How To Fix TRUST004 - Certificate(s) deleted from PSE

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 004

• Message text: Certificate(s) deleted from PSE

What causes this issue?

The certificates were deleted from the certificate list of the PSE;
that is, the certificates are not trusted for verification.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST004 - Certificate(s) deleted from PSE ?

  The SAP error message TRUST004 indicates that one or more certificates have been deleted from the Personal Security Environment (PSE). This can occur for various reasons, such as manual deletion, expiration of certificates, or issues during system upgrades or migrations.
  Cause:
  
  Manual Deletion: Certificates may have been manually removed by an administrator.
  Expiration: Certificates have a validity period, and if they expire, they may be automatically deleted or become invalid.
  System Changes: Changes in the system configuration, such as upgrades or migrations, can lead to the deletion of certificates.
  Corruption: The PSE file may become corrupted, leading to the loss of certificates.
  
  Solution:
  To resolve the TRUST004 error, you can follow these steps:
  
  
  Check the PSE:
  
  Use transaction STRUST to check the current state of the PSE.
  Verify if the required certificates are indeed missing.
  
  
  
  Re-import Certificates:
  
  If you have a backup of the certificates, you can re-import them into the PSE.
  If you do not have a backup, you may need to obtain the certificates again from the certificate authority (CA) or the relevant source.
  
  
  
  Generate New Certificates:
  
  If the certificates are expired or cannot be recovered, you may need to generate new ones.
  Use the STRUST transaction to create new certificates and ensure they are properly configured.
  
  
  
  Check Trust Relationships:
  
  Ensure that the trust relationships between systems are correctly configured. This may involve checking the SSL settings and ensuring that the correct certificates are in place.
  
  
  
  Review Logs:
  
  Check the system logs for any additional error messages or warnings that may provide more context about the deletion of the certificates.
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation or support notes related to the specific version of SAP you are using for any additional troubleshooting steps.
  
  
  
  Related Information:
  
  PSE Types: There are different types of PSEs in SAP, such as the SSL PSE, System PSE, and User PSE. Ensure you are working with the correct PSE type for your scenario.
  Certificate Management: Regularly monitor and manage certificates to avoid expiration issues. Implement a process for renewing certificates before they expire.
  Backup: Always maintain backups of your PSE and certificates to facilitate recovery in case of accidental deletion or corruption.
  
  If the issue persists after following these steps, consider reaching out to SAP support for further assistance.