renew certificate saprouter

Renew Certificate SAProuter

Here the steps to renew certificate SAProuter :

1. Stop service saprouter with command ./saprouter -s

2. Make a folder backup in saprouter directory

3. Copy certreq, cred_v2, local.pse, srcert from saprouter directory to backup directory and remove them.

4. generate new certificate request with command : ./sapgenpse get_pse -v -r certreq1 -p local.pse It will ask for certain parameters, get the Disinguished Name from http://service.sap.com/saprouter-sncadd or DN is CN=saprouter-svr,OU=0001308096,OU=SAProuter,O=SAP,C=DEIt will generate file “certreq1” in directory saprouter.

5. Open http://service.sap.com/saprouter-sncadd site , logon using user ID and password service.sap.com.Klik Apply Now and Continue.

6. Open file certreq1 in directory saprouter, copy text from this file and paste the text into the request certificate page. Klik Request Certificate.

7. Select the generated certificate text and copy all from “BEGIN”to “END” and make a text file srcert.txt in saprouter directory. Rename the srcert.txt to srcert only.

8. Install the certificate in saprouter with command sapgenpse import_own_cert -c srcert -p local.pse

9. Create the credentials for the SAProuter with command sapgenpse seclogin -p local.pse. This will create a file called cred_v2 in the same directory.

10. Check if the certificate has been imported correctly with command Sapgenpse get_my_name -v -n Issuer.

And check validate of certificate with command sapgenpse get_my_name –n validity

11. Start SAProuter with command ./startoss.sh and ./saprouter –r