How To Fix TRUST062 - Cannot determine public key algorithm of PSE

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 062

• Message text: Cannot determine public key algorithm of PSE

What causes this issue?

The application requires a PSE with an RSA key pair. The system cannot
determine the Public Key Algorithm of the PSE.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Terminate, if you do not want to save the PSE.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST062 - Cannot determine public key algorithm of PSE ?

  The SAP error message TRUST062: Cannot determine public key algorithm of PSE typically occurs in the context of SAP's security infrastructure, particularly when dealing with the Personal Security Environment (PSE) and digital certificates. This error indicates that the system is unable to identify the public key algorithm associated with the PSE, which is essential for cryptographic operations.
  Causes:
  
  Corrupted PSE: The PSE file may be corrupted or improperly configured, leading to the inability to read the public key algorithm.
  Missing or Invalid Certificates: The required certificates may be missing, invalid, or not properly imported into the PSE.
  Incompatible Key Algorithm: The key algorithm used in the PSE may not be supported or recognized by the SAP system.
  Configuration Issues: There may be issues with the configuration of the SAP system's security settings or the PSE itself.
  
  Solutions:
  
  
  Check PSE Integrity:
  
  Use transaction STRUST to check the integrity of the PSE. You can also regenerate the PSE if necessary.
  If the PSE is corrupted, you may need to create a new PSE.
  
  
  
  Import Certificates:
  
  Ensure that all necessary certificates are correctly imported into the PSE. You can do this through the STRUST transaction.
  If you have a backup of the PSE or certificates, consider restoring them.
  
  
  
  Regenerate the PSE:
  
  If the PSE is corrupted and cannot be repaired, you may need to regenerate it. This can be done in the STRUST transaction by selecting the appropriate PSE and using the "Create" option.
  
  
  
  Check Key Algorithm Compatibility:
  
  Verify that the key algorithm used in the PSE is compatible with your SAP system version. If necessary, update the PSE to use a supported algorithm.
  
  
  
  Review Configuration:
  
  Check the configuration settings related to security and PSE in your SAP system. Ensure that all settings are correctly configured.
  
  
  
  Consult SAP Notes:
  
  Look for relevant SAP Notes in the SAP Support Portal that may address this specific error. There may be patches or updates available that resolve the issue.
  
  
  
  Related Information:
  
  Transaction STRUST: This transaction is used to manage the PSE and certificates in SAP. You can view, import, and export certificates and manage the PSE from here.
  SAP Security Guide: Refer to the SAP Security Guide for best practices on managing PSE and certificates.
  SAP Community: The SAP Community forums can be a valuable resource for troubleshooting and finding solutions to similar issues encountered by other users.
  
  If the problem persists after trying the above solutions, consider reaching out to SAP support for further assistance.