on 08-04-2008 6:55 AM
Hi Gurus;
I want to re-generate my SAp certificate .
Please elloaborate the process to follow.
Thanks and regards
Tushar Pathak
Dear,
This is the procedure that I got from SDN, last December when have to renew my certificate, I got the success by following these steps, you can also try.
Here were my steps to get it sucessfully working:
1. Logon to host with username and password of SAP router service credentials
2. Stop the Saprouter service
3. Make a backup of the folder E:\usr\sap\saprouter
3a. This can be deleted after a successful upgrade
4. Delete this 4 files in E:\usr\sap\saprouter
4a. certreq
4b. cred_V2
4c. localpse
4d. srcert
5. Generate the certificate request using the following command
5a. E:\usr\sap\saprouter>sapgenpse get_pse u2013v u2013r certreq u2013p local.pse "CN=sapslm01.oii.dom, OU=0000810973, OU=SAProuter, O=SAP, C=DE"
5b. Enter a PIN of 1234
6. Copy the contents of certreq to the clipboard
7. Go to http://www.service.sap.com/saprouter-sncadd
8. Paste the contents of the clipboard into the form
9. This will generate a new certificate, copy its contents into a file called srcert
9a. You will have to create srcert
10. Then import the certificated using the following command
10a. E:\usr\sap\saprouter>sapgenpse import_own_cert u2013c srcert u2013p local.pse
10b. Enter the PIN of 1234
11. The setup the logon using the following command
11a. E:\usr\sap\saprouter>sapgenpse seclogin u2013p local.pse
11b. This will create a file called cred_V2
12. Check if the certificate has been loaded correctly by using the following command
12a. E:\usr\sap\saprouter>sapgenpse get_my_name u2013v u2013n Issuer
13. Start the Saprouter service
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Router should be on
Your s-user's passport cannot get renewed automatically. You need to
remove the old one from browser and apply a new one.
Please find the details as follows:
Remove the SAP Passport in Internet Explorer:
Choose Extras(tools) > Internet options ... .
The Internet options window appears.
Click on contents.
The contents tab appears.
Click on certificates ... .
The certificates window appears.
Highlight your expired SAP Passport and click Remove.
Logon to http://service.sap.com/TCS
Click on Single Sign-On
Click on Apply for a SAP Passport and install the new SAP Passport
You can verify the validity of your
certificate using the following command
sapgenpse get_my_name -n validity
The remote access to your PRD system is working fine (SAP R/3 login
screen). You can test your connectivity to SAP in SM59 -> R/3
Connections /Abap Connections -> SAPOSS -> Test Connection.
This is the process to remove old certificate and renew it with new one.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
81 | |
24 | |
11 | |
9 | |
7 | |
5 | |
5 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.