1. /usr/sap/SAPBusinessOne/Common/sapjvm_8/jre/bin/keytool -list -storetype pkcs12 -keystore /usr/sap/SAPBusinessOne/Common/tomcat/cert/https.p12 -v # check your alias
  2. /usr/sap/SAPBusinessOne/Common/jre/bin/java -jar /usr/sap/SAPBusinessOne/Common/support/bin/encryptionTool.jar -e “lala” # encrypt your sld certificate password
  3. vi /usr/sap/SAPBusinessOne/WebClient/env.sh # update WEBCLIENT_TLS_KEYSTORE, WEBCLIENT_TLS_PASSWORD_ENCYPTED, WEBCLIENT_TLS_KEY_ALIAS

Then systemctl restart sapb1servertools & webclient accordingly.