Skip to Content
0

Do I need change PSE(certificate) after system migration ???

Nov 20, 2016 at 05:51 AM

436

avatar image

Dear expert,

when doing productive system migration(sytem copy), such like ERP/ BW/ Portal/BO move to different new hardware mchine, OS(e.g. AIX 6.1 to AIX 7.1) and hardware changed, and of course, the SAP SID and others keep the same.

and we have implemented SSO between systems(ERP/ BW/ Portal/BO).

so my question is Do we need replace/change all releated PSE(certificate)? for example, in ABAP STRUST replace PSE, exchange new one to Portal JAVA/BW ....etc.

I clearly known if do system copy like PRD to QAS, since the SAP SID changed, so we must do the releatd work in new target system like replace/change certificates, export/import again between all involved systems.

but now my scenario is system move(migration), so the SAP SID keep the same, that is PRD to PRD. so do we still need to do such certificate update/exchange work?

pls help clarify.

Thanks so much,

Jeffrey

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

7 Answers

Jeffrey Chen Nov 21, 2016 at 07:47 AM
0

have anyone thought about this problem when doing system migration?

thanks...

Share
10 |10000 characters needed characters left characters exceeded
Jeffrey Chen Nov 21, 2016 at 11:22 AM
0

Dear Expert,

pls help,

Thanks,

Jeffrey

Share
10 |10000 characters needed characters left characters exceeded
Jeffrey Chen Nov 22, 2016 at 02:05 AM
0

pls help, thanks...

Share
10 |10000 characters needed characters left characters exceeded
Isaias Freitas
Nov 22, 2016 at 11:52 AM
0

Hello Jeffrey,

Will the hostnames be the same?

I mean, your current ECC system is running at the server with hostname "eccserver.mydomain.internal" (just an example). Would the same hostname be used at the new server?

If yes, you would not need to change/renew the certificates for the "SSL server Standard PSE" files.

If no, you would have to recreate the server PSE files.

About the certificates that are exchanged for the SSO setup, I am not sure whether it will be required to re-do this setup.

Does the System Copy Guide that you are following mention anything about this? If not, I would do it just to guarantee that no issues would occur. This would be an easy, fast step to perform anyway, right?

Regards,

Isaías

Share
10 |10000 characters needed characters left characters exceeded
Mei Wang Melissa Nov 23, 2016 at 03:40 AM
0

Thanks so much Isaias,

Yes, the hostname , SAP SID , IP address and others are all same.

we shutdown the old machine, and switch and keep the old hostname/IP/DNS to the new machine, and do system copy(homogeneous) in new machine.

from SAP standard sytem copy guide, in post activities, we need to do replace such PSE files, but I think it meant PRD to QAS

scenario for most case, but our case is PRD to PRD move/migration. furthermore we also copy the /usr/sap/PRD folder from old machine to new machine (replace new one),

and from your reply , the cerficate seems not only related to SAP SID and also related to hostname , but not releated to the hardware(such like machine change)? so I also think maybe we do not need to change/update such certifications after system move/migration.

Thanks so much!

Jeffrey

Show 1 Share
10 |10000 characters needed characters left characters exceeded

Hello Jeffrey,

You are welcome!

As far as I know, there is nothing at the PSE file that is linked to the hardware.

Regards,

Isaías

0
Reagan Benjamin
Nov 23, 2016 at 11:44 PM
0

There is no need to recreate the PSE's as long as you have the hostname and SID are same. As long as you move all the files from the "sec" directory to the new hardware then it should work fine. As far as I know the data is also stored in the database as well and this is the reason why the system copy guide suggests to recreate the PSE's to get the new system information. In your case you just need the move the files from the old server to the new one.

Share
10 |10000 characters needed characters left characters exceeded
Jeffrey Chen Nov 25, 2016 at 01:18 AM
0

Thanks so much Isaias and Reagan!

Show 1 Share
10 |10000 characters needed characters left characters exceeded

You are welcome! :o)

0