cancel
Showing results for 
Search instead for 
Did you mean: 

Read SAProuter certificate from local.pse

Former Member
0 Kudos

Hi @ all,

I want to read-out the information certifications from my SAProuter, which are located in the local.pse

As I've saw in the internet - following parameter should be used to read out the certification information:

<PATH> sapgenpse maintain_pk -l -p <PATH \local.pse

After I've entered the PIN I got following messeage:

maintain_pk for PSE "<PATH \local.pse"

PKList is empty

Do somebody know what does "PKList is empty" means and how can I avoid this message that I can read-out the informations?

Thanks in advance

Best regards

Alexander

Accepted Solutions (0)

Answers (1)

Answers (1)

JPReyes
Active Contributor
0 Kudos

What info are you looking for?

I don't think maintain_pk options is meant to be used to list SAPRouter certificates

Usually command sapgenpse get_my_name -v -n Issuer will show you the name of the issuer for the SAPRouter certificate

Regards

Juan

Former Member
0 Kudos

Hi,

I want to check e.g. the validity of the certifications; serialnumber, Certificate extension, etc.

as I want to create a complete list of certificates we use in our company in the SAP environment including the certificates from SAProuter.

To read out these informations I found in the internet the command

sapgenpse maintain_pk -l -p <PATH \local.pse

But I just get the message that PKList is empty.

With the sapgenpse get_my_name -v -n command I can't get these informations.

Thanks for further updates

Alexander

JPReyes
Active Contributor
0 Kudos

You can get the validity date by running sapgenpse get_my_name (without the switches)

Regards

Juan

Former Member
0 Kudos

I get the following error message when I try to open the .pse file via this command:

get_my_name: no PSE name supplied, no SSO credentials found!

ERROR in aux_get_credentials_file: (219/0x00db) Couldn't open cred file for reading: <PATH>

ERROR in aux_file20ctetString: (1281/0x0501) open (<PATH>) returned: "Permission denied"

JPReyes
Active Contributor
0 Kudos

Are you logged on with the user which the pse was created?

Regards

Juan

Former Member
0 Kudos

Yes it's the user I've created the PSE. But I've tested it exemplarily with another user and get following message:

get_my_name: no PSE name supplied, SSO credentials not readable for you!

...

NO readable SSO-Credentials available (total 1)

Regards

Alexander

JPReyes
Active Contributor
0 Kudos

Basic question but, Are you connecting to SAP using saprouter via SNC?...