How To Fix TRUST013 - Certificate no longer has signature (use restriction)

TRUST013 - Overview

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 013

• Message text: Certificate no longer has signature (use restriction)

What causes this issue?

Certificates entered in the certificate list of a PSE no longer have a
signature and can therefore only be used for verifying digital
signatures. The certificate itself can no longer be verified.
The certificate you want to export comes from the certificate list of
the PSE and its use is therefore restricted (as described above).

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Note that the exported certificate is only suitable for import into a
certificate list of a PSE.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST013 - Certificate no longer has signature (use restriction) ?

  The SAP error message TRUST013 indicates that a digital certificate is no longer valid due to a signature restriction. This typically occurs when the certificate has been revoked, expired, or is otherwise deemed untrustworthy by the system.
  Causes:
  
  Expired Certificate: The certificate has reached its expiration date and is no longer valid.
  Revoked Certificate: The certificate has been revoked by the Certificate Authority (CA) due to security concerns or other reasons.
  Signature Algorithm Issues: The certificate may use a deprecated or insecure signature algorithm that is no longer accepted by the system.
  Trust Relationship Issues: The certificate may not be trusted by the SAP system due to missing root or intermediate certificates in the trust store.
  
  Solutions:
  
  
  Check Certificate Validity:
  
  Verify the expiration date of the certificate. If it is expired, you will need to obtain a new certificate.
  Check if the certificate has been revoked by consulting the Certificate Revocation List (CRL) or using Online Certificate Status Protocol