paper on security to you.
As a summary,
10.1.2.0.2 B2B engine uses the certificate from the repository for both signing and encryption and also a lookup to the wallet for Private key, however this architecture has a significant change in subsequent releases.
Signing and Encryption for Host : Store the certificate in both wallet and repository
Signing and Encryption for TP : Store the certificate in repository. Please see the details of the same in the security document.
Rgds,Ramesh

BizTalk AS2 Certificate configuration problem

Hi,
I'm having a problem with signing a certificate to send port. I have imported 2 diferent certificates in mmc to "Local Computer\Other People" and "Local Computer\Trusted Root Certification Authorities". Then I went to BTAdmin and select
some Send Port then Certificate then Browse. One of certificates was there and other was not.
Then I went on this page
http://msdn.microsoft.com/en-us/library/bb728096.aspx and found this:
"Certificates used for AS2 transport must have the attributes required for their
intended use. For signing and signature verification, the Key Usage attribute
of the certificate must be Digital Signature.
For encryption and decryption, the Key Usage attribute
of the certificate must be Data Encipherment or Key
Encipherment. You can verify the Key
Usage attribute by double-clicking the certificate, clicking the Details tab
in the Certificate dialog
box, and checking the Key Usage field."
I have noticed that the certificate that is not showing in BTAdmin, does not have field "Key Uasge", but other one does have and its value is "Digital Signature, Key Encipherment (a0)". Is there any way to configure that
"not working" certificate, so that I can select it in BTAdmin or this is dead end?
Thanks in advance,
TG

In AS2 BizTalk a certificate on a Send Port would be is for signing and/or for encryption. So there is not any way to configure the existing/in present certificate. So one should have
to request a new one with there right key usage.
http://www.athenainfotech.co.uk/managed-b2b-services

AS2 certificates in B2B

I'm trying to setup an AS2 connection through B2B and having trouble setting up the host certificate. I've created a wallet and certificate request in OWM, installed the oracle certificate authority (oca), submitted the request and created the certificate. However, when I try to import the certificate back into owm I get an error saying that the installation failed with the possible errors: - input was not a valid certificate, - no matching request was found, or - ca certificate needed for certificate chain not found.
I installed the ca certificate from oca but I'm still getting the same error. Is there any documentation available on how to get owm and oca to work together?
Thanks!
-Sean

I got the same problem on iAS 9.0.4 and fininally gave it up. I installed iAS 9.0.4 to integrate 10g (only iAS 9.0.4 is support to integrate with Oracle apps 11.5.10).

AS2 Certificates and URL

Hi,
We are setting up a party and going to exchange via AS2.
As the messages would involve outbound and inbound, they had forwarded their certificates along with URL path.
Also, they were requesting GLN number. Please let me know what is it about.

Hi Krish,
>>As the messages would involve outbound and inbound, they had forwarded their certificates along with URL path.
Nwo you need to provide your certificates and url.. Generally there shoudl be a template for exchanging this information...
GLN number is an identification number, through which your messages are identified.. we call it as AS2ID
Regards
Suraj

AS2 Certificates

Hi,
I have a query with regards to AS2 Encryption and Decruption certificates.
Normally for an inbound scenario, we use our certificate to decrypt the message and sign the message.
We also send our certificates to customer so that they can encrypt the message before sending it to us.
I am confused with the certificates.
1. Is there two certificates called public and private? or is it just one certificate which is used both for encryption and decryption.
Looking at my scenario i have forward one certificate to customer who will encrypt and the same certificate is used at our side to decrypt.
Is this right or do we have any additional certificates for decryption?
Regards
Krish

there is always a pair which gets generated. One is .cer which is a public key and another .p12 which is a private key. Assume this might be right

Seeburger AS2 Certificate Issue

Hey,
We are facing an Issue while posting an EDI order to XI.
The sender system receives an error https 403 forbidden.
I assume this is an authorization error.
We had a certificate say XYZ.cert taht expired and hence we uploaded a new certificate say XYZ_1.cert
Now when the sender sends the data, the AS2ID is XYZ and the private key is XYZ.
i would like to know if any of these two values determine the certificate. because if that is the case then the sender data will refer to the old certificate which has expired.
Also if anyone has a different explanation for the error, please mention.
regards,
Milan Thaker

Hi Milan,
If you receiving EDI documents from your partner then in the sender agreement you will specify following certificates
1. Authenticate Certificate - Partner Public Key used to validate the signature of the partner
2.Decryption Key- Your Private Key (your certificate) to decrypt the message
So if you changed your certificate then you need to give your new certificate (public key) to your partner for encrypting.
Regards,
Prakash

Renewing public key certificate used for Seeburger AS2

My general question is when a public key certificate, used for Seeburger AS2 payload decryption and digital signatures, needs to be renewed, how carefully do the certificate renewal steps need to be coordinated for a seamless transition? More specifically...
1. Once we import the CSR response from the CA, will the public key currently used by our partner become invalid, or will it continue to work until its expiration date?
2. Will our partner be able to validate our signature after the new CSR has been imported, but prior to them applying the new public key certificate in their system?
3. Or can we renew the certificate, import the CSR request, provide our partner with the renewed certificate, and let them apply the certificate at their own volition, provided they do it prior to the original certificate expiration?

Hi Kurt
In my experience, the renewal/replacement of AS2 certificates for encryption/decryption & signing/authentication requires coordinated effort on both sides.
This is because AS2 uses asymmetrical encryption, so both parties need to use the same pair of certificates at the same time, i.e. you encrypt on your private key, and partner decrypt on the public key matching your private key. If the keys used do not belong to the same pair, then decryption will not work.
I'm not sure what AS2 software your partner uses and if it has the feature of automatic rollover of certificate, but PI/Seeburger does not. The approach in PI/Seeburger can either be one of the following:-
i) import new cert replacing original cert of the same name
ii) import new cert into new name, manually update sender/receiver agreements
Due to the manual nature of the tasks, normally it requires coordinated effort during a cutover window.
Rgds
Eng Swee

AS2 Adapter changing SSL Cert

Guys do you know how to use the AS2 Adapter ?. Our Customer is complaining that Invoices sent to them are now being rejected due to signing problem.
The Receiver Agreement has Security Settings for AS2 Sender Signing Key TRUSTED\ mycompanykeys \ mycompanykey
and AS2 Receiver Encrypt and Auth certicate TRUSTED\ mycompanykeys \ customercert
But if I have a new certificate were and how do I physically put this on the server ?

Hi,
As rightly stated it is an issue with the certificates.
To uplaod the certificates is the responsibilty of the BASIS team.However if you are suppose to do the settings than this is the procedure.
First thing you need to check is whether the SSL service is active. This youo can check in transaction SMICM>Goto> service.
Incase if you do not see the SSL service here then you need to active the service.
Please refer to the following procedure to activate the service.
http://help.sap.com/saphelp_nwpi71/helpdata/en/14/ef2940cbf2195de10000000a1550b0/content.htm
Once this is done there are certain adapter specific settings, for this please refer to the following link.
http://help.sap.com/saphelp_nwpi71/helpdata/en/f5/799add57aeee4f889265094a04695c/frameset.htm
After finishing the above two procedures the certificates will be successfully uploaded in the system.(AS2 requires two kinds of certificate i.e.e SSL for encryping serving information i.e. host, port etc and second is the AS2 certificates to encypt the actual payload)
Once the AS2 certificates of the sender are uplaoded in the XI server then the name of this certificate is to be given in the Key trusted that you have mentioned.
regards,
Milan Thaker.

AS2 Adapter Error: Error while parsing AS2 message: AUTHENTICATION_ERROR #

Hi,
Following Scenario: Inbound.
i have been receiving messages via Seeburger AS2 Adapter with the following Error message
Error while parsing AS2 message: AUTHENTICATION_ERROR #
I have done the following in the AS2 adapter as per findings in the forum
1. Unchecked the Authentication Required Flag.
2. AS2 Certificates are fine.
3. Use Authentication: Disabled (there is no authentication)
even though every thing seems to be fine i am not able to receive messages successfully. Please let me know what could have gone wrong here.

Hi Venkatesh,
>> Everything is provided in the Sender Agreement. Partners Certificate, Self Encryption & Signing certificate
How come you are using encryption when you are receiving the message. I think it might be decryption.
1. Anyway please cross check whether you provide the following correct details in Sender agreement.
Sender Configuration
Authentication Certificate : Partner's public certificate.
AS2 Receiver Configuration
Decryption Key : Own private key.
Signing Key : Own private key.
2. Can you please check and tell in the Seeburger Monitoring for the incoming message, whether they are sending the message with encryption and signing? This you can check in the Seeburger Monitoring.

AS2 Certificate

Similar Messages

Maybe you are looking for