Install or renew the maintenance certificate in sap router
Create or renew the maintenance certificate SAP Router
OS: Microsoft Windows 2003 and 2008
Delete the Following files in the respected locations
Delete these 4 files in E:\usr\sap\saprouter
- 1. certreq
- 2. cred_V2
- 3. local.pse
- 4. srcert
Run the following command to generate the PSE file and create the certificate request.
C:\saprouter>sapgenpse get_pse -v -r certreq -p local.pse “CN=kslserver, OU=0000804861, OU=SAProuter, O=SAP, C=DE”
“C:\saprouter“ is the location of saprouter files.
“CN=kslserver, OU=0000804861, OU=SAProuter, O=SAP, C=DE” in command is the distinguished name of the SAP Router server which is assigned by SAP at the time of server registered. This can be found in server maintenance in service market place.
Copy the text from certificate request which is created by sapgenpse and past ino the following place to get the new certificate.
You will get a new certificate as follows. Copy from the Beginning to the End of certificate and past in text file.
Importing the certificate request
With this in turn you can install the certificate in your saprouter by calling
sapgenpse import_own_cert -c “c:\routecert.txt” -p local.pse
“c:\routecert.txt” is a file name which has the certificate that copied from SAP Service Marketplace
Creating credentials for router
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
Note: omit -O <user> to make the logged in user to be used for credentials
This will create a file named cred_V2 in the same directory. If not, copy the same file created in
To check the details we applied as shown in the below screenshot.
sapgenpse get_my_name -v -n Issuer
sapgenpse get_my_name -n validity