topic Re: STRUST and System PSE in Application Development and Automation Discussions

STRUST and System PSE

Former Member — Wed, 28 Mar 2012 10:27:22 GMT

Hi,

I'm starting to study the SAP security and I ran into my first problem/question...

After an homogeneous system copy from PRD to DEV, STRUST had the PRD system PSE information (with its SID, etc) and I decided to replace it using the replace function on the STRUST transaction.

I created a new system PSE with the DEV system SID and basic information:

CN=<SID>, O=<My Company's name>, C=PT

The system PSE file (SAPSYS.pse) was created on the operating system level, at \usr\sap\<SID>\DVEBMGS00\sec.

However, the STRUST check tells me there is an error:

"Error during test signature"

The SAP help tells me to adjust the PSE on the application server by choosing "Distribute" in the context menu of the node for the relevant appliation. If the error occurs again, and the PSE is encrypted, I should assign a new password for the PSE.

I've done all that but the error remains...

What can I do to solve this?

And, if possible, where can I find useful information to really understand how this works with SAP?

Thanks

Antonio

Re: STRUST and System PSE

rhviana — Mon, 07 Jan 2013 18:05:41 GMT

Hi Antonio,

I´m getting the same error.

Do you solved your problem ?

I did many tests, I did the conversion of the certificate into two differents servers, but when I try to import... I got this error Error during test signature...

I dont know how to procede.

Thanks,

Kind regards,

Re: STRUST and System PSE

Former Member — Mon, 07 Jan 2013 19:17:09 GMT

Make sure your SAPCRYPTOLIB is setup correctly. See the attached link.

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/49/23501ebf5a1902e10000000a42189c/frameset.htm

Re: STRUST and System PSE

Former Member — Tue, 08 Jan 2013 03:52:59 GMT

Could be a case where few parameters were missing in the instance profile , could you please check if all the required parameters are in place.

Thanks ,
Dev

Re: STRUST and System PSE

rhviana — Tue, 08 Jan 2013 12:37:08 GMT

Hi Antonio,

I fixed the problem here.

If you still with error, ping here.

Kind regards,

Viana.

Re: STRUST and System PSE

Former Member — Wed, 09 Jan 2013 15:40:11 GMT

Hi Ricardo...

yes, please share the solution...

thanks

Antonio

Re: STRUST and System PSE

rhviana — Wed, 09 Jan 2013 16:04:56 GMT

Hi Antonio,

What is the SO ?

Check below:

Set the variables depending on the SO - via RZ10

`ssl/ssl_lib`	Path and file name of the SAP Cryptographic Library	UNIX: `/usr/sap/<SID>/SYS/exe/run/libsapcrypto.so` Windows:`<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll`
`sec/libsapsecu`	Path and file name of the SAP Cryptographic Library	UNIX: `/usr/sap/<SID>/SYS/exe/run/libsapcrypto.so` Windows:`<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll`
`ssf/ssfapi_lib`	Path and file name of the SAP Cryptographic Library	UNIX: `/usr/sap/<SID>/SYS/exe/run/libsapcrypto.so` Windows:`<DRIVE>:\usr\sap\<SID>\SYS\exe\run\sapcrypto.dll`
`ssf/name`	`SAPSECULIB`	`SAPSECULIB`

If you are using windows you also must set up local variables and linux also check below:

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/49/236897bf5a1902e10000000a42189c/content.htm?frameset=/en/49/236897bf5a1902e10000000a42189c/frameset.htm

After that restart machine and it will works.

Regards,

Ricardo Viana.