How To Fix TRUST061 - Application requires PSE with RSA key pair

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 061

• Message text: Application requires PSE with RSA key pair

What causes this issue?

The application requires the use of the Public Key Algorithm
<DS:GLOS.57CD1C53EB6AD411B1360060B03C6BFB>RSA</>. However, the PSE
uses a different Public Key Algorithm.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST061 - Application requires PSE with RSA key pair ?

  The SAP error message TRUST061 indicates that the application you are trying to use requires a Personal Security Environment (PSE) that contains an RSA key pair, but such a PSE is not available or not properly configured. This error typically occurs in scenarios involving secure communications, such as SSL/TLS connections or digital signatures.
  Cause
  The main causes of the TRUST061 error include:
  
  Missing PSE: The required PSE does not exist in the system.
  Incorrect PSE Configuration: The PSE exists but does not contain the necessary RSA key pair.
  Wrong PSE Type: The application may be looking for a specific type of PSE (e.g., SSL PSE, System PSE) that is not configured correctly.
  Expired or Invalid Keys: The RSA key pair may have expired or been invalidated.
  
  Solution
  To resolve the TRUST061 error, follow these steps:
  
  
  Check Existing PSEs:
  
  Use transaction STRUST to check the existing PSEs in your SAP system.
  Verify if the required PSE (e.g., SSL PSE, System PSE) is present.
  
  
  
  Create or Update PSE:
  
  If the required PSE is missing, create a new one:
  
  In transaction STRUST, select the appropriate PSE type (e.g., SSL, System).
  Click on "Create" to generate a new PSE.
  
  
  If the PSE exists but lacks an RSA key pair, you can generate a new key pair:
  
  Select the PSE and click on "Create Certificate" or "Generate Key Pair" to create the RSA key pair.
  
  
  
  
  
  Import Certificates:
  
  If you are using a PSE for SSL communication, ensure that the necessary certificates are imported into the PSE.
  You can import certificates using the "Import Certificate" option in transaction STRUST.
  
  
  
  Check Key Storage:
  
  Ensure that the key storage is correctly configured and accessible by the application.
  
  
  
  Restart Services:
  
  After making changes to the PSE, restart the relevant services or the entire SAP system to ensure that the changes take effect.
  
  
  
  Test the Configuration:
  
  After creating or updating the PSE, test the application again to see if the error persists.
  
  
  
  Related Information
  
  Transaction STRUST: This transaction is used to manage PSEs and certificates in SAP.
  PSE Types: Understand the different types of PSEs (e.g., SSL PSE, System PSE) and their purposes.
  SAP Security Guide: Refer to the SAP Security Guide for detailed instructions on managing PSEs and certificates.
  SAP Notes: Check for relevant SAP Notes that may provide additional guidance or patches related to this error.
  
  By following these steps, you should be able to resolve the TRUST061 error and ensure that your application can successfully use the required PSE with an RSA key pair.