SAP ROUTER CERTIFICATE RENEWAL

Sap router certificate renewal Process:

In this blog we have explained the sap router certificate renewal process and how to check the router status, sap router start and stop and sap router validity.

Issue :

1. sap unable to login the sap system through sap service market.
2. we have identify error sap router Peer certificate expired (Sap router certificate expired)

We need to renewal the sap router and OS is window server.
Check the sap router Certificate validity:

• login to the sap router user.
• Go to the /usr/sap/saprouter location.
• Execute the below command for check validity.
• Command:
# sapgenpse get_my_name –n validity

SAP Router certificate renewal steps:

• stop the saprouter
• Take the Backup of the sap router File.
• Delete the local.pse and cred_v2 files in /usr/sap/saprouter location.
• Generate the the new PSE Certificate from sap service market.
• Change the name for new PSE Certificate to local.pse
• Move to the local.pse file to sap router location
• Import the certificate and update the passwords.
• Start the sap router services.

Take the Backup of the sap router:

• Take the Backup of the saprouter file . If any issue, we can revert on original file.
File name: saprouter
Location: /usr/sap/saprout
• Stop the sap router.
• Once file backup has completed, then delete the below files on sap router location.
File:
1. local.pse
2. cred_v2
3. srcert
4. certreq

Generate the the new PSE Certificate from sap service market:

• Go to the sap server market place
• Goto tools and navigate to sap router certificate.
• As per sap SUSER ID, You can select the sap router name.
• Once select the saprouter then Generate the PSE File.
• Download the Newly genrated PSE File and change the file name to local.pse
• Move the local.pse file to below saprouter location.
• Location: /usr/sap/saprouter

Import the certificate and update the passwords:

• Move the local.pse file to below saprouter location.
• Location: /usr/sap/saprouter
• Import the certificate using below command
• Go to /usr/sap/saprouter
• Command: sapgenpse seclogin –p local.pse –x PASSWORD –O saprouter
• Once executed the above command then certificate has been imported.
• Check the certificate validity status.
• Command:# sapgenpse get_my_name –n validity
• You can iddentify the certificate validity.
• Start the saprouter
• Check again certificate has been imported or not using below command
• Command:
• # Sapgenpse get_my_name –v –n Issuer

We have successfully completed the  Sap router certificate renewal process.

SAPROUTER Commands:

• How to check sap router status:
Command: saprouter –l
• How to starting the sap router
Command: saprouter –r
• How to stopping the sap router
Command: saprouter –S

Other information for sap router:

• SAP will connect to the our landscape SAP System using SAPROUTER.
• We need to update the latest version of the sap router.
• Using the below command, need to identify the sap router version.
  Command: saprouter –l
• sap router will support on Window server and Linux server also.

SAP ROUTER Update :
We will explain the SAP Router update from lower version to higher version.

Please find the below steps for sap router update.

• Download the saprouter media from sap service market
• Media path:sap servie market—download—S—SAP ROUTER
• SAP ROUTER —-Based on OS version, select the latest version of saprouter and download the media.
• Create the temporary location and move to the sap router media.
• Uncar the sap router media
• Stop the sap router using the below command.
• Command:
    ./saprouter -s
• Once saprouter has stopped then take the Backup of the saprouter files.
• Go to saprouter directory
• Location: /usr/sap/saprouter
• Take backup of the saprouter file.
• # COMMAND: cp –pr saprouter saprouter.old
• Once Backup has completed the goto the New saprouter version media location.
• Move new saprouter files to original sap router work directory.
Directory: /usr/sap/saprouter
• Restart the sap service and check the latest version of the sap router
• Command:
    Saprouter –l for saprouter version details.
• Sap router version has been completed.

Conclusion:

In this blog, we have explained the sap router certificate renewal steps process and sap router start and stop process, sap router validity check, sap router version check and sap router version update process steps.

Other Posts:

1. Sap hana db installation
2. SAP ECC to s/4 hana conversion
3. SAP HANA DB Backup configuration
4. SAP HANA Log volume full situation
5. Sybase db upgrade
6. Sybase db backup and restore process steps.

FAQ for sap router certificate renewal