For secure outbound HTTP communication (HTTPS), the SAP Cloud Integration tenant acts as a client connecting to a remote server. To establish trust and validate the server's identity, the client (Cloud Integration) must have the server's public certificate, or the certificate of the Certificate Authority (CA) that issued it, in its truststore. This is managed within the tenant's keystore. The correct procedure is to navigate to the Operations/Monitoring view, select "Manage Keystore" under the Manage Security section, and import the receiver's server certificate.

A. Import the Receiver Server Certificate in Operations > manage Security > Security Material: While the action of importing the server certificate is correct, "Manage Keystore" is the specific and accurate name of the UI tile, making "Security Material" a less precise term.

C. Import the Receiver Client Certificate in Operations > Manage Security > Manage Keystore: A client certificate is used by a server to authenticate a client (mutual authentication), not by a client to authenticate a server, which is the scenario described.

D. Import the Receiver Client Certificate in Operations > Manage Security > Security Material: This option is incorrect for two reasons: it incorrectly specifies a "Client Certificate" and uses the less precise term "Security Material" instead of "Manage Keystore."

1. SAP Help Portal

SAP Cloud Integration

Managing Keystore Entries: "For outbound communication

the integration flow on the tenant connects to a remote system (as a client). To check the identity of the server

the server certificate is required. Therefore

you need to get the server certificate from the remote system and import it into the tenant keystore." This confirms that the server certificate is imported into the keystore for outbound connections.

2. SAP Help Portal

SAP Cloud Integration

Tasks and Tools in the Operations View: In the section "Manage Security

" the "Keystore" tile is listed with the description: "Manage keys and certificates for secure communication." This confirms the correct navigation path and terminology is "Manage Keystore."

3. SAP Help Portal

SAP Cloud Integration

Add a Certificate to the Keystore: "You can add a certificate to the keystore. For example

for outbound connections

you need to add the server certificate of the receiver system to the keystore." This explicitly links the action of adding a certificate to the keystore with the requirement for outbound connections.