From SAP ERP, export server certificate from tcode STRUST/STRUSTSSO2 -> SSL server Standard and import it in SAP CPI
Import certificate generated from SAP CPI into tcode STRUST/STRUSTSSO2 -> SSL client SSL Client (Standard) and SSL client SSL Client(Anonymous)