How To Fix 1S407 - PSE not distributed through database

SAP Error Message - Details

• Message type: E = Error

• Message class: 1S - Messages for SSF ("Secure Store & Forward")

• Message number: 407

• Message text: PSE not distributed through database

What causes this issue?

The current application expects that the PSE is stored in the database.
However, SSF Customizing specifies that the PSE is not distributed. The
PSE was therefore not stored in the database.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Check whether you want to distribute the PSE (transaction
<DS:TRAN.SSFA>SSFA</>). Note that, in this case, you must only specify
the file name of the PSE, and not the complete file path.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message 1S407 - PSE not distributed through database ?

  The SAP error message 1S407 indicates that the PSE (Personal Security Environment) has not been distributed through the database. This typically occurs in the context of SAP systems that use Secure Network Communications (SNC) or when dealing with SSL certificates.
  Cause:
  The error can arise due to several reasons:
  
  PSE Not Created or Missing: The PSE may not have been created or is missing from the system.
  PSE Not Distributed: The PSE has not been properly distributed to the database or the relevant application servers.
  Configuration Issues: There may be configuration issues in the SAP system that prevent the PSE from being recognized or accessed.
  Transport Issues: If the PSE was supposed to be transported from one system to another, there may have been issues during the transport process.
  
  Solution:
  To resolve the error, you can follow these steps:
  
  
  Check PSE Creation:
  
  Ensure that the PSE has been created. You can create a new PSE using transaction STRUST.
  In STRUST, check if the PSE exists for the relevant system (e.g., SSL or SNC).
  
  
  
  Distribute PSE:
  
  If the PSE exists but is not distributed, you can distribute it using the STRUST transaction.
  In STRUST, select the PSE and use the "Distribute" option to ensure it is available across the necessary application servers.
  
  
  
  Check Configuration:
  
  Verify the configuration settings in the SAP system related to SSL/SNC. Ensure that the parameters are correctly set in the instance profile.
  Check the SECURITY parameters in the instance profile (e.g., ssl/client_pse, ssl/server_pse).
  
  
  
  Transport PSE:
  
  If the PSE needs to be transported, ensure that the transport request is correctly created and released.
  Use transaction SE09 or SE10 to check the transport logs for any errors.
  
  
  
  Restart Application Servers:
  
  After making changes, restart the application servers to ensure that the new PSE settings are loaded.
  
  
  
  Check Logs:
  
  Review the system logs (transaction SM21) and the developer traces (transaction ST11) for any additional error messages that might provide more context.
  
  
  
  Related Information:
  
  Documentation: Refer to SAP Help documentation for detailed steps on managing PSEs and SSL configurations.
  SAP Notes: Check for relevant SAP Notes that may address specific issues related to PSE distribution and SSL configurations.
  Community Forums: Engage with SAP community forums or support channels for additional insights and troubleshooting tips.
  
  By following these steps, you should be able to resolve the error message 1S407 and ensure that the PSE is properly distributed and configured in your SAP system.