cancel
Showing results for 
Search instead for 
Did you mean: 

SSL Certificate expire

Former Member
0 Kudos

Hi All,

On SAP ECC 6.0 EHP5 IDES we are getting warning as

Validity of certificate with PSE type >SSL Server< ends in 1 days

This warning is for SSL SERVER STANDARD and details are as follows:

Owner CN=*.wdf.sap.corp, OU=PSS TDC, O=SAP-AG, C=DE

Issuer EMAIL=<email id from sap ag de>, CN=SAPNetCA, OU=SAPNet

Serial Number (Hex.) 01000FAE

Serial Number (Dec.) 16781230

Valid From 15.02.2010 13:13:04 to 15.02.2012 13:13:04

Algorithm RSA Key Length 1024

I want to know that is this certificate is mandatory? How to obtain it? Is this certificate free or we need pay for it?

In an actual we had not generated any certificate in IDES.

Please help us.

Thanks & Regards,

Ishan

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

This message was moderated.

Former Member
0 Kudos

First you should reqest for a new SSL certificat.

Don't delete old SSL Ceretifcate.

Goto STRUSTSSO2 tcode and export the existing cetifcate.

Before replaceing the SSL certificate, you should create primary and secondaty cetificates.

-Naveen

0 Kudos

You can generate a new cert from Visual admin . You do not have to purchase any cert .

Please login to Visual Admin > Server > Services > Key STore > Go to service_ssl . Create a new cert . Make sure to set this as RSA . You can keep the validity for 10 Years.

Former Member
0 Kudos

Hi Himanshu,

Thanks for your reply.

Let me follow these steps and share u the results.

Thanks again.

Regards,

Ishan

Former Member
0 Kudos

Hi,

I am afraid that you will not find a J2EE keystore in a an ECC6 ABAP system !

You have to renew you SSL server certificate in transaction STRUST...

Regards,

Olivier

Former Member
0 Kudos

Hi All,

As per my Knowledge we have to renew the certificate for AS ABAP too through STRTUST.

As per the Note 499386 - Invalid logon ticket for CA certificates:

We must request the certificate again.

To do this, We must use transaction PSEMAINT (or STRUST in newer releases) to generate a new PSE (with the same name)

and resend a certificate request to SAP. Alternatively, you can send the certificate request to a different Certification Authority (CA).

As I went to TCODE STRUST and Create a Certificate Request and saved this to my Local PC.

Can anyone tell me how to send the Renewal of certificate Request in SMP?And Is this certificate free or I need to pay for this?

Kindly help me out.

Thanks & Regards

Ajitabh

Former Member
0 Kudos

Hi Ishan,

I have solved the Issue.

Just go to STRUST->>Replace the Certificate with the same name and the validity will automatically be extended till 2038.

Kindly let me know if you got any further query for the same.

Thanks & Regards

Ajitabh