SNC processing failed SAP Router证书重新生成

参照note 1178684 - No service connection: "SNC processing failed"

确认证书所在位置

Execute the following commands on your SAProuter machine:

• sapgenpse seclogin -l

• sapgenpse get_my_name -n validity

在cmd直接运行报错

 

利用everything查找该程序路径

 

运行C:\zzsaprouter\nt-x86_64\sapgenpse.exe seclogin -l

C:\zzsaprouter\nt-x86_64\sapgenpse.exe get_my_name -n validity

发现已到期，需要重新申请。

 

Make sure that your SNC SAProuter process has also been started under the specified user.
If your SAProuter certificate has expired, renew it by performing the following steps:

• Delete the files local.pse, cred_v2 on your SAProuter machine.

• Go to SAProuter

• Choose "Apply Now!".

• Execute the steps as described in the following document:
  Install SAProuter

 

将local.pse备份至别的路径后删除

 

运行C:\zzsaprouter\nt-x86_64\sapgenpse.exe get_pse -v -a sha256WithRsaEncryption -s 2048 -r certreq -p local.pse "CN=XXXXXXXXX, OU=0000XXXXXX, OU=SAProuter, O=SAP, C=DE"

注释：XXXX填入你的值

要求输入密码时直接回车即可

运行完会生成新的local.pse以及certreq

双击生成的certreq（用txt文档打开）复制所有字符并粘贴到sap网站上

 

 

点击 右下角的 Request Certificate

 

将生成的字符粘贴到同目录下的srcert文件中

重启saprouter.exe

重新查询有效期

C:\zzsaprouter\nt-x86_64\sapgenpse.exe get_my_name -n validity

查询

C:\zzsaprouter\nt-x86_64\sapgenpse.exe get_my_name -v -n Issuer