What are some leading practices regarding SSL certificates for Career Site Builder (CSB) sites?

Comprehensive and Detailed In-Depth Explanation:SSL certificates secure CSB sites with HTTPS, ensuring candidate trust and data protection. Let’s delve into the leading practices:

Option B (Using CSB, customers and consultants can manage the entire SSL certificate renewal process without assistance from Product Support): Correct. CSB provides a self-service interface for certificate management.

SAP Documentation Excerpt: From theCareer Site Builder Administration Guide: “Customers and consultants can manage SSL certificate renewals entirely within Career Site Builder’s administrative interface, eliminating the need for Product Support assistance unless issues arise.”

Reasoning: In CSB > Settings > Site Configuration > SSL Management, users upload a renewed certificate (e.g., from a provider like DigiCert) before expiration. This process, tested in a sandbox, involves downloading the new .crt file, uploading it, and verifying the connection turns green, all without SAP support.

Practical Example: For “Best Run,” a consultant renews the careers.bestrun.com certificate 30 days before expiry, ensuring uninterrupted access.

Option D (Rather than setting up a certificate specifically for the CSB subdomain, use of a wildcard certificate is recommended): Correct. A wildcard certificate (e.g., *.bestrun.com) covers multiple subdomains, simplifying administration.

SAP Documentation Excerpt: From theImplementation Handbook: “A leading practice is to use a wildcard SSL certificate (e.g., *.company.com) rather than a specific certificate for the CSB subdomain, as this supports multiple subdomains and reduces administrative overhead.”

Reasoning: A wildcard certificate secures careers.bestrun.com, jobs.bestrun.com, and staging.bestrun.com with one purchase and upload, reducing complexity. This is configured in Provisioning > Company Settings > SSL.

Practical Example: “Best Run” uses *.bestrun.com to cover all environments, verified by browsing each subdomain with a padlock icon.

Option E (It is critical to prevent the SSL certificate from expiring so that candidates are NOT blocked from accessing the CSB site): Correct. Expiration disrupts access, damaging candidate experience.

SAP Documentation Excerpt: From theCareer Site Builder Administration Guide: “Preventing SSL certificate expiration is critical to avoid blocking candidate access to the CSB site; an expired certificate results in security warnings and potential site inaccessibility.”

Reasoning: An expired certificate on careers.bestrun.com triggers a browser warning (e.g., “Not Secure”), halting applications. Renewal alerts in CSB > Settings prompt action 30 days prior.

Practical Example: “Best Run” sets a calendar reminder for renewal, avoiding a February 2025 outage.

Option A: Incorrect. The SSL process begins pre-production (e.g., during Stage setup) to ensure readiness, not post-move.

Option C: Incorrect. Stage often uses self-signed certificates for testing, not full SSL, per SAP’s deployment practice.SAP’s SSL best practices support B, D, E.References: SAP SuccessFactors Recruiting: Candidate Experience - Career Site Builder Administration Guide (SSL Management); Implementation Handbook.