Stop the running SAP Router

by issuing the following command: saprouter -s

or

Backup and Delete the below mentioned four files from SAP Router directory Ex: c:\saprouter

cred_v2, srcert, certreq, local.pse

Generate the Local Certificate Request with the below command (execute it after navigating to the router directory in our case c:\saprouter)

sapgenpse get_pse -v -r certreq -p local.pse "CN=, OU=, OU=, O=, C="

<aside> 💡 if you are using the new crypto Library @256 bit of encryptation sapgenpse get_pse -v -a sha256WithRsaEncryption -s 2048 -r certreq -p local.pse "Put Here your DN”

</aside>

Give the PIN as like:1234

• This will generate local.pse in c:\saprouter folder
• This will generate a file certreq in c:\saprouter folder
• Open the Certificate Request file certreq in Notepad and Copy all the content later Paste it in the text box of the Browser previously opened in step 4 and Click on Request Certificate.
• This will generate the Response CA Certificate.

Now apply for Router Certificate

Go to the SAProuter application and from the list of SAProuters registered to your installation, choose the relevant SAProuter.

Import the Response Certificate is done by Coping the whole encrypted content generated at SMP and paste in a new file and name it as srcert and save it in SAP router folder.

• Then Import the Response CA Certificate using the command sapgenspe import_own_cert –c srcert –p local.pse
• Enter the PIN as 1234 and the Response will be successfully imported.

We will authenticate the User who will run the SAP Router by generating the Credentials file cred_v2 in sap router directory c:\saprouter using the below command

• sapgenpse seclogin –p local.pse
• Now the logged in User, Administrator can only be used to run SAPROUTER.exe for Secure Communications.

Check the SAP Router Certificate whether it has been imported successfully or not by issuing the below command.

• sapgenpse get_my_name –v –n Issuer
• The output should be Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

Start the SAP Router by issuing the following command

• saprouter -G log.txt -r –S 3299 -R c:\\saprouter\\saprouttab -K "p:CN=, OU=, OU=, O=, C=DE"

Finally check the Validity of SAP Router by issuing below command

• sapgenpse get_my_name –v –n validity