SAP Knowledge Base Article - Preview

3774188 - SUM UI not accessible via port 1129 due to SSL initialization error in SAP Host Agent

Symptom

  • SUM UI returns error "This site can't be reached".

  • No process is bound to HTTPS port 1129 (netstat -ano | findstr 1129 returns no result)
    Telnet test to host with port 1129 fails withconnection failed).

  • HTTP port 1128 is in listening state. 

  • sapstartsrv.log for SAP Host Agent (under /usr/sap/hostctrl/work directory) returns with following error:

    [Thr 8460] *** ERROR =>   secussl_Create_SSL_CTX():  PSE "<Drive>:\Program Files\SAP\hostctrl\exe\sec\SAPSSLS.pse":
    missing SSO credentials, PSE is protected with PIN/password! [ssslsecu.c   3694]
    [Thr 8460] secussl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed  (1824/0x00000720)
    [Thr 8460]    => "Wrong or missing PIN for PSE."

    ...

    [Thr 8460] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_MISSING_PIN trying to create SERVER Credential
            for "<Drive>:\Program Files\SAP\hostctrl\exe\sec\SAPSSLS.pse" [ssslxxi.c    3849]
    [Thr 8460] *** ERROR => Initialization of SSL library failed -- NO SSL available!
    [Thr 8460] =================================================
    [Thr 8460] 
    [Thr 8460] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_MISSING_PIN

    ...

    SapSSLInit failed => https support disabled 


Read more...

Environment

  • SAP NetWeaver base product
  • Windows operating system

Product

SAP NetWeaver 7.4 ; SAP NetWeaver 7.5

Keywords

SUM, UI, port 1129, HTTPS disabled, host agent, sapstartsrv, SSSLERR_PSE_MISSING_PIN, SAPSSLS.pse, SapSSLInit failed, https support disabled  , KBA , BC-UPG-TLS-TLJ , Upgrade tools for Java , BC-CCM-HAG , Host Agent , BC-UPG-TLS-TLA , Upgrade tools for ABAP , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.