SAP Knowledge Base Article 1670073 - How -To: Generate keystore and certificate in the process of configuring STS for SAP BI4.0 Version 1 Validity: 03.01.2012 - active Language English Symptom l l l l l l This article will explain how to generate the keystore file and the certificate required to setup STS with BI 4.0. In the below example the keystore file name is keystore.p12 and the certificate file name is cert.der. The keystore file keystore.p12 has to be imported in BI 4.0 CMC on SAP Authentication Option tab The certificate file cert.der has to be imported in SAP BW with STRUSTSSO2 transaction. plamtree in the below example is host name of machine where BI 4.0 running mywin in the below example is alias name that you can name the way you want. Environment l l SAP Business Intelligence 4.0 UNIX / LINUX / WINDOWS Resolution 1. Run PKCS12Tool program to generate keystore PKCS12Tool Windows location: <INSTALLDIR>\SAP BusinessObjects Enterprise XI4.0\java\lib PKCS12Tool Unix location : <INSTALLDIR>/sap_bobj/enterprise_xi40/java/lib l Windows command line example: C:\Program Files (x86)\SAP BusinessObjects Enterprise XI4.0\java\lib>"C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\java" -jar PKCS12Tool.jar -alias mywin -storepass admin1 -dname CN=palmtree l Unix/Linux command line example : */sap_bobj/enterprise_xi40/java/lib>/sap_bobj/enterprise_xi40/linux_x64/sapjvm/bin/java -jar PKCS12Tool.jar -alias mywin -storepass admin1 -dname CN=palmtree 2. Generate certificate with keytool Enter keystore password which is defined in the previous step. (In this example the password is: admin1) l Windows command line example: C:\Program Files (x86)\SAP BusinessObjects Enterprise XI4.0\java\lib>"C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\keytool" -exportcert -keystore keystore.p12 -storetype pkcs12 -file cert.der alias mywin l Unix/Linux command line example : */sap_bobj/enterprise_xi40/java/lib>/sap_bobj/enterprise_xi40/linux_x64/sapjvm/bin/keytool -exportcert -keystore keystore.p12 storetype pkcs12 -file cert.der -alias mywin See Also http://wiki.sdn.sap.com/wiki/display/BOBJ/Generate+keystore+and+certificate+for+SAP+BO+BI4.0 1656989 - Using OLAP BICS connection with SSO for AD/LDAP users in BI 4.0 Keywords sts unix linux windows certificate keystore Header Data Released On 10.01.2012 10:18:20 Release Status Released to Customer Component BI-BIP-AUT Authentication, ActiveDirectory, LDAP, SSO, Vintela Priority Normal Category How To Product Product Product Version SAP BusinessObjects Business Intelligence platform SAP BusinessObjects Business Intelligence platform 4.0 Attachments File Name File Size (KB) Mime Type pkcs12tool.jpg 57985 image/pjpeg