Certificate management

Keeping the certificates a system trusts and presents over TLS current: importing root and intermediate CAs, requesting and importing its own signed certificate, and replacing one before it expires. Storing and rotating passwords and keys an application reads is secrets rotation.

Overview

SAP SHIPS

The Trust Manager, transaction STRUST, generates key pairs, creates certificate requests for a CA to sign and maintains the list of trusted CAs a server accepts.

Not covered: At maintenance in the transaction. SAP's page describes no warning for a certificate close to expiry and no update of the trusted CAs from a published list.

abapPM/ABAP-Strust wraps STRUST in a class a program can call, and zstrust updates the root CAs from Mozilla's certificate store. Both work on the PSEs STRUST maintains; how they relate to it has not been assessed.