trusted root certificate for internal.cloudapp.net

Muhammad Ali 0 Reputation points
2023-02-27T04:28:15.3133333+00:00

Hi

We are configuring Azure Application gateway for SAP Web Dispatcher. We configured v2 SKU as recommended by SAP.

We freshly installed two SAP Web Dispatchers with the similar URL

ABC.internal.cloudapp.net

XYZ.internal.cloudapp.net

We noticed that we do not have trusted root certificate in SAP Web Dispatcher that we have to upload on Trusted Root Certificate section in Backend setting in Azure Application Gateway and we are stuck here. Do we need to send the Web Dispatcher to any signing authority to sign it first ? Please note that we will use custom domain (different from cloudapp.net) as an entry point URL of SAP Azure Application gateway.

We need to know how can we get the trusted root certificate of SAP Web Dispatcher for internal.cloudapp.net

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
612 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. GitaraniSharma-MSFT 29,506 Reputation points Microsoft Employee
    2023-02-27T15:21:53.6+00:00

    Hello @Muhammad Ali ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    I understand that you configured Azure Application gateway v2 SKU for SAP Web Dispatcher and would like to know how to get the trusted root certificate of SAP Web Dispatcher (URL: internal.cloudapp.net), which can be uploaded on the Trusted Root Certificate section in Backend setting in Azure Application Gateway.

    The Azure architecture guide for SAP NetWeaver refers to the SAP help portal or wiki for any configuration related need:

    https://learn.microsoft.com/en-us/azure/architecture/guide/sap/sap-netweaver#sap-web-dispatcher

    https://learn.microsoft.com/en-us/azure/architecture/guide/sap/sap-internet-inbound-outbound#components

    I don't have expertise on SAP Web Dispatcher, but a quick search gave me the below links which shows how to configure SAP Web Dispatcher to Support SSL and how to set up a Valid Server Certificate in SAP Web Dispatcher:

    https://help.sap.com/docs/ABAP_PLATFORM_NEW/683d6a1797a34730a6e005d1e8de6f22/493db10a19341067e10000000a42189c.html?version=202009.000&locale=en-US

    https://help.sap.com/docs/SAP_NETWEAVER_AS_ABAP_752/683d6a1797a34730a6e005d1e8de6f22/c6b6d472e32d4b61abfc8ec3ef9f2676.html?version=7.52.8&locale=en-US

    You can also refer the below SAP blog which shows how to setup Azure Application Gateway Web Application Firewall (WAF) v2 for Internet facing SAP Fiori Apps which are accessible from Intranet directly using SAP Web Dispatcher URL (internal.cloudapp.net).

    Refer: https://blogs.sap.com/2020/12/03/sap-on-azure-application-gateway-web-application-firewall-waf-v2-setup-for-internet-facing-sap-fiori-apps/

    If you need help in SAP web dispatcher configuration, I would request you to post your question on SAP community:

    https://answers.sap.com/index.html

    You can also see the previous questions asked by users on SAP web dispatcher certificate setup in the SAP community:

    https://community.sap.com/search/?ct=qa&qt=all&q=trusted+certificate+on+SAP+web+dispatcher

    If you need any help with the Application gateway configuration, you can comment below, and we can work on it further.

    Kindly let us know if the above helps or you need further assistance on this issue.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.