SSO to SAP BW

[Former Member]

Hi,

I am trying to enable SSO from Portal to BW. I have downloaded verify.der file from Portal, but when I try to upload it into the SAP system I get the error message as "Cannot Open PSE".When I use the same verify .der file in some other SAP system, it works perfectly fine.

I feel some settings have to be done for PSE.

Any ideas ?

I have enabled SSO to other SAP systems, but have never faced such an error.

Regards,

Vivek

Message was edited by: Vivek Sharma

[Former Member]

We had similar problem on entering both STRUST and STRUSTSSO2. Problem was that the parameters

icm/host_name_full and SAPLOCALHOSTFULL had not been set. I had changed via RZ10 and restarted SAP in the SAP MMC, however I did not restart the SAP service (SAP<SID>_nn). On restarting the SAP service, the PSE was present on entering both transactions.

Edited by: Oxygen Support on Mar 20, 2010 5:23 AM

[Former Member]

The issue I am having is the same, The System PSE folder has been deleted, and when I go to transaction strust, or strustsso2 I get the message "Error while loading PSE", I followed the step you have provided, and it strust, after I import the der file, and I select add to Certificate list, I get the message "Error occurred during import", with that I can not create the Own Certificate.

[Former Member]

Hello...

Instead of using the *.der File use the following file

visual admin->Services->Key Storage - > TicketKeystore->SapLogonTicketKeyPair-cert

Import this file according to [http://help.sap.com/saphelp_nw04/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/content.htm]

!! You do not have to rename it!!

BR ,Christian

[Former Member]

When you download the der or pse file from the portal, it is in zip format. Make sure that you extract it, not just rename the ***.der.zip to ***.der

Regards,

[Former Member]

Hi

Have u imported the SAP EP plugins to BW system.?

Thx

Pradeep

[Former Member]

Hi Pradeep,

Thanks for the reply.

Which Plugin should I check for ? I think the SAINT is the transaction to check plugins.

Thanks,

Vivek

[Former Member]

Hi Pradeep,

I have checked nthe plugins.

Both my Dev BW and QA BW have same plugins deployed.

It works on Dev BW but not on QA BW.

Thanks,

Vivek

[Former Member]

Hi Vivek,

Delete the existing Systems.PSe file and recreate it and then try importing.

Some times the existing PSe file will give the problems.

For us also after recreation the verify.der file got uploaded.

Regards

Sumanth

[Former Member]

Hi Thunga,

Thanks for your help.

Can you please let me know how can I delete an existing PSE and then create a new one.

When I goto STRUST, I get a folder "System PSE", only a right click on that gives me a delete option.

Should I delete that ? or something else.

And then after deleting how can I create a new PSE.

Regards,

Vivek

[Former Member]

Hi Vivek,

Use STRUSTSSO2 transaction instead of STRUST.

Then In the Systems PSE link, Righ click and delete.

Then again Create it from there, and enter the OU Details etc ,

Then on the Right side You will see an entry in the First Inbox.

Then you try to upload the verify.der file.

One more thing is put the verify.der file in the C:/

Because there is a restriction in the length of the path.

Regards

Sumanth

[Former Member]

Hi Sumanth

I followed the first three steps.

Use STRUSTSSO2 transaction instead of STRUST.

Then In the Systems PSE link, Righ click and delete.

Then again Create it from there, and enter the OU Details etc ,

But after doing all this I dont find any entry on the right hand side unser heading "System PSE".

I have my system name under System PSE folder , when I double click on that I get a message below saying "Cannot Open PSE".

Thanks in advance for your help.

Regards,

Vivek

[former_member188977]

Hi, you have to donwload the .der certificate and, with SSOTRUST02, import it with the first botton in the midle of the page.

And then, you can click both bottons to add this certificate in other two sections. (PSE and ACL)

[Former Member]

Hi,

This is only main problem.

When I try to do this I get a message Cannot Analyze Certificate.

Regards,

Vivek

[Former Member]

Hi Vivek,

Did you checked the Security libraries version (the exact name i didnot remember).

Once you recreate the PSE, you will see in Leftside Pane

Systems PSE -> "Your System Name"

File

In the Right side Pane in the Own Certif. Field you will see the Entry of the Certificate created from the Right Pane as CN=....

Then try to import the .der file and check the path also make that path as minimum.

Our problem is solved after doing this and updatin the security libraries to latest version.

Regards

Sumanth