SMP Certificate Expiration -How to Renewal of SMP Certificate

[Former Member]

Hi Team,

Initially when the SMP Server is installed the smp_crt is created and valid up to 2 years and later on this specific certificate should be extended and for this we have some process so as to extend this certificate.

I need your inputs on the process on how to get this SMP Certificate extended or renewal as currently I have performed the below steps and couldn’t succeeded.

Current version of SMP Server is SMP 3.0 SP10 PL06.

SMP Server is installed in a Windows System

Downloaded the Key tool for Windows system where the SMP Server is installed

In the command prompt navigated to the path where the java installed for eg: sapjvm_8/bin and then executed the delete command( keytool -keystore smp_keystore -delete -alias smp_crt -storepass {keystore password})

I could execute the delete command successfully

I tried executing the next command i.e, to create a new certificate by executing the create certificate command (keytool -keystore {keystore filename} -genkeypair -keyalg RSA -sigalg SHA1withRSA -validity 3650 -alias smp_crt -dname “{C=country, ST=state, L=city, O=myorg, OU=myorgunit}, CN={New FQDN}, emailAddress={your email address}” -ext BC:ca:true -keypass {keystore password} -storepass {keystore password})

When I run the above command I am getting some syntax errors as “Illegal ST” because of this error I am not able to complete the commands.

Request your valuable inputs and help on how this issue can be sorted also wanted to understand whether the SMP Server needs to be stopped while executing the commands also do I need to copy any files to my SMP Server installation confiuration folder or not.

Request you to help me in getting this solved.

Thanks.

[Former Member]

Is this solved?

I am also facing the same issue. Please help me.

[ray_isada]

Hi Shilpa -

You are replacing the {values} with your own information, correct? Can you send me the command via e-mail so I can take a look?

Thanks,

Ray

[Former Member]

Hi Sravanthi,

Thanks for the inputs.

I have followed the same blog to generate the certificate and the error I am getting while generating the certificate is

"Illegal ST". I tried changing the syntax of the command but couldn't succeed.

Thanks,

Shilpa Nandigam.

[sravanthi_polu]

Hi Shilpa,

Make sure to use Java from SMP Server.Refer the below link for further information.

https://blogs.sap.com/2014/06/16/regenerating-smp-30-agentry-certificate/

Thanks & Regards,

Sravanthi Polu.

[Former Member]

Hi Sravanthi,

Thanks for the inputs.

I have followed the same blog to generate the certificate and the error I am getting while generating the certificate is

"Illegal ST". I tried changing the syntax of the command but couldn't succeed.

Thanks,

Shilpa Nandigam.