STRUST and System PSE

[Former Member]

Hi,

I'm starting to study the SAP security and I ran into my first problem/question...

After an homogeneous system copy from PRD to DEV, STRUST had the PRD system PSE information (with its SID, etc) and I decided to replace it using the replace function on the STRUST transaction.

I created a new system PSE with the DEV system SID and basic information:

CN=<SID>, O=<My Company's name>, C=PT

The system PSE file (SAPSYS.pse) was created on the operating system level, at \usr\sap\<SID>\DVEBMGS00\sec.

However, the STRUST check tells me there is an error:

"Error during test signature"

The SAP help tells me to adjust the PSE on the application server by choosing "Distribute" in the context menu of the node for the relevant appliation. If the error occurs again, and the PSE is encrypted, I should assign a new password for the PSE.

I've done all that but the error remains...

What can I do to solve this?

And, if possible, where can I find useful information to really understand how this works with SAP?

Thanks

Antonio

[rhviana]

Hi Antonio,

I´m getting the same error.

Do you solved your problem ?

I did many tests, I did the conversion of the certificate into two differents servers, but when I try to import... I got this error Error during test signature...

I dont know how to procede.

Thanks,

Kind regards,

[Former Member]

Make sure your SAPCRYPTOLIB is setup correctly. See the attached link.

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/49/23501ebf5a1902e10000000a42189c/frameset.htm

[Former Member]

Could be a case where few parameters were missing in the instance profile , could you please check if all the required parameters are in place.

Thanks ,
Dev

[rhviana]

Hi Antonio,

I fixed the problem here.

If you still with error, ping here.

Kind regards,

Viana.

[Former Member]

Hi Ricardo...

yes, please share the solution...

thanks

Antonio

[rhviana]

Hi Antonio,

What is the SO ?

Check below:

Set the variables depending on the SO - via RZ10

ssl/ssl_lib	Path and file name of the SAP Cryptographic Library	UNIX: /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so Windows:<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll
sec/libsapsecu	Path and file name of the SAP Cryptographic Library	UNIX: /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so Windows:<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll
ssf/ssfapi_lib	Path and file name of the SAP Cryptographic Library	UNIX: /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so Windows:<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll
ssf/name	SAPSECULIB	SAPSECULIB

If you are using windows you also must set up local variables and linux also check below:

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/49/236897bf5a1902e10000000a42189c/content.htm?frame...

After that restart machine and it will works.

Regards,

Ricardo Viana.