Encryption and signing

On BTP the concern is where the keys are kept: the application runs the signing or the encryption in its own code and retrieves the keystore from a service instead of carrying it in its bundle.

Overview

SAP SHIPS

SAP Keystore Service holds the keys and certificates an application retrieves at runtime and uses itself to sign and verify digital signatures and to encrypt and decrypt messages.

Not covered: In the Neo environment. Its one plan is listed in Neo data centres and in Moscow and Riyadh, and in the regions marked Neo the service leaves the Eligible Cloud Services List on December 31, 2028.

One provider on this door and it is SAP's, so core-only is a assessment of the corpus rather than a quote from the core.

SourceSAP Discovery Center — SAP Keystore Servicechecked 2026-09-15