File Adapter secure connection. SSL Portion. Pls explain

Hi All,
For File Adapter secure connection I am reading this blog:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4e1fc
Question:
For my File - XI- File Secure Scenario
I am not able to understand Certficate portion as given in blog:
a. There is creation of Server Public-Private Key Pair and
then there is creation of Client Public-Private Key Pair.?
b. Export of the Client generated Private Key to file ?
c.Import of the Client Private Key to the browser personal
certificates.?
Pls let me know which certificate to install at which place.
Regards

hi,
After PI7.0 support pack 10 RFC,SOAP,Xi these 3 adaptors supporting the security in message transfer level....you must select propagate principles in sender and receiver agreement ...
Regards,
Prakasu

Similar Messages

Questions about using FILE adapter to connect to other systems

Hi,
in my PI scenario i am facing a problem in usage of the file adapter.
Our PI system is installed on a UNIX server. The target system for upload an download files is a WINDOWS system. The software installed on the WINDOWS system is only able to export the needed file lokal on the WINDOWS server.
Between UNIX systems i can connect a together used fileshare folder. But this won´t help me in my UNIX <> WINDOWS scenario.
I thougt on using an FTP server on the WIDNOWS system to make the PI able to connect via the FTP adapter but this works fine for one or two systems. I don´t think that this ist the best solution when connection to a lot WINDOWS systems, but mayby i am wrong.
Actually i use UC4 to copy the files between the two systems.
Any ideas how to deal generally with such scenarios?
Many thanks
Michael

Even though if you map Unix and Windows OS to read the files, in the long run the design will put you in trouble. Means it requires constant support. Better you go with unix script as per the above suggestion.
Regards
Pothana

Crystal Report Server - SMTP over secured connection (SSL/TLS)

Hello All,Been looking around information on Crystal Reports Server but have not managed to find the information I need. So was wondering if anyone new if it is possible to distribute reports via SMTP over secured connections such as SSL/TLS using Crystal Reports Server? 

Only if the security is external to BO. our SMPT configuration does not have a built in configuration parameter to encrypt data.
Regards,
Tim

Cannot send email via Hotmail through port 587 with Secure Connection (SSL) set

Something is blocking my attempts to send email (with Outlook Express) via my hotmail.com account. The error I receive is as follows:
Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Account: 'Hotmail', Server: 'smtp.live.com', Protocol: SMTP, Port: 587, Secure(SSL): Yes, Error Number: 0x800CCC0F
When Hotmail.com first changed over to a POP3 server (Sept 2009), I could send emails through them using port 587, which they require. But then something happened, with no changes on my part, to disable my ability to send.
I have checked and rechecked my Outlook Express account settings. I can send email through another third-party mail account (at 1&1 Internet.com) using port 587, which does not require setting SSL to yes. I can also ping the Hotmail SMTP server via port 587 and receive a response from it.
I connect to Verizon DSL via a Westell 327W modem/router. Clearly it is not blocking port 587 without SSL. Does it have the capability to block SSL traffic? Or is the Verizon server the culprit, not allowing emails to be sent via Hotmail.com?
Two different computers on my LAN have the same problem sending emails via Hotmail.com. I have tried everything the Hotmail people have suggested; at this point they think it is an ISP problem, hence this post. This problem doesn't make sense to me and is driving me crazy. Can anyone help me with this?
Thanks.

You can still have your reply address set to your hotmail address. And you don't have to really remember to do anything. Configure your client for the HOTMAIL account with Verizon's outgoing server. It will automatically send via Verizon. You don't reveal your verizon.net address, you are just using their server to transmit.
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.
"All knowledge is worth having."

Sender File Adapter - FTP Connection Error 530

Need help!!!
I am getting the following error in XI when I try to connect to an ftp server.
"An error occured while connecting to server xxx.xx.x.xx:xx. The FTP server returned the following error message:'com.sap.aii.adapter.file.FTPEx: 530 Can't open passive connection---(4013)'. For details, contact FTP server vendor"
When I try the FTP connection on the OS level I am able to log in, but through XI I am unable to.
Has anyone seen this error before?

I have seen Error Code 530 earlier, it is typically related to login related issues.
Check if the user mentioned in the Comm Channel has the correct password and read as well as write rights on the Server.
The most likely problem is with the User Credentials or Authorizations

Secure connections SSL

I would like to know if connections using SSL from Oracle OCI clients are supported in the JDBC Thin Client technology.
Thanks you very much.

Hi Rosa
No, SSL is supported by JDBC OCI only.
Chris

Logging option on file adapter based JNDI

Hello,
While setting up a file adapter based JNDI, I notice under outbound connection, we have logging option where we have rotate logs based on size/time. Could someone please help me understand what does this refers to and how we can use that.
its under - Deployment -> File adapter -> Outbound connection -->"Select a JNDI created by you" -> Logging.
my JNDI, represent to a location where I am writing few specific log content in a text file. Can we handle(rotate) that based on this.
Pls advice.

Hi,
you need to create 40 channels if you have users
as dynamically you can only create:
File Name
Directory
File Type
File Encoding
Temporary Name Scheme for Target File Name
with FTP adapter
Regards,
michal
<a href="/people/michal.krawczyk2/blog/2005/06/28/xipi-faq-frequently-asked-questions">XI / PI FAQ - Frequently Asked Questions</a>

File adapter

Can we use File adapter to connect to SAP Server to read or write the files to SAP Server
Kris

Hi,
you have 2 options to do that:
1. you can use FTP - and allow FTP connections to SAP
server folders - File adapter can use FTP to connect to
those folders
Reminder
you have to use passive FTP connections till XI SP15
2. you can make Folders on SAP server visible from the XI
server (shared folders) this way you can also connect
with the use of the file adapter to get to the content
of the SAP server folders
Regards,
michal

Sender file Adapter, problem with proxy authentication

HI all,
i'm having some problems with the following scenario, i need to configure a sender file adapter which connects to a FTP server. To connect this FTP server i need to set a proxy (and so a username and a password), and i don't know how to do.
From note 821267 seems that the proxy is not supported for an FTP adapter, but the are some workaround like the ones described in the following link
Re: Proxy server inFTP adapter
http://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=57137
They don't work in my case as i need to se two username (the one for proxy and the one for the ftp server) and i cannot force the proxy use for all XI applications.
Can anyone help me?
Thanks a lot
Aldo

Proxy is necessary to exit the customer local intranet. It's not possible to go outside network without going through the proxy server.
I cannot set the proxy server in file adapter as it's not supported like described in SAp note, a possible workarounf is to force the proxy server in the J2ee stack but in this way all PI calls would use that proxy..

File adapter fails to pickup the complete file

Hi Guys,
I have a file to idoc scenario configured.
Sender is an FTP server and the file type is XML
Here are the details of my file adapter
FTP Connection parameters,
Connect Mode      : Permanently
Transfer Mode     : Binary
Processing parameters,
QoS     : Exactly Once
Poll Interval     : 15 secs
Processing Mode     : Archive
Most of the time my scenario works perfectly fine.
And sometimes my file adapter fails to pickup the complete xml file and my scenario fails.
The file is read partially and my mapping throws an error.
Am i missing any parameter to be set in File adapter???
Thanks in Advance,
BBnu

>>The file is read partially and my mapping throws an error.
Thats the normal behaviour of XI,if you get a partial file,you will get a error message.
There are several work arounds for this,first of all have a script independant of XI which is running on FTP server,this script will keep on checking for modifications in file and once the file is completely written,it will rename the file to some other extension(for e.g .dat) and XI file adapter will only pick .dat file,this will make sure that only complete files are picked up.
Second option is to have a tag all the way in the end of XML which says EOF(of any other character),in your mesage mappin create the root node of target only if this last tag is EOF.Since in incomplete file you will not have this last tag,message processing will stop.
Thanx
Aamir

File Read and Write using File Adapter in Bpel

In Bpel Process i am using File Adapter ( Schema is Opaque) for read and write the file contents. i am able do successful deployment and read, write function in first time deployment, after that again i tired to run the application, its not going to write the content of file, its only writing the file with out data's or content in that file.
Please help me...
Saravanan

Hi Eric
In my domain.log file having the following details. In this file im unable to find out what the exact problem. Please look at this and help me.
<2008-01-22 18:25:42,024> <INFO> <default.collaxa.cube.compiler> validating "C:\product\10.1.3.1\OracleAS_1\bpel\domains\default\tmp\.bpel_BPELProcess2_1.1_298e83988d77b6640c33dfeec11ed31b.tmp\BPELProcess2.bpel" ...
<2008-01-22 18:25:49,850> <INFO> <default.collaxa.cube.engine.deployment> <CubeProcessFactory::generateProcessClass>
Process "BPELProcess2" (revision "1.1") successfully compiled.
<2008-01-22 18:25:49,914> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> Loading JCAActivationAgent for {portType=Read_ptt}
<2008-01-22 18:25:49,914> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> JCAActivationAgent::load - Locating Adapter Framework instance: OraBPEL
<2008-01-22 18:25:49,930> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> JCAActivationAgent::load - Done loading JCAActivationAgent for processId='bpel://localhost/default/BPELProcess2~1.1/
<2008-01-22 18:25:49,930> <INFO> <default.collaxa.cube.engine.deployment> Process "BPELProcess2" (revision "1.1") successfully loaded.
<2008-01-22 18:26:02,698> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> JCAActivationAgent::uninit Shutting down the JCA activation agent, processId='bpel://localhost/default/BPELProcess2~1.0/', activation properties={portType=Read_ptt}
<2008-01-22 18:26:02,698> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> Adapter Framework instance: OraBPEL - performing endpointDeactivation for portType=Read_ptt, operation=Read
<2008-01-22 18:26:02,698> <INFO> <default.collaxa.cube.ws> <File Adapter::Outbound> Endpoint De-activation called in adapter for endpoint : D:\MAXIMUS_Project_Softwares\jdevstudiobase10132\jdev\mywork\MyLabs\BPELProcess2\in
<2008-01-22 18:26:02,698> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> JCAActivationAgent::init - Initializing the JCA activation agent, processId='bpel://localhost/default/BPELProcess2~1.1/
<2008-01-22 18:26:02,698> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> JCAActivationAgent::initiateInboundJcaEndpoint - Creating and initializing inbound JCA endpoint for:
process='bpel://localhost/default/BPELProcess2~1.1/'
domain='default'
WSDL location='rd.wsdl'
portType='Read_ptt'
operation='Read'
activation properties={portType=Read_ptt}
<2008-01-22 18:26:02,698> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> Adapter Framework instance: OraBPEL - endpointActivation for portType=Read_ptt, operation=Read
<2008-01-22 18:26:02,730> <INFO> <default.collaxa.cube.activation> <File Adapter::Inbound> Endpoint Activation called in File Adapter for endpoint: D:\MAXIMUS_Project_Softwares\jdevstudiobase10132\jdev\mywork\MyLabs\BPELProcess2\in
<2008-01-22 18:26:02,730> <INFO> <default.collaxa.cube.activation> <AdapterFramework::Inbound> Adapter Framework instance: OraBPEL - successfully completed endpointActivation for portType=Read_ptt, operation=Read
<2008-01-22 18:26:02,890> <WARN> <default.collaxa.cube.activation> <File Adapter::Inbound> PollWork::run exiting, Worker thread will die
<2008-01-22 18:26:04,171> <INFO> <default.collaxa.cube.ws> <File Adapter::Outbound> Managed Connection Created
<2008-01-22 18:26:04,171> <INFO> <default.collaxa.cube.ws> <File Adapter::Outbound> Connection Created
<2008-01-22 18:26:04,171> <INFO> <default.collaxa.cube.ws> <File Adapter::Outbound> FileInteraction Created

How to have Secure Connection for File Adapter.Pls help

Hi All,
For File to File Scenario
How to have Secure Connection for File Adapter.
Pls send links/blogs explaining this scenario.
Regards

hi rich
go through these links
FTPs connection failed - error ".. certificate rejected by ChainVerifier"
Re: What is SFTP, FTI channels
http://help.sap.com/saphelp_erp2005/helpdata/en/e3/94007075cae04f930cc4c034e411e1/frameset.htm
http://help.sap.com/saphelp_erp2005/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/frameset.htm
FTPS implementation question.
http://help.sap.com/saphelp_nw04s/helpdata/en/43/0e16bfd7b021aee10000000a1553f6/frameset.htm
Server certificate rejected by ChainVerifier:FTPS server(Points Guaranteed)
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
File adapter
thanks
Kunaal

FTP over SSL connectivity in File Adapter

Hi All,
I request your suggestion on my problem. I have a scenario idoc to file where I am connecting to my vendor server throught SFTP (Ftp over SSL). In this my vendor specifically told that to obtain secure FTP connectivity to their server they require a pre-approved Secure FTP client be used to access the service.
So as per this requirement first our XI server need to coneect to the pre-approved client and the connectivity will happen to the vender server. He list the pre-approved client as below
*Cleo Lexicom 2.1
*TrailBlazer ZMOD FTP Client V3R1 PTF Level PFT3100034
*QualEDI for Windows, 32-bit version
*Ascential DataStage TX, Release 7.5
*Future 3 - Advanced Communication Module Plus (ACM Plus)
*eBridge FTPS Communicator for GXS version 5.3
*Ipswitch Inc's WS_FTP Professional version 8.02.
·Robo-FTP version 3.2
Please let me know will this be possible from our file adapter. Currently as per this requirement we open up the port of XI server for SFTP connecvity but through this we can have host to host connection over SFTP and not sure whether we can connect to client software and from their to vendor sever.
Kindly needful your suggestion/solution on this.
Regards,
Dhill

Hi,
Thank you, Yes I have used FTPS only please find the below details given in the communication channel.
FTP Connection Parameters
Server: ServerName
Port : 6366 (specified by vendor)
Data connection : Passive
Timeout(secs) : 65
Connection Security: FTPS (FTP Using SSL/TLS) for Control and Data Connection
Command Order: AUTH TLS, USER, PASS, PBSZ, PROT
Keystore: service_ssl
X-509 Certificate and Private Key: ssl-credentials
User Name : Vendor user name
Password: Vendor given password
Connect Mode: Permanantly
Transfer Mode: Text
Maximum Concurrency: 1
and also as per he list given by vendeor we can use *Ipswitch Inc's WS_FTP Professional version 8.02.
Note: We have Deploying the SAP Java Cryptographic Toolkit and also CA certificate used to sign the server certificate added to the TrustedCAs keystore view.
So If possible i request you to kindly provide the details how we need to specify the client software between our XI server and Vender server as you mentioned in your solution.
Please let me know your mail id, i will forward the screenshot of my communication channel.
Kindly appreciate your help on this.
Regards,
Dhill.

File to File Scenario with Secure Connection. Pls help urgent

Hello All,
I tried a lot to get a link/blog that expalin full scenario
for File to File Scenario with Secure Connection
Kindly let me know if somebody have link/doc for it
that describe all the steps to do configuring this scenario.
What is difference in simple words between
FTPS and SFTP.
Pls help it is urgent as I require for Project work urgently.
Regards

hi rich
go through these links
FTPs connection failed - error ".. certificate rejected by ChainVerifier"
Re: What is SFTP, FTI channels
http://help.sap.com/saphelp_erp2005/helpdata/en/e3/94007075cae04f930cc4c034e411e1/frameset.htm
http://help.sap.com/saphelp_erp2005/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/frameset.htm
FTPS implementation question.
http://help.sap.com/saphelp_nw04s/helpdata/en/43/0e16bfd7b021aee10000000a1553f6/frameset.htm
Server certificate rejected by ChainVerifier:FTPS server(Points Guaranteed)
/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi
File adapter
thanks
Kunaal

I'm getting 'an ssl error has occurred and secure connection can not be made' I have upgraded to the latest OX version, but no joy in downloading a wetransfer file

I have received a retransfer file and if I try to open it I get the error message detailed above.

Have used it before with no problems.
Times have changed.
Older versions of SSL has been found to have some problems that have been patched (several different times) with Apple Security Updates. Unless wetransfer has kept up and patched these vulnerabilities, you may not be able to establish a secure connection with them (due to their software being out-if-date).

File Adapter secure connection. SSL Portion. Pls explain

Similar Messages

Maybe you are looking for