Technology Blogs by Members
Explore a vibrant mix of technical expertise, industry insights, and tech buzz in member blogs covering SAP products, technology, and events. Get in the mix!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

SAP Passport Single Sign On Certificate Installation on IE with use of Firefox

former_member182657
Active Contributor
‎02-11-2014 6:08 PM

Dear All,

Today i am going to create my first Document on scn community.Hope this document will be helpful for SAP experts also.

Purpose of creation of document is to install certificate on IE browser.Yesterday i searched one discussion over scn sso certificate not installed windows 8.1   

For the solution i also searched lot over service marketplace & on search engines also and provided some solution but every time users getting same issue i.e

Error - Applying for an SAP Passport

The SAP Passport was not installed in your browser.

  1. No technical request data was transferred from the previous page. Usually this occurs if ActiveX is not enabled.
  2. Enable 'Active X plugins' in the Internet Explorer:
    Tools > Internet Options > Tab Security > Custom Level... > Mark Run ActiveX controls and plug-ins.
  3. Click on Apply for SAP Passport again.
To cross check the same i also tried to import SSO certificate on IE and on this i was confident about successful SSO installation for IE on my system, but at the time of apply passport i faced same issue which users are getting.

Error – Applying for an SAP Passport (ActiveX Issue)

This issue forced me to think more on it why this is happening on, what's wrong we did after following instructions from SAP help also as below

What ActiveX settings do I need with the Internet Explorer?


You only need the ActiveX settings for Internet Explorer, not for Netscape.

In the menu bar of the Internet Explorer choose the following path:

  • Tools > Internet Options > Security tab > Custom Level...

Set the following entries to Enable or Prompt:

  • Download signed ActiveX controls
  • Run ActiveX controls and plug-ins
  • Script ActiveX controls marked safe for script
How do I enable SAP Passports for Windows Vista?

Make sure that ActiveX is enabled and follow these steps:

Adding Trusted Sites to the Internet Explorer

  1. Start your Internet Explorer
  2. Find the Internet Options: Tools → Internet Options.
  3. You can see the Internet Options now. Click on the tab Security.
  4. We have to add two trusted sites: Click on Trusted Sites and use the button Sites.
  5. Add the following two links to the trusted sites list:
  6. Close this window by clicking on Close and the Internet Options by clicking on OK.
Download and Install the Certificate
  1. Follow http://service.sap.com/tcsrootcert.
  2. Use the link SAP Passport CA Certificate.
  3. You get a file download warning. Choose the option Open.
  4. On the next window use the button Install Certificate...
  5. The Certificate Import Wizard starts. Proceed by clicking on Next.
  6. Select the option Place all certificates in the following store and click on Browse.
  7. Choose the store Trusted Root Certification Authorities.
  8. Click on Next and afterwards on Finish.
  9. Confirm the security warning with Yes.
  10. You should get a successful import notification.

If you still encounter problems in Windows Vista, please refer to http://support.microsoft.com/kb/932156/en-us.

How do I enable SAP Passports for Windows 7?

Please follow the steps for Windows Vista and if you still encounter problems, please refer to http://support.microsoft.com/kb/974431/en-us

After following all the recommendations by SAP without any success, i followed below steps for a successful SSO certificate import on IE.

  1. 1.As i was using Firefox and on the same i have imported or applied the certificate i backed up the certificate as by choosing

Firefox ---> Options --->Advanced ----> Certificates ---> View Certificates

Select the valid certificate for Backup and export or save this on system as PKCS12 files.


Supply Certificate backup password, here best is to use S-User Password or you can use any


Now you have one valid SSO certificate PKCS12 file on your system.

Next step is to import this PKCS12 file into the Internet Explorer Certificates tab .So for import please follow below steps as performed by me.

Go to Internet Options ---> Content ---> Certificates


Here just click on Import to browse saved PKCS12 file means SSO valid certificate.

Click on Next

and proceed with Next to install or maintain Certificate on IE and browse for the exported certificate file

On selection of Next you’ll be prompt for password to import certificate like

On password please give the password of your S-USER or which you supplied at the time of export from firefox browser.

Use Automatically select the certificate store based on the type of certificate.

Choose Next to proceed.

Finally click on Finish to get

and dear friends now you can get certificate as like i got under certificates tab


After all these steps you all will be able to logon through IE ,without getting any ActiveX error .


Hope this document will help experts in future as a resolution for this type of issue with IE browser.

Thanks to all for encouraging me to write this document.


Best Regards,

Gaurav Rana

3 Comments
Labels in this area
Popular Blog Posts