cancel
Showing results for 
Search instead for 
Did you mean: 

SAP router certificate

Former Member
0 Kudos

Hi Gurus;

I want to re-generate my SAp certificate .

Please elloaborate the process to follow.

Thanks and regards

Tushar Pathak

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Dear,

This is the procedure that I got from SDN, last December when have to renew my certificate, I got the success by following these steps, you can also try.

Here were my steps to get it sucessfully working:

1. Logon to host with username and password of SAP router service credentials

2. Stop the Saprouter service

3. Make a backup of the folder E:\usr\sap\saprouter

3a. This can be deleted after a successful upgrade

4. Delete this 4 files in E:\usr\sap\saprouter

4a. certreq

4b. cred_V2

4c. localpse

4d. srcert

5. Generate the certificate request using the following command

5a. E:\usr\sap\saprouter>sapgenpse get_pse u2013v u2013r certreq u2013p local.pse "CN=sapslm01.oii.dom, OU=0000810973, OU=SAProuter, O=SAP, C=DE"

5b. Enter a PIN of 1234

6. Copy the contents of certreq to the clipboard

7. Go to http://www.service.sap.com/saprouter-sncadd

8. Paste the contents of the clipboard into the form

9. This will generate a new certificate, copy its contents into a file called srcert

9a. You will have to create srcert

10. Then import the certificated using the following command

10a. E:\usr\sap\saprouter>sapgenpse import_own_cert u2013c srcert u2013p local.pse

10b. Enter the PIN of 1234

11. The setup the logon using the following command

11a. E:\usr\sap\saprouter>sapgenpse seclogin u2013p local.pse

11b. This will create a file called cred_V2

12. Check if the certificate has been loaded correctly by using the following command

12a. E:\usr\sap\saprouter>sapgenpse get_my_name u2013v u2013n Issuer

13. Start the Saprouter service

Answers (1)

Answers (1)

Former Member
0 Kudos

Router should be on

Your s-user's passport cannot get renewed automatically. You need to

remove the old one from browser and apply a new one.

Please find the details as follows:

Remove the SAP Passport in Internet Explorer:

Choose Extras(tools) > Internet options ... .

The Internet options window appears.

Click on contents.

The contents tab appears.

Click on certificates ... .

The certificates window appears.

Highlight your expired SAP Passport and click Remove.

Logon to http://service.sap.com/TCS

Click on Single Sign-On

Click on Apply for a SAP Passport and install the new SAP Passport

You can verify the validity of your

certificate using the following command

sapgenpse get_my_name -n validity

The remote access to your PRD system is working fine (SAP R/3 login

screen). You can test your connectivity to SAP in SM59 -> R/3

Connections /Abap Connections -> SAPOSS -> Test Connection.

This is the process to remove old certificate and renew it with new one.