SAProuter_change of machine

[Former Member]

Hi group,

We have changed the SAProuter machine both are windows and 32bit (Wind2K3 server)

We did as below

1. we selected one windows workstation

2. Installed Windows Server 2003 Enterprise edition

3. this new machine placed in the location of old machine (Same IP but

host name different)

4. saprouttab file copied to new machine

5. Downloaded saprouter_14-20001568.sar of version 700 and executed

6. Uncarred teh above sar file to get saprouter.exe and nipping.exe

files

7. Downloaded & installed service connector

8. Downloaded sapcrypto.car file and uncarred the same

Now for generating local.pse and certreq files we executed teh command

as below

C:\saprouter>sapgenpse.exe get_pse u2013v u2013r certreq u2013p local.pseu201D

CN=SAPROUTER, OU=0000693937, OU=SAProuter, O=SAP, C=DEu201D

(Distinguished name we used existing one. . . )

It is throughing error as

The image file C:\saprouter>sapgenpse.exe is valid, but is for a machine type other than the current machine. . .

-

---

Our new machine is 32 bit X86 processor. Hence I downloaded

90000101.CAR - SAP Cryptographic Library Microsoft Win32 for x86/IA32

Same uncarred and tried to execute the command

C:\saprouter>sapgenpse.exe get_pse u2013v u2013r certreq u2013p local.pseu201D

CN=SAPROUTER, OU=0000693937, OU=SAProuter, O=SAP, C=DEu201D

Output: The image file C:\saprouter>sapgenpse.exe is valid, but is for amachine type other than the current machine. . .

-

---

Any idea one can share. . .

regards

s@pm@n

[Former Member]

Hi,

It is working fine now . .

1. Copied all data in c:/saprouter directory to same path of new machine.

2. Maintained same host name and IP address for new machine same as old one . .

subsequently every thing went fine . .

regards

[JPReyes]

Yes, if any of the details of your SAPRouter changes you need to notify SAP and recreate the certificates in SAP Marketplace.

All the info you need is at http://service.sap.com/saprouter

Regards

Juan

[Former Member]

Please follow the below

sapgenpse get_pse -v -r certreq -p local.pse "CN=SAPROUTER, OU=0000027510, OU=SAProuter, O=SAP, C=DE"

DO NOT GIVE PIN JUST PRESS ENTER

Display the output file "certreq" and with copy&paste (including the BEGIN and END statement) insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.

In response you will receive the certificate signed by the CA in the Service Marketplace. Copy&paste the text to a new local file named "srcert", which must be created in the same directory as the sapgenpse executable

sapgenpse import_own_cert -c srcert -p local.pse

Make sure the below.

1. No local.pse should be there in the location where you execute the command.

2. Set the env SNC_LIB where the libsapcrypto.so file exists( Eg:SNC_LIB /usr/sap/<SID>/DVEBMGS00/sec/libsapcrypto.so)

Hope this will work.

Thanks.

[Former Member]

Hi,

I think you need to let SAP know so they can update new host name at their end. You may want to double check with your network guys if you have VPN connection with SAP. Make sure that ports are open. Please make sure that you can ping sap from your windows box. We had similar issues and we faced NETWORK issues.

Can you ping RFC OSS from R/3 system (sm59)?

Thanks,