How To Fix TRUST057 - Issuer certificate missing in database:&1

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 057

• Message text: Issuer certificate missing in database:&1

What causes this issue?

The following issuer certificate is missing from the database or is
marked as inactive: &V1&

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Store the issuer certificate in the database (menu function
<ZK>Certificate -> Export -> Database</>) and make sure that the
certificate is not marked as inactive (menu function <ZK>Certificate ->
Database</>).

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST057 - Issuer certificate missing in database:&1 ?

  The SAP error message TRUST057: Issuer certificate missing in database: &1 typically indicates that the system is unable to find the issuer certificate for a specific certificate in the SAP Trust Manager (transaction code STRUST). This can occur when the certificate chain is incomplete or when the root or intermediate certificates are not properly imported into the system.
  Cause:
  
  Missing Certificate: The issuer certificate (which is needed to validate the certificate in question) is not present in the SAP Trust Manager.
  Incomplete Certificate Chain: The certificate chain may be incomplete, meaning that one or more intermediate certificates are missing.
  Incorrect Configuration: The configuration of the SSL/TLS settings may not be set up correctly, leading to issues in certificate validation.
  
  Solution:
  To resolve the TRUST057 error, follow these steps:
  
  
  Identify the Missing Certificate:
  
  Check the error message for the specific certificate name (denoted by &1).
  Use the transaction code STRUST to view the certificates and identify which issuer certificate is missing.
  
  
  
  Import the Missing Certificate:
  
  Obtain the missing issuer certificate from a trusted source (e.g., the certificate authority that issued the certificate).
  In transaction STRUST, navigate to the appropriate certificate store (e.g., "SSL Client (Standard)" or "SSL Server (Standard)").
  Click on the "Import Certificate" button and upload the missing issuer certificate.
  
  
  
  Check the Certificate Chain:
  
  Ensure that all necessary certificates in the chain (root, intermediate, and end-entity certificates) are present in the Trust Manager.
  If any intermediate certificates are missing, import them as well.
  
  
  
  Save and Activate Changes:
  
  After importing the necessary certificates, save your changes in STRUST.
  You may need to restart the relevant services or the entire SAP system for the changes to take effect.
  
  
  
  Test the Configuration:
  
  After importing the certificates, test the connection or functionality that was previously failing to ensure that the issue is resolved.
  
  
  
  Related Information:
  
  Transaction STRUST: This is the main transaction for managing SSL certificates in SAP. You can view, import, and delete certificates here.
  Certificate Authorities (CAs): Ensure that you are obtaining certificates from a trusted CA and that they are valid.
  Documentation: Refer to SAP documentation or the SAP Community for additional guidance on managing SSL certificates and troubleshooting related issues.
  SAP Notes: Check for any relevant SAP Notes that may provide additional insights or solutions for specific scenarios related to TRUST057.
  
  By following these steps, you should be able to resolve the TRUST057 error and ensure that your SAP system can properly validate certificates.