Announcement:
wanna exchange links? contact me at sapchatroom@gmail.com.
Posted by
Admin at
Reply from yusuf md on Jun 17 at 9:20 AM Hi,
If you updated your certificate recently then you need to install the Old
SAPRouter certificate also:
Please check the below information on how to get and install this certificate
with your local.pse fle.
1. From 04/15/2015 11:00 AM CET until 07/18/2015 you need to import the
old SAProuter Root CA manually:
The old SAProuter SMP Root CA certificate is attached to SAP note 2131531
<https://service.sap.com/sap/support/notes/2131531>.
Import the old SAProuter SMP CA Root CA certificate as trusted into your
PSE.
sapgenpse maintain_pk -a smprootca.der -p local.pse
This is necessary, since SAP has to keep using saprouter certificates
signed by the old SAProuter SMP Root CA for interoperability reasons. If
you omit this step, SNC connections to SAP cannot be established
Regards
Yusuf Mohammed
| | | ---------------Original Message---------------
From: EJ1
Sent: Wednesday, June 17, 2015 9:13 AM
Subject: SAP via SNC Fails With A Connection Error
I've searched for an answer to my issue, tried following Note 33135 to no avail. I feel I've successfully followed the guide "Installing the SAPCRYPTO LIBRARY and Starting the saprouter."
However, If I go to transaction SM59 on any server within our landscape and attempt to test my connection to SAP via SNC, it fails with a connection error. I used tcode oss1 to configure the parameters for the OSS connection. Not sure if I put in the public or private ip address for our saprouter. I've seen conflicting information about this.
People can connect from outside our private network to SAP using our router so this seems to be an outbound issue only.
I asked our network person if our firewall could be at fault and was told we do not block anything outbound but our SAP Router server's public ip only allows inbound traffic on ports 3299. I recently updated our SNC certificate and believe I have installed this correctly. Any help would greatly be appreciated. If I need to copy log files here or provide any additional information to help resolve this I will do so. I have opened a system message with SAP, but I we all know how long it takes since this is not a production down situation.
I discovered this issue while attempting setup of a new Solution Manager 7.1 Server in step 2 of SOLMAN_SETUP when it failed on Check Service Connection.
In the saprouttab, for the SNC entry to SAP should I use the sapserv2 ip or "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"?
Thanks in advance for everyone's help and guidance! |
| Reply to this email to post your response. __.____._ | In the Spotlight Become a blogger at Toolbox.com and share your expertise with the community. Start today.   _.____.__ |
