SAP router Certificate Expire End of month

[Former Member]

Hi Dear,

Please, Our SAP Router Certificate expire end of this month. can any body suggest me , Is it any amount for Renew Sap Router Certificate ? if yes then how much Amount I Paid to SAP ?

and how to renew SAP Router certificate.

I am very-2 thank full to you.

Arpan Saini

[Former Member · Accepted solution]

Hi,

Just follow the link as juan suggested.

Then u will get the new router certificate and you have to install that certificate into ur router.

installing saprouter as a windows service

ntscmgr install SAProuter -b d:\usr\sap\saprouter\saprouter.exe -p "service -r"

#generating the certificate

sapgenpse get_pse -v -r certreq -p local.pse "CN=tdep, OU=xxxxxxx, OU=SAProuter, O=SAP, C=DE"

#importing the certificate to saprouter

sapgenpse import_own_cert -c srcert -p local.pse

#checking whether the certificate is installed or not

sapgenpse seclogin -p local.pse -O <sid>1adm

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi vamsi,

After generating certificate.it is asking for PIN.What is PIN?How we will get it?

I am stuck ,Please help me out.

Thanks and regards

Arpan

[Former Member · Accepted solution]

Hi,

Hey intially it will ask for the pin you can give it your own pin

then while uploading the certificate you have to give the same pin,make a note of your pin which you give it intially.

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi vamsi,

when i putting my own Pin number it show error :

C:\usr\sap\saprouter>sapgenpse import_own_cert -c srcert -p local.pse

Please enter PIN:

import_own_cert: Couldn't open PSE "C:\usr\sap\saprouter\local.pse"

ERROR in af_open: (1824/0x0720) Wrong PIN for PSE

ERROR in secsw_open: (1824/0x0720) Wrong PIN for PSE

ERROR in sec_parse_PSEInfo_cont: (1824/0x0720) Wrong PIN for PSE

C:\usr\sap\saprouter>

please, i am stuck at that point.

Thanks & Regards

Arpan

[Former Member · Accepted solution]

Hi,

While generating certificate it will ask you pin.The same pin should be provided while importing the certificate.

Any ways you can delete the gnerated certifcate and again generate the certificate by the above command then try to remember the pin and import the certifcate using the same pin.

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi vamshi,

Thank's for help,

As you suggest, when i put this command it takes password twice. but error throw ?

C:\usr\sap\saprouter>sapgenpse get_pse -v -r certreq -p local.pse "p:CN=LENOVO-E

125A113, OU=0000825102, OU=SAProuter, O=SAP, C=DE"

Got absolute PSE path "C:\usr\sap\saprouter\local.pse".

Please enter PIN:

Please reenter PIN:

get_pse: Malformed distinguished name "p:CN=LENOVO-E125A113, OU=0000825102, OU=S

AProuter, O=SAP, C=DE"

ERROR in Name2DName: (12321/0x3021) problem parsing DName : "illegal character a

fter key or value"

please suggest ,

Thanks & Regards

Arpan

[Former Member · Accepted solution]

Hi,

I have assumed you have downloaded the certificate from the market place trust center.

First you have to execute the command

C:\usr\sap\saprouter>sapgenpse get_pse -v -r certreq -p local.pse "p:CN=LENOVO-E

125A113, OU=0000825102, OU=SAProuter, O=SAP, C=DE"

then it will create the certreq file in saprouter folder then you have to copy from begin to end and paste this in the market place then you will get a new certifcate now copy the certifcate from the router and then paste in the notepad in the saprouter dir and name it as srcert.

Then import this certificate into your router.

Remeber the pin.

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi Vamshi,

yes, we have generated sap router certificate via sap support trust center . But time of generation it never ask pin number.

copy new certificate from marketplace and put this certificate in srcert file begin to end and then run below command

C:\usr\sap\saprouter>sapgenpse import_own_cert -c srcert -p local.pse

Please enter PIN:

import_own_cert: Couldn't open PSE "C:\usr\sap\saprouter\local.pse"

ERROR in af_open: (1824/0x0720) Wrong PIN for PSE

ERROR in secsw_open: (1824/0x0720) Wrong PIN for PSE

ERROR in sec_parse_PSEInfo_cont: (1824/0x0720) Wrong PIN for PSE

please tell me what is the problem , why it not open. .pse file is generated ,or download from where ?

Thanks & regards

Arpan

[Former Member · Accepted solution]

Hi,

The problem is that you are using two different pins.THe pin which you used for generation the certificate and the pin you use for importing the certifcate are different.

sapgenpse get_pse -v -r certreq -p local.pse "CN=tdep, OU=0000xxxx, OU=SAProuter, O=SAP, C=DE"

then it will generate the file and it asks for the pin you just give this pin and remember.

Then paste contnet of the "certreq" file which will be generated in the saprouter folder in the market place and select continue

this will generate the new certificate for you.Copy the content and then paste it to srcert.txt file.

Now you import the certificate using the command

sapgenpse import_own_cert -c srcert -p local.pse

here you have enter the pin which you have used for generating the file certreq file.

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi Vamshi,

i just explain step how i generate router certificate .

https://service.sap.com/SAPROUTER-SNCADD

click on apply now ->put certreq (certificate start to end text )in text area

and click on request certificate.

new certificate generated i just copy begin to end and copy in srcert file in saprouter folder

so dear while creating the sap router certificate Pin number not required .

please suggest me

Arpan saini

[Former Member · Accepted solution]

Hi,

Before generating the certificate you have to execute the command

#generating the certificate

sapgenpse get_pse -v -r certreq -p local.pse "CN=tdep, OU=0000xxxx, OU=SAProuter, O=SAP, C=DE"

It will generate the file certreq

in the format/begin /end you have to paste the content of this file in the market place to to get your certificate.

Then you will get the certificate which you have to import in the router.

Reward points if helpfull.

Regrads,

Vamshi.

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi vamshi,

please tell me how can i check certificate is successful imported or not ?

you send me this command first reply.

#checking whether the certificate is installed or not

sapgenpse seclogin -p local.pse -O <sid>1adm

if my sid is pm1 then:

sapgenpse seclogin -p local.pse -O pm11adm

is it right ?

Thanks & regards

arpan

[Former Member · Accepted solution]

Hi,

sapgenpse seclogin -p local.pse

it will create the file cred_v2 in the same directory.

Then execute the command

sapgenpse get_my_name -v -n Issuer

the result should be

CN=Saprouter CA,OU=SAPRouter,O=SAP,C=DE

this says your certifcate is installed correctly.

Regards,

Vamshi.

[Former Member · Accepted solution]

Hi vashmi,

Thanks for your kind help . Our sap router Certificate successfully installed.

Thanks & regards

Arpan Saini

[Former Member · Accepted solution]

Hi vashmi,

Thanks for your kind help. Our Saprouter Certificate is successfull installed.

Thanks & regards

Arpan saini

[JPReyes]

saprouter certificate is free of charge...

go to https://service.sap.com/SAPROUTER-SNCADD

Regards

Juan