How To Fix SR060 - SSL client PSE ANONYM does not exist

SAP Error Message - Details

• Message type: E = Error

• Message class: SR - RFC utilities

• Message number: 060

• Message text: SSL client PSE ANONYM does not exist

What causes this issue?

SSL client PSE ANONYM does not exist.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Create the PSE in transaction STRUST.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SR060 - SSL client PSE ANONYM does not exist ?

  The SAP error message "SR060 SSL client PSE ANONYM does not exist" typically indicates that the system is trying to use an SSL client PSE (Personal Security Environment) for anonymous authentication, but it cannot find the required PSE file. This can occur in scenarios where SSL communication is configured, but the necessary PSE files are not set up correctly.
  Cause:
  
  Missing PSE File: The specific PSE file for anonymous SSL communication (often named ANONYM) is not created or is missing from the expected location.
  Incorrect Configuration: The SSL configuration in the SAP system may be incorrect, leading to the system looking for a PSE that does not exist.
  Permissions Issues: The user or service account running the SAP instance may not have the necessary permissions to access the PSE files.
  Transport Layer Security (TLS) Settings: If the system is configured to use TLS, it may require specific PSE files that are not present.
  
  Solution:
  
  
  Create the Missing PSE:
  
  Use the transaction code STRUST in the SAP GUI to manage SSL PSEs.
  In the STRUST transaction, create a new PSE for the anonymous client if it does not exist. You can do this by selecting the appropriate option to create a new SSL client PSE.
  Ensure that you save the changes after creating the PSE.
  
  
  
  Check Configuration:
  
  Verify the SSL configuration settings in the SAP system. Ensure that the system is correctly set up to use SSL and that the paths to the PSE files are correctly specified.
  Check the instance profile parameters related to SSL, such as ssl/client_pse and ssl/server_pse.
  
  
  
  Permissions:
  
  Ensure that the SAP instance has the necessary permissions to access the directory where the PSE files are stored. This may involve checking file system permissions on the server.
  
  
  
  Restart the SAP Instance:
  
  After making changes to the PSE or configuration, restart the SAP instance to ensure that the changes take effect.
  
  
  
  Check Logs:
  
  Review the SAP system logs (transaction SM21) and the developer traces (transaction ST22) for any additional error messages that may provide more context about the issue.
  
  
  
  Related Information:
  
  SSL/TLS Documentation: Refer to SAP's official documentation on SSL and TLS configuration for detailed steps on setting up PSEs and SSL communication.
  SAP Notes: Check for relevant SAP Notes that may address specific issues related to SSL configuration and PSE management.
  Security Best Practices: Ensure that you follow best practices for managing SSL certificates and PSEs, including regular updates and audits.
  
  By following these steps, you should be able to resolve the "SR060 SSL client PSE ANONYM does not exist" error and ensure that your SAP system can establish SSL connections as required.