How to renew the Sap Router License/Certificate Validity?
Solution:
Login into Marketplace Go to SAP Support Infrastructure Tab. In that, you have option SAP trust Center Services.
Click that in that you can see SPRouter Certificate.I have attached the procedure for renewing the Router Certificate.
Regards,
A small screen will appear, Click on “OK”
User Name : s0002761414
Password :
And Click “OK”
Copy the Complete Text under Document “Installing the sapcrypto library and starting the SAProuter” into a Word Document and take a Printout for Ready Reference.
Now, again,
Login to the SAP Service Marketplace by going to the http://service.sap.com/saprouter-sncadd through Internet Explorer
A small screen will appear, Click on “OK”
User Name : s0002761414
Password :
And Click “OK”
A new screen will appear, Click on “Apply Now !”
Select the certificate : CN=sachin, OU=0000442811, OU=SAProuter, O=SAP, C=DE
And Click “Continue”
Now, in your PC (on which SAProuter is configured), go to the My Computer ? (C: ) ? “usr” folder ? “sap” folder ? “saprouter” folder
And Rename the “local.pse” file as “local.pse.old1”
Now, again, in your PC (on which SAProuter is configured), go to Run ? cmd ? and you will be on the Command Promp Screen as follows
C:Documents and SettingsADMINISTRATOR1>
Write as follows
C:Documents and SettingsADMINISTRATOR1>cd.. (Press Enter)
C:Documents and Settings>cd.. (Press Enter)
OR
C:Documents and SettingsADMINISTRATOR1>cd
And you reach following
C:>
Write as follows
C:>cd usrsap
tintel (Press Enter)
Write as follows which is Command No. 3
C:usrsap
tintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=sachin, OU=0
000442811, OU=SAProuter, O=SAP, C=DE"
Got absolute PSE path "c:usrsapsaprouterlocal.pse".
Please enter PIN: (you need to write it and Press Enter)
Please reenter PIN: (you need to write it and Press Enter)
Supplied distinguished name: "CN=sachin, OU=0000442811, OU=SAProuter, O=SAP, C=DE"
Generating key (RSA, 1024-bits) ... succeeded.
certificate creation... ok
PSE update... ok
PKRoot... ok
Generating certificate request... ok.
C:usrsap
tintel>
Now open a new Notepad File, in the File got to
File ? Open ? (C: ) ? “usr” folder ? “sap” folder ? “ntintel” folder
Files of type : All Files
Select the File “ certreq” and Click “Open”
Copy the Complete Text and Paste the same in the Box under the “Insert the Certificate Signing Request” shown in the SAP Service Marketplace (which you had open earlier after clicking “Apply Now!” and “Continue” above)
Now, Click on “Request Certificate”
A New Certificate in the Text Format will be shown on the SAP Service Marketplace Screen.
Copy this Complete Text in a New Notepad File and Save it in
C:usrsapsaprouter
by the name “srcert.txt”
It will ask for Replacing earlier file, say Yes.
Now, this “srcert.txt” is to be Renamed as “srcert” by going to the Command Prompt and as follows
C:usrsap
tintel>cd
C:>cd usrsapsaprouter
C:usrsapsaprouter>ren srcert.txt srcert
(and your File “srcert.txt” is Renamed as “srcert”)
Now, Copy the “srcert” file from the “saprouter” folder and Paste it in the “ntintel” folder.
Now, go to the Command Prompt and as follows
C:usrsapsaprouter>cd
C:>cd usrsap
tintel (Press Enter)
C:usrsap
tintel> (Write Command No. 7 here as follows, which will Import the Certificate)
C:usrsap
tintel>sapgenpse import_own_cert -c srcert -p local.pse
CA-Response successfully imported into PSE "c:usrsapsaprouterlocal.pse"
C:usrsap
tintel> (Write Command No. 8 here as follows)
C:usrsap
tintel>sapgenpse seclogin -p local.pse
running seclogin with USER="ADMINISTRATOR1"
Please enter PIN: (you need to write it and Press Enter)
Added SSO-credentials for PSE "c:usrsapsaprouterlocal.pse"
"CN=sachin, OU=0000442811, OU=SAProuter, O=SAP, C=DE"
( In the above command “sapgenpse seclogin -p local.pse –O ADMINISTRATOR1” could also be written or any Other User Name could bee given, which would have restricted the SAProuter to Function Only with that User Name Logged In as a User)
Now, to Check if the Certificate has been imported correctly, use the Command No. 10 as follows
C:usrsap
tintel>sapgenpse get_my_name -v -n Issuer
Opening PSE "c:usrsapsaprouterlocal.pse"...
PSE open ok.
ok.
Retrieving my certificate... ok.
Getting requested information... ok.
SSO for USER "ADMINISTRATOR1"
with PSE file "c:usrsapsaprouterlocal.pse"
Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
(the above “Issuer” is same as given in the Command No. 10 of the Document “Installing the sapcrypto library and starting the SAProuter”)
C:usrsap
tintel>
Now, the SAP Router Certificate has been Renewed and is OK for Use !!!