Install or renew the maintenance certificate in sap router

Create or renew the maintenance certificate SAP Router

OS: Microsoft Windows 2003 and  2008

Step1:

Delete the Following files in the respected locations

Delete these 4 files in E:\usr\sap\saprouter

1. 1. certreq
2. 2. cred_V2
3. 3. local.pse
4. 4. srcert

Step2:

Run the following command to generate the PSE file and create the certificate request.

C:\saprouter>sapgenpse get_pse -v -r certreq -p local.pse “CN=kslserver, OU=0000804861, OU=SAProuter, O=SAP, C=DE”

Note:

“C:\saprouter“ is the location of saprouter files.

“CN=kslserver, OU=0000804861, OU=SAProuter, O=SAP, C=DE” in command is the distinguished name of the SAP Router server which is assigned by SAP at the time of server registered. This can be found in server maintenance in service market place.

Step 3:

Copy the text from certificate request which is created by sapgenpse and past ino the following place to get the new certificate.

http://service.sap.com/tcs

  You will get a new certificate as follows. Copy from the Beginning to the End of certificate and past in text file.

Step 4:

Importing the certificate request

With this in turn you can install the certificate in your saprouter by calling

sapgenpse import_own_cert -c “c:\routecert.txt” -p local.pse

“c:\routecert.txt” is a file name which has the certificate that copied from SAP Service Marketplace

Step 5:

Creating credentials for router

sapgenpse seclogin -p local.pse -O <user_for _saprouter>             

Note:  omit -O <user> to make the logged in user to be used for credentials

This will create a file named cred_V2 in the same directory. If not, copy the same file created in

<App drive>:\usr\sap\saprouter

Step 6:

To check the details we applied as shown in the below screenshot.

sapgenpse get_my_name -v -n Issuer

sapgenpse get_my_name -n validity