SAP Knowledge Base Article - Preview

1834904 - PSE file not updated or created -> Required but missing endpoint CA certificate

Symptom

  • You are using the SSL configuration tool in the Netweaver Administrator to configure the AS Java for SSL or are using the tool to configure a new SSL access point.
  • You have created a keypair as the sever identity for that access point, generated a certificate signing request (CSR) and imported the CSR response from the Certificate Authority (CA).
  • After importing the CSR response, in order for the key pair to be used for the access point you select Save.
  • Instead of the key store view being exported automatically to the PSE, a message in the form of the following is displayed:  

SSL port "<port>": PSE file not updated. Export the keystore view to PSE 

  • When you select Export Keystore View to PSE file a message similar to the following is displayed

ERROR: -> PSE file[.\\..\\..\\..\\sec\\<pse_name>.pse] for view [<view_name>] not updated or not created - > Required but missing endpoint CA certificate: <DN contained in the subject field of the root CA certificate> 

export_to_pse_error.png


Read more...

Environment

  • Netweaver AS Java 7.2 and HIGHER

Product

SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Composition Environment 7.2 ; SAP enhancement package 1 for SAP NetWeaver 7.3

Keywords

issuer missing ca certificate, PSE file, missing endpoint CA certificate , KBA , BC-JAS-SEC , Security, User Management , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.