How To Fix TRUST024 - Standard PSE for SSL Server

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 024

• Message text: Standard PSE for SSL Server

What causes this issue?

The default PSE for SSL servers is used on all isntances which do not
have their own PSE.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

If you want to create an individual PSE for an instance, choose
"Change" in the context menu of the "SSL servers" node.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST024 - Standard PSE for SSL Server ?

  The SAP error message TRUST024 typically indicates an issue with the SSL (Secure Sockets Layer) configuration, specifically related to the Standard PSE (Personal Security Environment) for SSL server communication. This error can occur when the system is unable to find a valid SSL certificate or when the certificate is not trusted.
  Cause:
  
  Missing or Invalid SSL Certificate: The Standard PSE may not contain a valid SSL certificate, or the certificate may have expired.
  Trust Relationship Issues: The certificate chain may not be trusted, meaning that the root or intermediate certificates are not present in the trust store.
  Incorrect PSE Configuration: The PSE may not be correctly configured for the SSL server.
  Network Configuration Issues: There may be network issues preventing the SSL handshake from completing successfully.
  
  Solution:
  To resolve the TRUST024 error, you can follow these steps:
  
  
  Check the PSE Configuration:
  
  Use transaction STRUST to access the Trust Manager.
  Check the SSL server PSE (Standard PSE) to ensure it contains a valid certificate.
  
  
  
  Import a Valid SSL Certificate:
  
  If the PSE does not contain a valid certificate, you may need to generate a new one or import an existing valid SSL certificate.
  You can create a new PSE or update the existing one by using the "Create Certificate Request" and "Import Certificate" options in STRUST.
  
  
  
  Verify the Certificate Chain:
  
  Ensure that all necessary root and intermediate certificates are imported into the PSE.
  You can check the certificate chain in STRUST to ensure that it is complete and valid.
  
  
  
  Check for Expired Certificates:
  
  Verify that none of the certificates in the PSE have expired. If they have, you will need to renew or replace them.
  
  
  
  Test SSL Connection:
  
  After making changes, test the SSL connection to ensure that the error is resolved. You can use tools like SAP GUI or Web browsers to test the SSL connection.
  
  
  
  Review Network Configuration:
  
  Ensure that there are no firewall or network issues that could be affecting the SSL connection.
  
  
  
  Related Information:
  
  Transaction STRUST: This is the main transaction for managing SSL certificates and PSEs in SAP.
  PSE Types: There are different types of PSEs in SAP, including Standard PSE, SSL Client PSE, and SSL Server PSE. Make sure you are working with the correct one.
  Documentation: Refer to SAP Help documentation for detailed steps on managing PSEs and SSL certificates.
  SAP Notes: Check for relevant SAP Notes that may provide additional guidance or solutions for specific scenarios related to TRUST024.
  
  By following these steps, you should be able to resolve the TRUST024 error and ensure that your SSL server configuration is correctly set up.