You are on page 1of 3

2/19/2018 How to Renew SAProuter Certificate

HOME ABOUT Search ALL CATEGORY Search

Database Internet Operating System Software SAP

How to Renew SAProuter Certificate POPULAR LATEST


By ITsiti · Category SAP Basis · Updated May 17, 2016 Execute OS Commands from SAP
GUI
14 COMMENTS

Share this article : Delete Imported Request in SAP


8 COMMENTS

System Change Option to Modifiable


or Not Modifiable in SE06
IMPORTANT – NEW METHOD OF TO RENEW SAPROUTER CERTIFICATE: 3 COMMENTS
Refer to SAP Note 2131531 and below link,
https://support.sap.com/remote-support/help/installing-saprouter.html ST03N: SAP Workload Monitor
3 COMMENTS

1. Before get started, do create a backup copy of the SAProuter folder.


SM01: Lock & Unlock Transaction
2. In the SAProuter folder, delete the following files, Codes
4 COMMENTS

local.pse
cred_v2 VirtualBox: Your PC needs to restart.
certreq Error Code: 0x000000C4 (Windows
8)
3. Execute below command. You can obtain the “Distinguished Name” from the 3 COMMENTS
http://service.sap.com/saprouter-sncadd from the step 5. Supply the PIN password. The
command will output the new local.pse file. Steps to Upgrade SAP Support
Package Stack using SUM
0 COMMENT
sapgenpse.exe get_pse -v -r certreq -p local.pse "Distinguished Name"

Got absolute PSE path "C:\usr\sap\saprouter\local.pse". Procedure Before Stopping an SAP


Please enter PIN: System – ABAP Stack
Please reenter PIN: 2 COMMENTS
Supplied distinguished name: "CN=ITsiti, OU=000012345, OU=SAProuter, O=SAP, C=DE"
Creating PSE with format v2 (default)
Generating key (RSA, 2048-bits) ... succeeded.
certificate creation... ok
PSE update... ok
PKRoot... ok
Generating certificate request... ok

4. Head to http://service.sap.com/saprouter-sncadd. Click on Apply Now.

5. Select the SAProuter Name (Distinguished Name).

http://itsiti.com/renew-saprouter-certificate 1/3
2/19/2018 How to Renew SAProuter Certificate

6. Now, copy the content from the local.pse file (from step 3) and paste into below text field.

7. Choose Request Certificate. You will get the SAProuter certificate.

http://itsiti.com/renew-saprouter-certificate 2/3
2/19/2018 How to Renew SAProuter Certificate
8. Next, create a new file name srcert (in the same directory with no extension) and copy/paste the
certificate (from the step 7) into it.

9. Execute below command to import the certificate into the SAProuter.

sapgenpse.exe import_own_cert srcert -p local.pse

Please enter PIN:


CA-Response successfully imported into PSE "C:\usr\sap\saprouter\local.pse"

10. Assign the SAProuter user credentials. The output will create cred_v2 file.

sapgenpse seclogin -p local.pse -O sidadm

running seclogin with USER="sidadm"


creating credentials for user "HOSTNAME\sidadm" (yourself)...
Please enter PIN:
Adjusting credentials and PSE ACLs to include "HOSTNAME\sidadm"...
Oh, you supplied your own name explicitly ... ok.
C:\usr\sap\saprouter\sec\cred_v2 ... ok.
C:\usr\sap\saprouter\local.pse ... ok.
Added SSO-credentials (#0) for PSE "C:\usr\sap\saprouter\local.pse"
"CN=HOSTNAME, OU=0000123456, OU=SAProuter, O=SAP, C=DE"

Finally, verify your SAProuter update validation.

Tags: renew saprouter

Related posts

Stop & Start SAP using BR0973W: Operation too Close / Open SAP Import BR0978W: Parameter
SAPMMC old or has not been run in Queue COMPATIBLE, value:
clean-up period 11.2.0 ( 10.2.0)

0 Comments ITsiti 
1 Login

Sort by Newest
 Recommend ⤤ Share

Start the discussion…

LOG IN WITH
OR SIGN UP WITH DISQUS ?

Name

Be the first to comment.

✉ Subscribe d Add Disqus to your siteAdd DisqusAdd 🔒 Privacy

© 2018 ITsiti. All Rights Reserved

http://itsiti.com/renew-saprouter-certificate 3/3

You might also like