Scribd
Upload
943 views

Sap Router Certificate Renewal Process

The document provides steps to renew an expired SAP router certificate including generating a certificate request, obtaining a new certificate from SAP support, importing the new certificate into the router's personal security environment (PSE), and restarting the SAP router service.

Uploaded by

Rakesh Paal
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
943 views

Sap Router Certificate Renewal Process

The document provides steps to renew an expired SAP router certificate including generating a certificate request, obtaining a new certificate from SAP support, importing the new certificate into the router's personal security environment (PSE), and restarting the SAP router service.

Uploaded by

Rakesh Paal
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 3

Check for the validity of the sap router certificate

sapgenpse get_my_name n validity


Stop the Saprouter from the services panel or command: "saprouter s"
Backup of the folder: C:\SAProuter\SAProuter
Then check the following environment variables as shown below:
SECUDIR
SNC_LIB
Delete these 4 files: \SAProuter\SAProuter
certreq
cred_V2
localpse
srcert
Ensure to take backup before deletion.
Generate the certificate request with Command:
sapgenpse get_pse v r certreq p local.pse "your distinguish name"
The distinguish name is available from the command:
sapgenspe get_my_name
Note: It will ask for entering the PIN. Enter any 4 digit number. Please remember
and save the same. This pin will be needed for access to the PSE.
Then Login to service marketplace under:
a. https://support.sap.com/remote-support/saprouter/saprouter-certificates.html
b. Apply Certificate, This opens the form below. Select Continue

Paste the contents of the certreq file generated above as above, and then Request
Certificate.
Copy the details of the new certificate generated and then paste it in a new file
srcert in the
Location C:\SAProuter\SAProuter.
Then import the new certificate using command:
sapgenpse import_own_cert -c "C:\SAProuter\SAProuter\srcert" -p local.pse
When prompted: Please enter PIN:
CA-Response successfully imported into PSE "C:\SAPRouter\SAProuter\local.pse"
Then run this command to generate the file cred_V2 in the saprouter directory.
sapgenpse seclogin p local.pse O username
Enter PIN when request generated while certificate renewal
This will authenticate the User who will run the SAP Router by generating the
Credentials file cred_v2 in sap router directory "\saprouter"

Check if the certificate has been loaded correctly by using the following command
sapgenpse get_my_name v n Issuer
Start the SAP Router : saprouter -r S 3299 -R c:\saprouter\saprouttab -K
If not stop earlier then it is recommended to give a restart to SAP Router
Enter the parameters in OSS1 -> Menu - Technical Settings
Click on Change Sap Router at Customer Site:
Name: DN
IP Address: 10.15.12.13 (Sap router Host)
Instance no: 99

You might also like