SAP Knowledge Base Article - Preview

3093731 - How to set up TLS (Transport Layer Security) in SAP IQ16.X -- SAP IQ

Symptom

What is TLS?

Transport Layer Security (TLS), an IETF standard protocol, secures client/server communications using digital certificates and public-key cryptography. Transport layer security enables encryption, tamper detection, and certificate-based authentication. You can use transport layer security to secure communications between the database server and client applications. Transport Layer Security (TLS) is the successor protocol to Secure Sockets Layer (SSL).

Secure communication begins with an exchange of messages (a handshake) including server authentication.

Transport layer security uses server certificates to establish and maintain a secure connection. You create unique certificate files for each server. These are generally called “identity” files. The identity file resides with the database server.

You can use server authentication for SAP IQ client/server communication. A database client verifies the identity of an SAP IQ database server. This is called “authentication”. The client ensures that the server it is contacting is the correct server. The client uses a trusted certificate that was used to sign the server’s identity certificate. The database administrator keeps the server identity certificate safe on the database server computer and provides only a copy of the trusted certificate to the clients running on other computer systems.


Read more...

Environment

  • SAP IQ16.0
  • SAP IQ16.1

Product

SAP IQ 16.1

Keywords

TLS, SSL, security, certificate, encryption, trust, trusted, authentication, root, intermediate, identity, certificate chain, common name, issuer, private key, signer, self-signed , TLS handshake, , KBA , BC-SYB-IQ , Sybase IQ , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.