2461976 - How to Configure Authentication using Client Certificates (ClientCertLoginModule) | SAP Knowledge Base Article

SAP Knowledge Base Articles - preview

2461976 - How to Configure Authentication using Client Certificates (ClientCertLoginModule)


The aim of this KBA is to specify the basic steps needed to configure authentication on SAP Application Server JAVA using client certificates (ClientCertLoginModule and CertPersisterLoginModule).



  • SAP NetWeaver
  • Release Independent


SAP Composition Environment all versions ; SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions ; SAP Process Integration all versions ; SAP Solution Manager all versions


Production ABAP R/3 ERP SRM CRM ERP PPM SEM APO XI PI PORTAL Test development QA useradmin intention configured client certificates logon screen name/password SAP Application Server JAVA SSL parameter ume.logon.allow_cert true root certificates ICM_SSL_<instance_ID> VCLIENT ICM ClientCertLoginModule login module stack authentication options Stored Certificate Mappings Rules Based Subject Names ume.login.context CertPersisterLoginModule test
, KBA , BC-JAS-SEC-LGN , Logon, SSO , BC-JAS-SEC , Security, User Management , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.