Symptom
- You are using the SSL configuration tool in the Netweaver Administrator to configure the AS Java for SSL or are using the tool to configure a new SSL access point.
- You have created a keypair as the sever identity for that access point, generated a certificate signing request (CSR) and imported the CSR response from the Certificate Authority (CA).
- After importing the CSR response, in order for the key pair to be used for the access point you select Save.
- Instead of the key store view being exported automatically to the PSE, a message in the form of the following is displayed:
SSL port "<port>": PSE file not updated. Export the keystore view to PSE
- When you select Export Keystore View to PSE file a message similar to the following is displayed
ERROR: -> PSE file[.\\..\\..\\..\\sec\\<pse_name>.pse] for view [<view_name>] not updated or not created - > Required but missing endpoint CA certificate: <DN contained in the subject field of the root CA certificate>
Read more...
Environment
- Netweaver AS Java 7.2 and HIGHER
Product
SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Composition Environment 7.2 ; SAP enhancement package 1 for SAP NetWeaver 7.3
Keywords
issuer missing ca certificate, PSE file, missing endpoint CA certificate , KBA , BC-JAS-SEC , Security, User Management , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview