cancel
Showing results for 
Search instead for 
Did you mean: 

Certificate with PSE type SSL server has been invalid for x number of days

Former Member
0 Kudos

Guys,

On one of the application server we are getting above message for one of the certification expiry.

Anyone knows whats this one about and anything to do with SAP?

Helpful answers will be rewarded

Thanks

Santosh

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Santosh,

Certificates in SAP (ABAP Stack) are managed using transaction STRUST. These certificates can be used in SAP for several purposes: Single Sign-On, SSL, Digital Signatures ...

With this transaction you can see all PSEs in your system and one of them is the PSE to manage certificates involved in SSL communication (client or server certificate).

The message is telling you that one of your SSL certificates has expired. Check the certificate list in SSL PSE.

Best Regards,

Jorge Linares

Former Member
0 Kudos

Hi ,

Adding to Jorges message:

To configure single sign on and for other secure communications we import the certificate to the SAP backend system.

You can view the certificates imported for your system and their validity using the Tcode STRUSTSSO2.

The error means that one of the certificate that was imported is no more valid and you have to re import it for Single sign on or other secure connection to work.

Thanks & Regards,

Vijith

Answers (2)

Answers (2)

Former Member
0 Kudos

Hi...

In continution to Thomas Messageu2026

Please make a note that..

The below note is w.r.t 700 kernel

SAP NOTE: 1127219 SSF_ALERT_CERTEXPIRE does not work since SP14

One work around is removing the existing certificate and generate new one to resolve the issueu2026

Please try and seeu2026.

Regards

Hari.

Former Member
0 Kudos

Hi,

Please go to the TA STRUST and expand the node named "SSL Server Standard".

There will be an entry <hostname>_<SID>_<Sys.No> double click on this.

The SSL Server standard certificate will be displayed. Double click on the certificate to display the details in the window below.

This will show the validity of the certificate. If the validity has expired, you can replace the certificate by choosing the replace option from the context menu.

Hope this helps.

Best Regards,

Srividya.R

Former Member
0 Kudos

Hi friends,

I have the same problem that Santosh related.

In SM21 display the error:

03:03:24 DIA 000 000 SAPSYS PM 2 Certificate with PSE type >PSEsistema< has been invalid for 733214 days

In my client 000 (QA), in STRUSTSSO2 transaction, verified that there is System PSE (PLUTONIO_QAS_01). When I click in this one OWNER is displayed (CN=C11).

Too appears in Certificate box the follows informations:

Owner CN=C11

Issuer CN=C11

Serial Number 00

Valid From 01.10.1997 00:00:00 to 01.01.2038 00:00:00

I understood that my certificate is correct, valid to 01.01.2038.

Where is the error?

Former Member
0 Kudos

Hello people,

Someone help me?

Regards,

Ricardo.

Former Member
0 Kudos

I performed the report SSF_ALERT_CERTEXPIRE and got some information.

Perhaps the problem is on the record date of the certificate. Date = 01.38.2020

This date does not exist. If anyone knows how to adjust that date will be grateful.

Regards,

Ricardo

Former Member
0 Kudos

If you are on SP14 check this note:

Note 1127219 - SSF_ALERT_CERTEXPIRE does not work since SP14

Kind regards,

Thomas.