How To Fix TRUST065 - Adjusting certificate list of existing SSL server PSEs

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 065

• Message text: Adjusting certificate list of existing SSL server PSEs

What causes this issue?

All SSL server PSEs have an identical certificate list. If you save
this PSE, its certificate list will be copied to all SSL server PSEs.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Check the certificate list of the SSL server PSEs after saving.
SSL-Server-PSEs.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST065 - Adjusting certificate list of existing SSL server PSEs ?

  The SAP error message TRUST065 indicates that there is an issue with the SSL server PSE (Personal Security Environment) certificates in your SAP system. This error typically arises when the system detects that the certificate list needs to be adjusted or updated, often due to changes in the certificate authorities (CAs) or the certificates themselves.
  Cause:
  
  Expired Certificates: One or more certificates in the PSE may have expired.
  Missing Certificates: Required certificates may be missing from the PSE.
  Changes in Certificate Authorities: The trusted root CA or intermediate CA certificates may have changed or been updated.
  Configuration Issues: There may be misconfigurations in the SSL settings or PSE.
  
  Solution:
  To resolve the TRUST065 error, you can follow these steps:
  
  
  Check the PSE:
  
  Use transaction STRUST to access the Trust Manager.
  Check the SSL server PSE for any expired or missing certificates.
  
  
  
  Update Certificates:
  
  If you find expired certificates, you will need to replace them with new ones.
  If there are missing certificates, you can import the necessary certificates from the CA.
  
  
  
  Adjust the Certificate List:
  
  In the Trust Manager, you can adjust the certificate list by adding or removing certificates as needed.
  Ensure that the root and intermediate certificates are correctly installed.
  
  
  
  Export and Import Certificates:
  
  If you need to import a new certificate, you can do so by using the "Import Certificate" option in STRUST.
  You may also need to export the current PSE and then re-import it after making changes.
  
  
  
  Regenerate the PSE:
  
  In some cases, it may be necessary to regenerate the PSE. This can be done using the transaction STRUST and selecting the appropriate options.
  
  
  
  Test the SSL Connection:
  
  After making changes, test the SSL connection to ensure that the issue is resolved.
  
  
  
  Related Information:
  
  Transaction STRUST: This is the main transaction for managing SSL certificates in SAP.
  PSE Types: There are different types of PSEs (e.g., SSL server PSE, SSL client PSE) that may need to be managed depending on your configuration.
  Documentation: Refer to SAP's official documentation for detailed steps on managing SSL certificates and PSEs.
  SAP Notes: Check for relevant SAP Notes that may provide additional guidance or patches related to SSL and PSE management.
  
  By following these steps, you should be able to resolve the TRUST065 error and ensure that your SSL server PSE is correctly configured.