Install Sana Add-on in SAP Environment

Secure Sockets Layer (SSL) is a cryptographic protocol that helps provide security and data integrity for data communications over a network. By encrypting your Sana Web service for SAP using SSL, you make your data and the network more secure and more reliable.

It is required to secure data transfer between the Sana web store and SAP.

Prerequisites  

• The server which hosts the Sana Web service for SAP must support TLS 1.2.
• Before configuring the Web service to use SSL, you must obtain a security certificate for the Web service domain. The certificate is issued by a certificate authority (CA). If this is a test environment, you can create and use a self-signed SSL certificate. The self-signed SSL certificate can be used only for testing purposes.

Import SSL certificate

If you use the SSL Client Certificate, the client authentication is performed by the HTTPS protocol. The target system must handle the issuer of the SAP NW AS SSL Client Certificate as trusted.

Using Trust Manager (STRUST), you must import the SSL certificate under SSL Client (Standard).

If this is a test environment, you can create a self-signed SSL certificate directly in the Trust Manager and use it. The self-signed SSL certificate can be used only for testing purposes.

Enable SSL for the Sana Web service

Step 1: Call the transaction HTTP Service Hierarchy Maintenance (SICF).

Step 2: In the Hierarchy Type field select SERVICE and click Execute.

Step 3: Right-click on the sanaecom service and select Display Service.

Step 4: On the Logon Data tab, in the Security Requirement section, select SSL.

Step 5: Make sure the service port number is available for the HTTPS protocol.

 NOTE

The Web service URL is needed to establish connection between Sana and SAP. It should be entered in the ERP connection settings in Sana Admin. Thus, send the Web service URL with the https protocol and the correct service port number to the person who is responsible for Sana Commerce installation on Web and database server.

Example:
https://sana-sap.net:44310/sanaecom/adapter/executerequest