sap router renew problem

[former_member182505]

hi experts

i m renewing my sap router as sap says. i followed the steps.

. Logon to host with username and password of SAP router service credentials

2. Stop the Saprouter service 3. Make a backup of the folder E:\usr\sap\saprouter

3a. This can be deleted after a successful upgrade

4. Delete this 4 files in E:\usr\sap\saprouter

4a. certreq

4b. cred_V2

4c. localpse

4d. srcert

5. Generate the certificate request using the following command 5a. E:\usr\sap\saprouter>sapgenpse get_pse u2013v u2013r certreq u2013p local.pse "your distinguish name"

Example- "CN=sap12301.oii.dom, OU=0000810973, OU=SAProuter, O=SAP, C=DE"

At this steps when i m entering the

C:\saprouter>sapgenpse get_pse -v -r certreq -p local.pse "CN=SAPDEV, OU=0000910

232, OU=SAProuter,O=SAP, C=DE"

Huh? I found 5 trailing unrecognized parameters on commandline!?

error is coming ..

kindly guide me.

thanks

[Former Member · Accepted solution]

Hello Sadiq,

try this:

1. Go to /usr/sap/saprouter

execute following command :

sapgenpse get_pse -v -r certreq -p local.pse "CN=SAProuter, OU=0000178802, OU=SAProuter, O=SAP, C=DE"

==> we will get new file named certreq

2. Go To https://service.sap.com/saprouter-sncadd

==> choose apply now

==> choose saprouter

==> copy and paste certreq into the text area

==> we will get new certicate

3. create new file srcert on /usr/sap/saprouter then copy & paste the new certificate

4. Go to /usr/sap/saprouter

execute following command :

sapgenpse import_own_cert -c srcert -p local.pse

sapgenpse seclogin -p local.pse -O exdadm

sapgenpse get_my_name -v -n Issuer

Rohit

[former_member182505 · Accepted solution]

hi

i my system there is c:\saprouter

and the sap is installed in e:\usr\sap

and there is sapgenpse.exe is not avalable in the c:\saprouter dir..

its in c:\saprouter\ntintel dir.

wht should i do......

thanks

[Former Member · Accepted solution]

go inside the directory c:\saprouter\ntintel and then run the command

Rohit

[former_member182505 · Accepted solution]

Hi

should i use the same line or i have to change.. it.

"CN=SAProuter, OU=0000178802, OU=SAProuter, O=SAP, C=DE"

thanks

[Former Member · Accepted solution]

leep it same and run the command

also please try the procedure that I have given,down worry it wll not do anything wrong

Rohit

[former_member182505 · Accepted solution]

hi

i execute the command and get the error

C:\saprouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=SAProuter,

OU=0000178802, OU=SAProuter, O=SAP, C=DE"

ERROR in windows_loadlib(): LoadLibrary("C:\saprouter\nt-x86_64\sapcrypto.dll")

FAILED:

(0x000000c1) = "FormatMessage() failed for lasterr = 0x000000c1"

Loading of DLL "C:\saprouter\nt-x86_64\sapcrypto.dll" failed!

You might need to adjust the DLL search path:

PATH=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files (x

86)\Java\j2re1.4.2_12\bin;C:\j2sdk1.4.2_17-x64\jre\bin;C:\Program Files (x86)\Mi

crosoft SQL Server\80\Tools\Binn\;C:\Program Files\Microsoft SQL Server\90\DTS\B

inn\;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files (x86)

\Microsoft SQL Server\90\Tools\binn\;C:\Program Files (x86)\Microsoft SQL Server

\90\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\90\Tools\Binn\VSShell\

Common7\IDE\;C:\Program F

[Former Member · Accepted solution]

Hi,

Check where is sapcryto.dll file located in your system?I think you will need to define the system variable defining the path of sapcryto.dll file

Also Refer to the complete steps for this

Saprouter needs to be stopped before doing this activity.

1. Logon to host with username and password of SAP router service credentials

2. Stop the Saprouter service 3. Make a backup of the folder E:\usr\sap\saprouter

3a. This can be deleted after a successful upgrade

4. Delete this 4 files in E:\usr\sap\saprouter

4a. certreq

4b. cred_V2

4c. localpse

4d. srcert

5. Generate the certificate request using the following command 5a. E:\usr\sap\saprouter>sapgenpse get_pse u2013v u2013r certreq u2013p local.pse "your distinguish name"

Example- "CN=sap12301.oii.dom, OU=0000810973, OU=SAProuter, O=SAP, C=DE"

5b. Enter a PIN of <xxxx>

6. Copy the contents of certreq to the clipboard

7. Go to http://www.service.sap.com/saprouter-sncadd

8. Paste the contents of the clipboard into the form

9. This will generate a new certificate, copy its contents into a file called srcert

9a. You will have to create srcert

10. Then import the certificated using the following command

10a. E:\usr\sap\saprouter>sapgenpse import_own_cert u2013c srcert u2013p local.pse

10b. Enter the PIN of <xxxx>

11. The setup the logon using the following command

11a. E:\usr\sap\saprouter>sapgenpse seclogin u2013p local.pse

11b. This will create a file called cred_V2

12. Check if the certificate has been loaded correctly by using the following command

12a. E:\usr\sap\saprouter>sapgenpse get_my_name u2013v u2013n Issuer

13. Start the Saprouter service

[former_member182505 · Accepted solution]

hi rohit

the file sapcryto.dll is located in the dir C:\saprouter\ntintel

thanks

[former_member182505 · Accepted solution]

hi rohit

when i m puting

saprouter>sapgenpse get_pse u2013v u2013r certreq u2013p local.pse

on the C:\saprouter\nt-x86_64\ dir its asking PIN should i put the pin.. and wht should be the pin..

[Former Member · Accepted solution]

you need to give a 4 digit number but remember this pin

Rohit

[former_member182505 · Accepted solution]

hi rohit

after puting the PIN its not moving.. its still waiting to move.. is it take time?

[Former Member · Accepted solution]

No it should not take time,once u enter the PIN it will ask to renter the PIN and move on

Rohit

[former_member182505 · Accepted solution]

hi

its saying this system can not find the patch specified.

[former_member182505 · Accepted solution]

hi

now its asking distinguish name wht should i do..

[former_member182505 · Accepted solution]

hi

in my saproutertab is like p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE

should i put it same

[Former Member · Accepted solution]

The distinguished name must be:

"CN= your hostname, OU 1234 ,OU=SAProuter,O=SAP,C=DE "

Refer to http://www.erpgenie.com/sapgenie/docs/SAP%20SNC%20CONFIGURATION.pdf

Rohit

[former_member182505 · Accepted solution]

hi rohit

issue solved ..thanks for great help.