Single Sign On Certificate Installation on IE

Error - Applying for an SAP Passport

The SAP Passport was not installed in your browser.

1. No technical request data was transferred from the previous page. Usually this occurs if ActiveX is not enabled.
2. Enable 'Active X plugins' in the Internet Explorer:
   Tools> Internet Options > Tab Security> Custom Level... > Mark Run ActiveX controls and plug-ins.
3. Click on Apply for SAP Passport again.

Error – Applying for an SAP Passport (ActiveX Issue)

This issue forced me to think more on it why this is happening on, what's wrong we did after following instructions from SAP help also as below

What ActiveX settings do I need with the Internet Explorer?

In the menu bar of the Internet Explorer choose the following path:

• Tools> Internet Options> Security tab > Custom Level...

Set the following entries to Enable or Prompt:

• Download signed ActiveX controls
• Run ActiveX controls and plug-ins
• Script ActiveX controls marked safe for script

Make sure that ActiveX is enabled and follow these steps:

Adding Trusted Sites to the Internet Explorer

1. Start your Internet Explorer
2. Find the Internet Options: Tools→ Internet Options.
3. You can see the Internet Options now. Click on the tab Security.
4. We have to add two trusted sites: Click on Trusted Sites and use the button Sites.
5. Add the following two links to the trusted sites list:
   • https://tcs.mysap.com
   • https://*.sap-ag.de
6. Close this window by clicking on Close and the Internet Options by clicking on OK.

1. Follow http://service.sap.com/tcsrootcert.
2. Use the link SAP Passport CA Certificate.
3. You get a file download warning. Choose the option Open.
4. On the next window use the button Install Certificate...
5. The Certificate Import Wizard starts. Proceed by clicking on Next.
6. Select the option Place all certificates in the following store and click on Browse.
7. Choose the store Trusted Root Certification Authorities.
8. Click on Next and afterwards on Finish.
9. Confirm the security warning with Yes.
10. You should get a successful import notification.

If you still encounter problems in Windows Vista, please refer to http://support.microsoft.com/kb/932156/en-us.

How do I enable SAP Passports for Windows 7?

Please follow the steps for Windows Vista and if you still encounter problems, please refer to http://support.microsoft.com/kb/974431/en-us

After following all the recommendations by SAP without any success, i followed below steps for a successful SSO certificate import on IE.

1. 1.As i was using Firefox and on the same i have imported or applied the certificate i backed up the certificate as by choosing

Firefox ---> Options --->Advanced ----> Certificates ---> View Certificates

Image may be NSFW.
Clik here to view.

Select the valid certificate for Backup and export or save this on system as PKCS12 files.

Image may be NSFW.
Clik here to view.

Image may be NSFW.
Clik here to view.

Supply Certificate backup password, here best is to use S-User Password or you can use any

Image may be NSFW.
Clik here to view.

Now you have one valid SSO certificate PKCS12 file on your system.

Image may be NSFW.
Clik here to view.

Next step is to import this PKCS12 file into the Internet Explorer Certificates tab .So for import please follow below steps as performed by me.

Go to Internet Options ---> Content ---> Certificates

Image may be NSFW.
Clik here to view.

Here just click on Import to browse saved PKCS12 file means SSO valid certificate.

Image may be NSFW.
Clik here to view.

Click on Next

Image may be NSFW.
Clik here to view.

and proceed with Next to install or maintain Certificate on IE and browse for the exported certificate file

Image may be NSFW.
Clik here to view.

On selection of Next you’ll be prompt for password to import certificate like

Image may be NSFW.
Clik here to view.

On password please give the password of your S-USER or which you supplied at the time of export from firefox browser.

Image may be NSFW.
Clik here to view.