Do I need change PSE(certificate) after system migration ???

[Former Member]

Dear expert,

when doing productive system migration(sytem copy), such like ERP/ BW/ Portal/BO move to different new hardware mchine, OS(e.g. AIX 6.1 to AIX 7.1) and hardware changed, and of course, the SAP SID and others keep the same.

and we have implemented SSO between systems(ERP/ BW/ Portal/BO).

so my question is Do we need replace/change all releated PSE(certificate)? for example, in ABAP STRUST replace PSE, exchange new one to Portal JAVA/BW ....etc.

I clearly known if do system copy like PRD to QAS, since the SAP SID changed, so we must do the releatd work in new target system like replace/change certificates, export/import again between all involved systems.

but now my scenario is system move(migration), so the SAP SID keep the same, that is PRD to PRD. so do we still need to do such certificate update/exchange work?

pls help clarify.

Thanks so much,

Jeffrey

[Former Member]

Thanks so much Isaias and Reagan!

[isaias_freitas]

You are welcome! 🐵

[Reagan]

There is no need to recreate the PSE's as long as you have the hostname and SID are same. As long as you move all the files from the "sec" directory to the new hardware then it should work fine. As far as I know the data is also stored in the database as well and this is the reason why the system copy guide suggests to recreate the PSE's to get the new system information. In your case you just need the move the files from the old server to the new one.

[meiwang_melissa]

Thanks so much Isaias,

Yes, the hostname , SAP SID , IP address and others are all same.

we shutdown the old machine, and switch and keep the old hostname/IP/DNS to the new machine, and do system copy(homogeneous) in new machine.

from SAP standard sytem copy guide, in post activities, we need to do replace such PSE files, but I think it meant PRD to QAS

scenario for most case, but our case is PRD to PRD move/migration. furthermore we also copy the /usr/sap/PRD folder from old machine to new machine (replace new one),

and from your reply , the cerficate seems not only related to SAP SID and also related to hostname , but not releated to the hardware(such like machine change)? so I also think maybe we do not need to change/update such certifications after system move/migration.

Thanks so much!

Jeffrey

[isaias_freitas]

Hello Jeffrey,

You are welcome!

As far as I know, there is nothing at the PSE file that is linked to the hardware.

Regards,

Isaías

[isaias_freitas]

Hello Jeffrey,

Will the hostnames be the same?

I mean, your current ECC system is running at the server with hostname "eccserver.mydomain.internal" (just an example). Would the same hostname be used at the new server?

If yes, you would not need to change/renew the certificates for the "SSL server Standard PSE" files.

If no, you would have to recreate the server PSE files.

About the certificates that are exchanged for the SSO setup, I am not sure whether it will be required to re-do this setup.

Does the System Copy Guide that you are following mention anything about this? If not, I would do it just to guarantee that no issues would occur. This would be an easy, fast step to perform anyway, right?

Regards,

Isaías

[Former Member]

pls help, thanks...

[Former Member]

Dear Expert,

pls help,

Thanks,

Jeffrey

[Former Member]

have anyone thought about this problem when doing system migration?

thanks...