cancel
Showing results for 
Search instead for 
Did you mean: 

SAP Router certificate

anvardheen_jabarullah
Participant
0 Kudos

Dear Basis,

Our SAP Router certificated is going to be expired. Please let me know the procedure how to renew SAP Router Certificate.

Am waiting for solution

Accepted Solutions (1)

Accepted Solutions (1)

0 Kudos

Dear Anvardheen,

You need to do the following:

-> On your SAProuter, delete your existing PSE file and old certificate file (local.pse, cred_v2)

-> Go to the http://service.sap.com/saprouter-sncadd

-> Click on "Apply Now!"

-> Follow the steps detailed in the documentation

-> More details can be found on the following page:

    http://service.sap.com/saprouter-sncdoc

-> Run the two commands:

    sapgenpse get_pse -v -noreq -p local.pse "<Your Distinguished Name>"

    sapgenpse get_pse -v -onlyreq -r certreq -p local.pse

    Note: Replace "<Your Distinguished Name>" with

         "CN=IBASAPROUTER01, OU=0000746277, OU=SAProuter, O=SAP, C=DE"

-> Display the output file "certreq" and with copy&paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name

-> In response you will receive the certificate signed by the CA in the Service Marketplace, cut&paste the text to a local file named srcert

-> With this in turn you can install the certificate in your saprouter by calling

     sapgenpse import_own_cert -c srcert -p local.pse

-> Now you will have to create the credentials for the SAProuter with the same program

(if you omit -O <user>, the credentials are created for the logged in user account)

     sapgenpse seclogin -p local.pse -O <user_for _saprouter>
-> This will create a file called cred_v2 in the same directory.
-> Check if the certificate has been imported correctly
     sapgenpse get_my_name -v -n Issuer
 

The name of the Issuer should be:
   CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

Please also ensure to use the latest sapcrypto library (see also note 455033).

In case you face any issues i would suggest you to raise an OSS message in the component

XX-SER-NET-NEW providing all the data as mentioned in the SAP Note 28976.

Thanks & Regards,

Abhishek

Answers (1)

Answers (1)

Former Member
0 Kudos

As usual, the procedure can be found in sapnet.
Why don't you search yourself, instead of waiting for solution?

A hint:
In the upper right corner of this page, type 'saprouter certificate' and click the magnifying glass.

hope this helps