Get_pse: can't create pse

Updated May 18, 2018

Can anyone please send the detail for SAProuter certificate renewal process step by step for OS Win 2003.

Comments

05 Jan 2010 3:25 am Shalesh Singh Visen
When I am generating the new certificate request while using the command sapgenpse get_pse -v -r certreq -p local.pse then an error message is coming.
Which is enclosed below for your reference.

C:saprouter>cd nt-x86_64

C:saprouter
t-x86_64>sapgenpse get_pse -v -r certreq -p local.pse Got absolute PSE path "C:Documents and Settingsdministrator.BESTseclocal.p
se".
Please enter PIN:
Please reenter PIN:
get_pse: Distinguished name of PSE owner: CN=MALIDES, OU=0000999999, OU=SAProute r, O=SAP, C=DE Supplied distinguished name: "CN=MALIDES, OU=0000999999, OU=SAProuter, O=SAP, C =DE"
Creating PSE with format v2 (default)
No License ticket file found (trying C:saprouter
t-x86_64 icket):
No License ticket file found (trying C:Documents and Settingsdministrator.BES
Tsec icket):
No License ticket file found (trying C:secudeetc icket):
get_pse: Can't create PSE.
ERROR in af_create: (18946/0x4a02) Ticket error : "No License ticket file found (trying C:saprouter
t-x86_64 icket):
No License ticket file found (trying C:Documents and Settingsdministrator.BES
Tsec icket):
No License ticket file found (trying C:secudeetc icket):
"
ERROR in ??: (18946/0x4a02) Ticket error : "No License ticket file found (trying
C:saprouter
t-x86_64 icket):
No License ticket file found (trying C:Documents and Settingsdministrator.BES
Tsec icket):
No License ticket file found (trying C:secudeetc icket):

05 Jan 2010 3:28 am Shalesh Singh Visen
If you talking about router certificate update below is the step-by-step
procedure to renew your certificate.
make a new folder old in your saprouter directory like c:usrsapsaprouter
old
move certreq, cred_v2, getcert.cer, local.pse, srcert in old directory
*After that run the below command to generate new certificate request*
*C:usrsapsaprouter>sapgenpse get_pse -v -r certreq1 -p local.pse*
-----[[sapgenpse get_pse -v -r certreq -p local.pse "Distinguished Name"
Example.
sapgenpse get_pse –v -r certreq -p local.pse "CN=saprouter, OU=0000870656, OU=SAProuter, O=SAP, C=DE"
also check https://forums.sdn.sap.com/thread.jspa?forumID=205&threadID=943412
]]------
*After generating the certificate request*
Open http://service.sap.com/saprouter-sncadd site in Internet Explorer
Logon using your service.sap.com ID and Password
Press Apply now
*Press Continue*
*Open the file: c:usrsapsaproutercertreq1 with notepad*
*Copy all text from this file from ---BEGIN CERT--- TO .... ---END CERT--*
**
*And paste the text to the request certificate page*
*Press the Request Certificate Button*
*Select the generated certificate text and copy and make a text file
srcert.txt in c:usrsapsaprouter directory*
*Rename the srcert.txt to srcert*
*C:usrsapsaprouter>ren srcert.txt srcert*
*With this in turn we can install the certificate in our saprouter by
calling*
*C:usrsapsaprouter>sapgenpse.exe import_own_cert -c srcert -p local.pse*
*now we will have to create the credentials for the SAProuter with the same
program*
*C:usrsapsaprouter>sapgenpse seclogin -p local.pse -O sncadm*
**
*
This will create a file called cred_v2 in the same directory.
Check if the certificate has been imported correctly
C:usrsapsaprouter>Sapgenpse get_my_name -v -n Issuer
Now open the SAP router connection for test and test the connection.