SAP Router Renewal steps

Once you received the message from SAP notification center about your renewal of sap router certificate,here we go by following step by step process to renew it.

Step 1:
Logon to server and find the sap router installed directory .Take a full backup.
Stop the router (saprouter –s)

Step 2:
Find the following files certreq and local.pse and rename it .


Step 3 :
Open CMD prompt and go to the following router installed directories as shown in below screenshot.

Type the following CMD
sapgenpse get_pse -v -r certreq -p local.pse "CN=, OU=, OU=SAProuter, O=SAP, C=DE"

Your CN and OU values can be found by logging into SAP Service market place by following url
http://service.sap.com/saprouter-sncadd



Command Prompt :
Paste the above mention command .It will ask for the PIN,just give 1234 or anything you wish.



local.pse and certreq file will be created.Now open the certreq with notepad,copy and paste the content in the Service Market Place

And request certificate.Now you will get the renewed certificate from SAP in next page.Which will be like this as shown in the below screenshot.



Find the file name srcert in the saprouter directory and rename it to srcert.old.Create one more copy of this file and Copy the certificate content and paste it in srcert (the file should be without any extension) .

Importing the Certificate :

CMD: sapgenpse import_own_cert -c srcert -p local.pse

After import finished.

Setup secure login to SAPROUTER.

CMD: sapgenpse seclogin -p local.pse

Will ask for pin again ,input the same pin which you have given before.

Note : Check the file name Cred_V2 is created in the same directory.( Rename the file before running the above  cmd )

Checking the Certificate:

CMD: sapgenpse get_my_name –v –n Issuer


Router certificate is renewed now.

CMD: sapgenpse get_my_name -v validity

Starting the Router:
CMD : saprouter -r -S 3299 -V 2 -K "p:CN=  , OU= , OU=SAProuter, O=SAP, C=DE"

Stopping the Router:
CMD:  saprouter –s