ROI iAM

Appearance

Certificate Exchange ​

This guide covers the certificate exchange between BTP Integration Suite and SAP NetWeaver AS JAVA required for the IdM accelerator integration.

Prerequisites ​

  • The installation steps of the IdM accelerator must be completed.
  • The repository is configured on the ROI iAM side (source, target, and system details).
  • The initial load of the system has been executed in ROI iAM.
  • All HR users must exist in ROI iAM and have their ROIAM_IDENTIFIER_<hubName> populated in IdM.

1. Identify the JVM libPath ​

Open a terminal or PowerShell session on the NetWeaver server and locate the NetWeaver installation directory.

  1. Run the following command:

    text
    <netweaverDirectory>/work/jstart.jvm

    Where:

    • <netweaverDirectory> – SAP NetWeaver AS directory. Example: /usr/sap/<instanceName>/<instance>
    • <instanceName> – Example: ASD
    • <instance> – Example: J00

  2. Locate the libPath value in the output. For example:

    text
    /usr/sap/<instanceName>/<instance>/exe/sapjvm_8/jre/lib/amd64/server
/usr/sap/<instanceName>/<instance>/exe/sapjvm_8/jre/lib/amd64

2. Verify the Java Keystore Location ​

Confirm that the Java keystore file exists before proceeding with the certificate import.

  1. Navigate to the Java security directory, typically:

    text
    /usr/sap/<instanceName>/<instance>/exe/sapjvm_8/jre/lib/security

  2. Verify that the cacerts file exists in that directory.

3. Prepare the Integration Suite Certificate ​

Follow the steps in the Preparation guide: Subaccount B to download the certificate.

4. Import the Certificate into the Keystore ​

Import the downloaded certificate into the NetWeaver Java keystore.

  1. Run the following command to import the certificate:

    text
    keytool -keystore <netweaverDirectory>/exe/sapjvm_8/jre/lib/security/cacerts -storepass <keystorePass> -alias CI-G5_Root -import -file <integrationSuiteDirectory>

    Where:

    • <keystorePass> – Password for the keystore. The default value is changeit.
    • <integrationSuiteDirectory> – Path to the .cer file downloaded in the previous step.

  2. When prompted, confirm the import.