Skip to Content
avatar image
Former Member

Do I need change PSE(certificate) after system migration ???

Dear expert,

when doing productive system migration(sytem copy), such like ERP/ BW/ Portal/BO move to different new hardware mchine, OS(e.g. AIX 6.1 to AIX 7.1) and hardware changed, and of course, the SAP SID and others keep the same.

and we have implemented SSO between systems(ERP/ BW/ Portal/BO).

so my question is Do we need replace/change all releated PSE(certificate)? for example, in ABAP STRUST replace PSE, exchange new one to Portal JAVA/BW ....etc.

I clearly known if do system copy like PRD to QAS, since the SAP SID changed, so we must do the releatd work in new target system like replace/change certificates, export/import again between all involved systems.

but now my scenario is system move(migration), so the SAP SID keep the same, that is PRD to PRD. so do we still need to do such certificate update/exchange work?

pls help clarify.

Thanks so much,

Jeffrey

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

7 Answers

  • avatar image
    Former Member
    Nov 21, 2016 at 07:47 AM

    have anyone thought about this problem when doing system migration?

    thanks...

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 21, 2016 at 11:22 AM

    Dear Expert,

    pls help,

    Thanks,

    Jeffrey

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 22, 2016 at 02:05 AM

    pls help, thanks...

    Add comment
    10|10000 characters needed characters exceeded

  • Nov 22, 2016 at 11:52 AM

    Hello Jeffrey,

    Will the hostnames be the same?

    I mean, your current ECC system is running at the server with hostname "eccserver.mydomain.internal" (just an example). Would the same hostname be used at the new server?

    If yes, you would not need to change/renew the certificates for the "SSL server Standard PSE" files.

    If no, you would have to recreate the server PSE files.

    About the certificates that are exchanged for the SSO setup, I am not sure whether it will be required to re-do this setup.

    Does the System Copy Guide that you are following mention anything about this? If not, I would do it just to guarantee that no issues would occur. This would be an easy, fast step to perform anyway, right?

    Regards,

    Isaías

    Add comment
    10|10000 characters needed characters exceeded

  • Nov 23, 2016 at 03:40 AM

    Thanks so much Isaias,

    Yes, the hostname , SAP SID , IP address and others are all same.

    we shutdown the old machine, and switch and keep the old hostname/IP/DNS to the new machine, and do system copy(homogeneous) in new machine.

    from SAP standard sytem copy guide, in post activities, we need to do replace such PSE files, but I think it meant PRD to QAS

    scenario for most case, but our case is PRD to PRD move/migration. furthermore we also copy the /usr/sap/PRD folder from old machine to new machine (replace new one),

    and from your reply , the cerficate seems not only related to SAP SID and also related to hostname , but not releated to the hardware(such like machine change)? so I also think maybe we do not need to change/update such certifications after system move/migration.

    Thanks so much!

    Jeffrey

    Add comment
    10|10000 characters needed characters exceeded

  • Nov 23, 2016 at 11:44 PM

    There is no need to recreate the PSE's as long as you have the hostname and SID are same. As long as you move all the files from the "sec" directory to the new hardware then it should work fine. As far as I know the data is also stored in the database as well and this is the reason why the system copy guide suggests to recreate the PSE's to get the new system information. In your case you just need the move the files from the old server to the new one.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 25, 2016 at 01:18 AM

    Thanks so much Isaias and Reagan!

    Add comment
    10|10000 characters needed characters exceeded