How To Fix STRUSTCR028 - No update as downloaded CRL is older or same

SAP Error Message - Details

• Message type: E = Error

• Message class: STRUSTCR - Certificate Revocation Configuration

• Message number: 028

• Message text: No update as downloaded CRL is older or same

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message STRUSTCR028 - No update as downloaded CRL is older or same ?

  The SAP error message STRUSTCR028 indicates that there is an issue with the Certificate Revocation List (CRL) being used in the system. Specifically, the error message states that no update can be performed because the downloaded CRL is either older than or the same as the one currently in use.
  Cause:
  This error typically occurs when:
  
  The CRL that has been downloaded from the Certificate Authority (CA) is not newer than the CRL already stored in the SAP system.
  The system is trying to update the CRL, but the new CRL does not have a later validity date than the existing one.
  There may be a misconfiguration in the CRL download settings or the CA itself.
  
  Solution:
  To resolve this issue, you can follow these steps:
  
  
  Check CRL Validity:
  
  Verify the validity period of the currently installed CRL and the downloaded CRL. Ensure that the downloaded CRL has a later expiration date.
  
  
  
  Download a New CRL:
  
  Manually download the latest CRL from the Certificate Authority. You can do this by accessing the CA's website or using the appropriate tools provided by the CA.
  
  
  
  Update CRL in STRUST:
  
  Go to transaction code STRUST in your SAP system.
  Navigate to the "SSL Client (Standard)" or the relevant section where the CRL is configured.
  Use the "Download" option to fetch the latest CRL from the CA.
  Ensure that the new CRL is properly imported and that it shows a later date than the previous one.
  
  
  
  Check Configuration:
  
  Ensure that the configuration settings for CRL retrieval are correct. This includes checking the URL from which the CRL is being downloaded and ensuring that there are no network issues preventing access to the CA.
  
  
  
  Restart Services:
  
  After updating the CRL, it may be necessary to restart the relevant services or the entire SAP system to ensure that the new CRL is being used.
  
  
  
  Related Information:
  
  CRL (Certificate Revocation List): A list of certificates that have been revoked by the CA before their scheduled expiration date. It is essential for maintaining the security of SSL/TLS communications.
  SAP Security: Proper management of certificates and CRLs is crucial for secure communications in SAP systems, especially when dealing with sensitive data or external connections.
  Transaction STRUST: This transaction is used for managing SSL certificates, trust relationships, and CRLs in SAP systems.
  
  If the problem persists after following these steps, consider checking SAP Notes or reaching out to SAP support for further assistance.