SAProuter Certificate Expired How to Fix ?

Error: 

• ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE'

[sncxxall3374]*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [sncxxall.c 3340]

      GSS-API(maj): The referenced credentials have expired

      GSS-API(min): Validity date of certificate is invalid

    Unable to establish the security context

    target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

Solution:  Steps to apply saprouter certificate

Step 1:

Download the SAP Router and SAP Cryptographic software from market place and place this under the folder usr\sap\saprouter. This folder is called as saprouter’s home folder. Extract these files with sapcar.

Step 2:

Apply for the certificate with the distinguished name of your company. This distinguished name can be found in service market place under the link

http://service.sap.com/saprouter-sncadd and the certificate for saprouter should be applied in the same link.

Step 3:

With this distinguished name generate the PSE file with sapgenpse program located in saprouter folder.

Step 4:

After generating certreq file in saprouter folder edit the file and copy the content of the file under the link http://service.sap.com/saprouter-sncadd

Step 5:

After copying click “Request Certificate” in right most corner which generates the required certificate.Copy the content of the generated file and paste it into a text file in saprouter folder. Rename the file into “srcert” and install the certificate using sapgenpse command.The PIN which we have given in the previous step should be correctly to install the certificate.

Step 6:

After installing the certificate successfully credentials were to be added to the certificate. Only the added credentials will be allowed to start the saprouter program.

Step 7:

After adding credentials we can check the installation of certificate with sapgenpse command.

Step 8:

After verifying the certificate the SAPRouter program will be started in port number 3299.

Note:

SAP Router table should be correctly defined for accessing the systems through SAP router.

Tags: SAProuter certificate expired, sap router table, sapgenpse, saprouter port 3299, usr\sap\saprouter, SAP Cryptographic software,