Difference in the SAPLogonTicketpair

[Former Member]

Hi Folks!!!

The sso has been configured in our stand alone portal system, here in the Ticketkeystore view

the SAPLogonTicketpair ticket is vaild till 2038 but the SAPLogonTicketpair-cert is valid till nov 2008,

Can i Change the validity date for this or do i need to create the SAPLogonTicketpair.

Also if i have to create the SAPLogonTicketpair manually do i need to restart the server to generate the

SAPLogonTicketpair-pair certificate.

Regards,

Vamshi.

[Former Member]

SAP Note 912229 has resolved the issue.

Regards,

Vamshi.

[shaila_kasha]

Hi Vamshi,

The SAPLgonTicketpair and SAPLogonTicketpair-cert must generally have the same validity. If we are facing any issue at this then as you said we need to create the SAPLogonTicketpair in Visual admin,

following the below steps for manual creation.Changing Validity of dates is not a standard option.

1.Select the Key Storage Service.

2.Select the TicketKeystore view.

3.Delete the SAPLogonTicketKeypair and SAPLogonTicketKeypair-cert entries.

4.Under Entry, choose Create.

The Key and Certificate Generation dialog appears.

5.Enter the Subject Properties in the corresponding fields.

The entries in these fields build a Distinguished Name in the form:

CN=<Common Name>, OU=<Organization Unit Name>, O=<Organization Name>, L=< Locality Name >, ST=<State/Province>, C=DE

6.Enter SAPLogonTicketKeypair as the Entry Name.

7.Select the Store certificate option and choose DSA as the algorithm to use.

8.Choose Generate.

Restart is sometimes not needed if the services run correctly and parameters are set at rz10. but for most times we generally restart after this process.

Regards,

Shaila