The information below is taken from SAP Note 2009878 – Purpose of the PSE Files in PSE Management of SAP Web Dispatcher.
The drop down list for PSE selection shows predefined PSE files as well as PSE files in the security directory (parameter SECUDIR) . The PSE files in the Web administration interface have a certain purpose.
If you run your SAP Web Dispatcher in standalone scenarios, you will see the following predefined PSE files:
SAPSSLS.pse
SSL server PSE. This file is used by default for a SSL server initialization. The SSL server should have a Distinguished Name with its host or at least domain name in the DN attributes. Example: Server with name server.mysap.com should either have subject DN “CN=server.mysap.com” or “CN=*.mysap.com”.
SAPSSLC.pse
SSL client PSE. This file is used by default for a SSL client initialization.
SAPSSLA.pse
SSL anonymous PSE. This name is the default value for a SSL client communication you use for anonymous connections, without partner verification.
If you use a Web Dispatcher in the HANA XS installation, you see the following predefined PSE files:
SAPSSLS.pse
SSL server PSE. This file is used by default for a SSL server initialization. The SSL server should have a Distinguished Name with its host or at least domain name in the DN attributes. Example: Server with name server.mysap.com should either have subject DN “CN=server.mysap.com” or “CN=*.mysap.com”.
SAPSSLC.pse
SSL client PSE. This file is used by default for a SSL client initialization.
SAPSSLA.pse
SSL anonymous PSE. This name is the default value for a SSL client communication you use for anonymous connections, without partner verification.
saplogon.pse
Single Sign-On PSE for SAP logon ticket validation and SAP assertion ticket creation and validation.
sapsrv.pse
SSL server PSE for SQL communications with the HANA DB. The same rules apply for the subject name as for SAPSSLS.pse. If HANA is SAML enabled, this PSE is also used for SAML trust configuration.
Remark: The predefined PSE files you see here are generated at startup of the Web Dispatcher if the PSE is not available. This means that the existing entries you see after first usage are generated. You can decide whether you want to recreate the key pair of these PSE files. The generation is done with the best known default values for the respective PSE.
