For SSL certificate maintenance (renew) - restart requrired

[former_member285279]

Hello Colleagues,

after certificate maintenance (renew) under ABAP at Trust Manager (Transaction STRUSTSSO2) is there any system restart, ICM service restart (still) required?

System is SAP PI 7.31

Under discussion I had read "... in future releases this is automated (by triggering a PSE cache invalidation; no ICM restart required ...".

Is this similart to Java Systems?

Many thank in advance!

Regards,

Jochen

[Former Member]

Hi Jochen

See rhis link is usefully

Regards,

Deva

[former_member285279]

Hi Deva,

many thanks for this suitable Link but it doesn't answer my question about is an ICM restart still required for new releases.

Regards,

Jochen

[former_member285279]

Hi All,

got an answer from SAP Support and ICM restart isn't requrired anymore since >= NetWeaver 710.

Please see SAP Note 510007 - Setting up SSL on Web Application Server ABAP under:

...

When, as of NetWeaver 710, you save or overwrite an SSL PSE, STRUST signals the PSE change to the icman, whereby the PSEs used for SSL are reloaded at runtime.  Existing communication connections are not impaired as a result. However, all SSL session caches are emptied in icman so that all new SSL connections go through a complete SSL Handshake. On servers with a very large number of simultaneous connections, this could lead to an increase in the CPU load and increased response times.

...

You are able to see respective information's as well at ICM trace.

Regards,

Jochen