How To Fix SCLNT_HTTP414 - SSL PSE file not found (ICM_HTTP_SSL_CRED_NOT_FOUND)

SAP Error Message - Details

• Message type: E = Error

• Message class: SCLNT_HTTP - Messages for HTTP Client for Respective Error Code

• Message number: 414

• Message text: SSL PSE file not found (ICM_HTTP_SSL_CRED_NOT_FOUND)

What causes this issue?

The specified client PSE file has not been found.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Check the configuration of the client PSE used in transaction STRUST.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SCLNT_HTTP414 - SSL PSE file not found (ICM_HTTP_SSL_CRED_NOT_FOUND) ?

  The SAP error message SCLNT_HTTP414 SSL PSE file not found (ICM_HTTP_SSL_CRED_NOT_FOUND) indicates that the SSL PSE (Personal Security Environment) file required for secure communication is missing or not properly configured in the SAP system. This error typically occurs when the Internet Communication Manager (ICM) is trying to establish an SSL connection but cannot find the necessary credentials.
  Cause:
  
  Missing PSE File: The SSL PSE file that contains the necessary certificates and keys is not present in the expected directory.
  Incorrect Configuration: The ICM may not be configured correctly to point to the location of the PSE file.
  File Permissions: The user under which the SAP system is running may not have the necessary permissions to access the PSE file.
  Corrupted PSE File: The PSE file may be corrupted or improperly generated.
  
  Solution:
  
  
  Check PSE File Location:
  
  Verify that the SSL PSE file exists in the expected directory. The default location is usually in the instance directory under sec/ (e.g., /usr/sap/<SID>/SYS/profile/<instance_name>.pse).
  If the file is missing, you may need to create a new PSE.
  
  
  
  Create or Import a New PSE:
  
  Use the transaction STRUST in the SAP GUI to create a new PSE or import an existing one.
  Follow the steps to generate a new SSL PSE:
  
  Go to the "SSL Client (Anonymous)" or "SSL Server" tab.
  Click on "Create" or "Import" to generate or import the necessary certificates.
  
  
  
  
  
  Check ICM Configuration:
  
  Ensure that the ICM is configured to use the correct PSE file. This can be checked in the instance profile or through transaction RZ10.
  Look for parameters like icm/SSL/verify_client and icm/SSL/ssl_pse.
  
  
  
  File Permissions:
  
  Check the permissions of the PSE file and ensure that the SAP instance user has read access to it.
  You can use commands like ls -l on Unix/Linux systems to check permissions.
  
  
  
  Restart ICM:
  
  After making changes, restart the ICM to apply the new configuration. This can be done through transaction SMICM or by restarting the SAP instance.
  
  
  
  Check Logs:
  
  Review the ICM logs for any additional error messages that might provide more context about the issue. Logs can be found in the dev_icm file.
  
  
  
  Related Information:
  
  SSL Configuration: Ensure that SSL is properly configured in your SAP system. This includes setting up the necessary certificates and ensuring that the trust relationships are established.
  SAP Notes: Check for any relevant SAP Notes that might address specific issues related to SSL configuration and PSE management.
  Documentation: Refer to the official SAP documentation for detailed steps on managing SSL and PSE files.
  
  By following these steps, you should be able to resolve the SSL PSE file not found error and restore secure communication in your SAP system.