Hi ranjith
This is because of Certificate expiry. Post your message to
sap.service.com they will guide you or attaching one document
How to Renew SAPROUTER Certificate.
1. Login to the SAP Service Marketplace with the Service Marketplace
USERID which is assigned to your installation.
2. Use the latest SAProuter version, which can be downloaded from SAP
Service Marketplace (alias /SWDC).
3. Change to the alias /SAPROUTER-SNCADD. Before you can download the
software components two preconditions must be met:
a. You must have been allowed to download the software. This
authorization is added as soon as SAP has received a positive statement from
the "Bundesausfuhramt" (German Federal Export Office). This procedure is
necessary since the software falls under EU regulations.
b. For more information on how to obtain authorization if download is
not possible see note 397175.
c. You must accept that you must follow the regulations imposed by the
EU on the use and distribution of the cryptographic software components
downloaded from the SAP Service Marketplace.
d. The acceptance of the terms and conditions is logged with your USERID
and stored for reporting purposes to the "Bundesausfuhramt".
4. Click on "Download Area" > "SAP Cryptographic Software" and select
the correct sapcrypto library for your SAProuter "<op-sys>". Save the file
to the directory where the SAProuter executable is located.
1. You can get the file car.exe/sap/sapcar.exe, which is necessary to unpack
the archive from any Installation Kernel CD.
Executing the command car -xvf SAPCRYPTO.CAR will unpack the following
files:
[lib]sapcrypto.[dll|so|sl]
sapgenpse[.exe]
ticket
. As user <snc_adm> set the environment variables SNC_LIB and SECUDIR:
WINDOWS NT, 2000, XP
or higher
SECUDIR = <directory_of_saprouter>
SNC_LIB = <drive>:\<path_to_libsecude>\ntia64\sapcrypto.dll or
<drive>:\<path_to_libsecude>\ntintel\sapcrypto.dll or
<drive>:\<path_to_libsecude>\nt-x86_64\sapcrypto.dll
NOTE
after configuring the variables in Windows, you have to reboot this server
before you continue.
2. Change to the alias SAPROUTER-SNCADD. From the list of SAProuters
registered to your installation, choose the relevant "Distinguished Name".
3. Generate the certificate Request with the command:
Example:
CN=KUDSSMGR,OU=0000830262,OU=SAProuter,O=SAP,C=DE
sapgenpse get_pse -v -r certreq -p local.pse CN=KUDSSMGR, OU=0000830262,
OU=SAProuter, O=SAP, C=DE
Alternatively use the two commands:
sapgenpse get_pse -v -noreq -p local.pse "<Distinguished Name>"
sapgenpse get_pse -v -onlyreq -r certreq -p local.pse
You will be asked twice for a PIN here. Please choose a PIN and document it,
you have to enter it identically both times. Then you will have to enter the
same PIN every time you want to use this PSE.
4. Display the output file "certreq" and with copy&paste (including the
BEGIN and END statement) insert the certificate request into the text area
of the same form on the SAP Service Marketplace from which you copied the
Distinguished Name.
5. In response you will receive the certificate signed by the CA in the
Service Marketplace. Copy&paste the text to a new local file named "srcert",
which must be created in the same directory as the sapgenpse executable.
6. With this in turn you can install the certificate in your saprouter
by calling:
sapgenpse import_own_cert -c srcert -p local.pse
7. Now you will have to create the credentials for the SAProuter with
the same program (if you omit -O <user_for_saprouter>, the credentials are
created for the logged in user account).
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
Note: The account of the service user should always be entered in full
<domainname>\<username>
8. This will create a file called "cred_v2" in the same directory as
"local.pse"
For increased security please check that the file can only be accessed by
the user running the SAProuter.
Do not allow any other access (not even from the same group)!
On UNIX this will mean permissions being set to 600 or even 400!
On WINDOWS check that the permissions are granted only to the user the
service is running as!
9. Check if the certificate has been imported successfully with the
following command:
sapgenpse get_my_name -v -n Issuer
The name of the Issuer should be:
CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
10. If this is not the case, delete the files "cred_v2"and "local.pse" and
start over at Item 3. If the output still does not match please open a
customer message in component XX-SER-NET stating the actions you have taken
so far and the output of the commands 3.,6.,7. and 9.
Dinesh
On Mon, Aug 2, 2010 at 3:21 PM, ranjithesakki via sap-basis <
sap-basis@groups.ittoolbox.com> wrote:
> Posted by ranjithesakki
> on Aug 2 at 5:55 AM Hi Experts,
> I am facing a problem in SAPOSS connection.My SAPROUTER is working fine,
> even sap support team also connected my server.and I am able to ping
> 194.39.131.34 in my saprouter machine.the only problem is i cannot able to
> connect from sm59.the error when i do connection test is
> RSTR0006: Display Developer Traces
>
>
> trc file: "dev_lg", trc level: 1, release: "700"
>
> [Thr 2664] Mon Aug 02 14:27:56 2010
> [Thr 2664] *** ERROR => NiBufIProcMsg: hdl 0 received rc=-92
> (NIEROUT_CONN_REFUSED) from peer [nibuf.cpp 2125]
> [Thr 2664] *** ERROR => MsINiWrite: NiBufSend (rc=NIEROUT_CONN_REFUSED)
> [msxxi.c 2480]
> [Thr 2664] *** ERROR => MsIAttachEx: MsINiWrite (rc=NIEROUT_CONN_REFUSED)
> [msxxi.c 734]
> [Thr 2664] *** ERROR => LgIAttach: MsAttach (rc=NIEROUT_CONN_REFUSED)
> [lgxx.c 3980]
> [Thr 2664] *** ERROR => LgApplSrvInfo: LgIAttach(rc=LGEMSLAYER) [lgxx.c
> 1272]
> [Thr 2664]
> *****************************************************************************
>
> *
> [Thr 2664] * LOCATION SAProuter 38.10 on 'saprouter'
> [Thr 2664] * ERROR partner '194.39.131.34:sapdp99' not reached
> [Thr 2664] *
> * TIME Mon Aug 02 14:27:56 2010
> [Thr 2664] * RELEASE 700
> [Thr 2664] * COMPONENT NI (network interface)
> [Thr 2664] * VERSION 38
> [Thr 2664] * RC -92
> [Thr 2664] * MODULE nixxi.cpp
> [Thr 2664] * LINE 2770
> [Thr 2664] * DETAIL NiPConnect2
> [Thr 2664] * SYSTEM CALL connect
> [Thr 2664] * ERRNO 10061
> [Thr 2664] * ERRNO TEXT WSAECONNREFUSED: Connection refused
> [Thr 2664] * COUNTER 160
> [Thr 2664] *
> [Thr 2664]
> *****************************************************************************
>
>
> Please try to get me out of this.
>
> thanks in advance..
>
> ranjith
| __.____._ Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
| |  _.____.__ |
Mark as helpful
