Hi
When i check my validity it shows like
C:\usr\Sap\Saprouter>sapgenpse get_my_name -n validity
SSO for USER "Administrator"
with PSE file "C:\usr\Sap\Saprouter\local.pse"
Validity - NotBefore: Wed Jul 14 08:29:45 2010
NotAfter: Thu Jul 14 08:29:45 2011
i hope there is not a problem in validity..
---------------Original Message---------------
From: DineshKumar_SAP
Sent: Monday, August 02, 2010 6:55 AM
Subject: sm59 saposs error
> Hi ranjith
>
> This is because of Certificate expiry. Post your message to
> sap.service.com they will guide you or attaching one document
>
>
> How to Renew SAPROUTER Certificate.
>
>
>
> 1. Login to the SAP Service Marketplace with the Service Marketplace
> USERID which is assigned to your installation.
>
>
>
> 2. Use the latest SAProuter version, which can be downloaded from SAP
> Service Marketplace (alias /SWDC).
>
>
>
> 3. Change to the alias /SAPROUTER-SNCADD. Before you can download the
> software components two preconditions must be met:
>
>
>
> a. You must have been allowed to download the software. This
> authorization is added as soon as SAP has received a positive statement from
> the "Bundesausfuhramt" (German Federal Export Office). This procedure is
> necessary since the software falls under EU regulations.
>
>
>
> b. For more information on how to obtain authorization if download is
> not possible see note 397175.
>
>
>
> c. You must accept that you must follow the regulations imposed by the
> EU on the use and distribution of the cryptographic software components
> downloaded from the SAP Service Marketplace.
>
>
>
> d. The acceptance of the terms and conditions is logged with your USERID
> and stored for reporting purposes to the "Bundesausfuhramt".
>
>
>
> 4. Click on "Download Area" > "SAP Cryptographic Software" and select
> the correct sapcrypto library for your SAProuter "<op-sys>". Save the file
> to the directory where the SAProuter executable is located.
>
>
>
> 1. You can get the file car.exe/sap/sapcar.exe, which is necessary to unpack
> the archive from any Installation Kernel CD.
>
> Executing the command car -xvf SAPCRYPTO.CAR will unpack the following
> files:
>
> [lib]sapcrypto.[dll|so|sl]
>
> sapgenpse[.exe]
>
> ticket
>
>
>
> . As user <snc_adm> set the environment variables SNC_LIB and SECUDIR:
>
>
>
> WINDOWS NT, 2000, XP
>
>
>
> or higher
>
> SECUDIR = <directory_of_saprouter>
>
>
>
> SNC_LIB = <drive>:\<path_to_libsecude>\ntia64\sapcrypto.dll or
>
>
>
> <drive>:\<path_to_libsecude>\ntintel\sapcrypto.dll or
>
>
>
> <drive>:\<path_to_libsecude>\nt-x86_64\sapcrypto.dll
>
>
>
> NOTE
>
> after configuring the variables in Windows, you have to reboot this server
> before you continue.
>
>
>
>
>
> 2. Change to the alias SAPROUTER-SNCADD. From the list of SAProuters
> registered to your installation, choose the relevant "Distinguished Name".
>
>
>
> 3. Generate the certificate Request with the command:
>
>
>
> Example:
>
> CN=KUDSSMGR,OU=0000830262,OU=SAProuter,O=SAP,C=DE
>
> sapgenpse get_pse -v -r certreq -p local.pse CN=KUDSSMGR, OU=0000830262,
> OU=SAProuter, O=SAP, C=DE
>
>
>
> Alternatively use the two commands:
>
> sapgenpse get_pse -v -noreq -p local.pse "<Distinguished Name>"
>
> sapgenpse get_pse -v -onlyreq -r certreq -p local.pse
>
>
>
> You will be asked twice for a PIN here. Please choose a PIN and document it,
> you have to enter it identically both times. Then you will have to enter the
> same PIN every time you want to use this PSE.
>
>
>
> 4. Display the output file "certreq" and with copy&paste (including the
> BEGIN and END statement) insert the certificate request into the text area
> of the same form on the SAP Service Marketplace from which you copied the
> Distinguished Name.
>
>
>
> 5. In response you will receive the certificate signed by the CA in the
> Service Marketplace. Copy&paste the text to a new local file named "srcert",
> which must be created in the same directory as the sapgenpse executable.
>
>
>
> 6. With this in turn you can install the certificate in your saprouter
> by calling:
>
> sapgenpse import_own_cert -c srcert -p local.pse
>
>
>
> 7. Now you will have to create the credentials for the SAProuter with
> the same program (if you omit -O <user_for_saprouter>, the credentials are
> created for the logged in user account).
>
> sapgenpse seclogin -p local.pse -O <user_for _saprouter>
>
> Note: The account of the service user should always be entered in full
> <domainname>\<username>
>
>
>
> 8. This will create a file called "cred_v2" in the same directory as
> "local.pse"
>
>
>
> For increased security please check that the file can only be accessed by
> the user running the SAProuter.
>
>
>
> Do not allow any other access (not even from the same group)!
>
> On UNIX this will mean permissions being set to 600 or even 400!
>
> On WINDOWS check that the permissions are granted only to the user the
> service is running as!
>
>
>
>
>
> 9. Check if the certificate has been imported successfully with the
> following command:
>
> sapgenpse get_my_name -v -n Issuer
>
> The name of the Issuer should be:
>
> CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
>
>
>
> 10. If this is not the case, delete the files "cred_v2"and "local.pse" and
> start over at Item 3. If the output still does not match please open a
> customer message in component XX-SER-NET stating the actions you have taken
> so far and the output of the commands 3.,6.,7. and 9.
>
>
>
>
>
> Dinesh
>
>
>
> On Mon, Aug 2, 2010
| __.____._ Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
| |  _.____.__ |
Mark as helpful
