Cannot import certificate response

[former_member201355]

I Cannot import a signed certificate in STRUSTSSO2.  It's throwing an error "Cannot import certificate response"

Cannot import certificate response

Message no. TRUST037

Diagnosis

The certificate response could not be imported into the PSE. You either selected an incorrect PSE (the certificate response can only be imported into the PSE from which the certificate request was generated), or the certificate response is incomplete.

Procedure

Check whether you selected the correct PSE to import the certificate response. Then you can import the certificate response in the following formats:

• As a PKCS#7 package with complete certificate upward path. The PKCS#7 package must be Base64-coded, and have the header line -----BEGIN CERTIFICATE----- and the footer line -----END CERTIFICATE-----.

• Individual PEM-coded certificates (that is, Base64-coded with the header line -----BEGIN CERTIFICATE----- and the footer line -----END CERTIFICATE-----), if the associated root certificate exists in the database. For an overview of the existing root certificates, use the "Import Certificate" function.

• As a file with multiple PEM-coded certificates. In this case, the system automatically attempts to build a complete certificate upward path; all certificates not required for this are ignored. If certificates are missing (such as, if you are using an intermediate CA), you can extend the certificate response with additional PEM-coded certificates before the import.

[JPReyes · Accepted solution]

Not much info here...

Have you read,

Note 508307 - Trust Manager: Problems importing certificate responses

Note 1074447 - STRUST: File import of certificate response fails

Regards

Juan

[former_member201355 · Accepted solution]

Yes, but those notes didn't help to fix my issue.  I opened an OSS message and waiting for solution.

[former_member201355 · Accepted solution]

Here's what I received from SAP....

Please try and import the certificate response from your Certification

Authority (CA) again, however please ensure you import the response

along with the root and intermediate certificates from you CA.

-----BEGIN CERTIFICATE-----

<encrypted part of the certificate response>

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

<encrypted part of the CA intermediate certificate>

-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----

<encrypted part of the CA ROOT certificate>

-----END CERTIFICATE-----

There can be no, one, or more than one intermediate certificate. The

sequence of the certificates should not matter.

Then select and correct PSE (i.e. SSL Server PSE) and import it via

transaction STRUST.

Please assure that you use the correct certificates.

It worked for me after importing the Signed certificate along with the root certificate.

Thanks

Thirumal