SAP Knowledge Base Article - Preview

2878643 - SMMS does not display dev_ms file and SM21 shows SSL error while accessing logs

Symptom

1)

SMMS cannot read dev_ms trace file.

In old SAP GUI,

SMMS ==> Goto==> Trace==>File==>Display

In SAP GUI >=760

SMMS ==>More==>Goto==> Trace==>File==>Display

It shows the below message

0 lines from F:\usr\sap\SID\Instance\work\dev_ms read

KBA_SMMS2.png

dev_icm trace from the work directory (path: /usr/sap/SID/Instance/work/) shows below error:

[Thr 1800] *** ERROR => IcmConnInitClientSSL: SapSSLCreateCredHdl failed for cred sap_system_pki_instance.pse: SSSLERR_PSE_ERROR(-40) {000420e6} {root-id=76873F7934021EEA8C8F0CDE34A81277} [icxxconn.c 2133]
[Thr 1800] GUI <Session ID>, <Client>, <USER>, <Terminal>, time=06:36:40, W9, program=RSMONMS_ALV, high priority, memory=0, tasks=1, appl info=, tcode=SMMS
[Thr 1800] role: Client, protocol: HTTPS, local: <IP of application server from where SMMS is executed>:<local random port>, peer: <ASCS Host /IP>:5<instance_number>14

2)

SM21 does not fetch logs of some application servers when we have empty field in "Extended Instance name"

The error displayed is:

Error(id=SOAP:1023): SRT: Processing error in Internet Communication framework: ("IcmConnInitClienSSL: SapSSLCreateCredHdl failed")

kba_sm21.PNG

SM21 can also display a different error as:

Error (id=SOAP:1023): SRT: Processing error in Internet Communication Framework: ("SSL handshake with localhost:5<instance_number>14 failed: SSSLER..)

dev_icm trace from the work directory (path: /usr/sap/SID/Instance/work/)shows below error:

ERROR => IcmConnInitClientSSL: SapSSLCreateCredHdl failed for cred sap_system_pki_instance.pse: SSSLERR_PSE_ERROR(-40) {00011bf5} {root-id=005056B552411EDA878D4F7B7EAE76F5} [icxxconn.c 2154]
RFC_UI <Session ID>, <client>, <USER>, <terminal>, time=00:34:40, W9, program=RSYSLOG, high priority, memory=0, tasks=1, appl info=, tcode=SM21
role: Client, protocol: HTTPS, local: <IP of application server from where SM21 is executed>:<local random port>, peer: <IP address of other application server>:5<instance_number>14

There can be some other errors  in dev_icm trace but all of them related to sap_system_pki_instance.pse file itself.


Read more...

Environment

  • SAP Netweaver
  • ABAP Platform
  • Kernel 742 and higher

Product

SAP ERP 6.0

Keywords

read, can't, kernel, message server, ASCS, application server, instance, sapcontrol, systemPKI, sap_system_pki_instance.pse , KBA , BC-CST-MS , Message Service , BC-CST-STS , Startup Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.