How To Fix TRUST085 - SSL PSE saved (restart ICM)

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 085

• Message text: SSL PSE saved (restart ICM)

What causes this issue?

The SSL PSE has been saved and distributed to the application servers.
Changes to SSL PSEs do not, however, take effect, since the ICM buffers
the SSL PSEs.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

After you have made all of the required changes to SSL PSEs in the Trust
Manager, you need to restart the ICM (transaction <DS:TRAN.SMICM>SMICM
</>, Administration -> ICM -> Exit Soft).

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST085 - SSL PSE saved (restart ICM) ?

  The SAP error message TRUST085 indicates that the SSL PSE (Personal Security Environment) has been successfully saved, but it requires a restart of the Internet Communication Manager (ICM) for the changes to take effect. This message typically occurs after you have made changes to the SSL configuration, such as updating certificates or modifying the PSE.
  Cause:
  The cause of the TRUST085 message is usually related to the following scenarios:
  
  Modification of SSL Configuration: Changes made to the SSL PSE, such as adding or updating certificates, require the ICM to be restarted to load the new configuration.
  PSE Management: When you manage the PSE using transaction codes like STRUST, the system saves the changes but needs a restart to apply them.
  
  Solution:
  To resolve the TRUST085 error, you need to restart the ICM. Here are the steps to do this:
  
  Access the SAP System: Log in to your SAP system where the changes were made.
  Restart ICM:
  
  You can restart the ICM using transaction SMICM:
  
  Go to transaction SMICM.
  In the menu, choose Goto > Services > Restart.
  
  
  Alternatively, you can restart the ICM using the command line if you have access to the server:
  
  Use the command to stop the instance: stopsap ICM
  Then start it again: startsap ICM
  
  
  
  
  Verify the Changes: After restarting the ICM, you can verify that the SSL configuration is working correctly by testing the HTTPS connection to your SAP system.
  
  Related Information:
  
  PSE Management: The PSE is crucial for SSL communication in SAP systems. It contains the necessary certificates and keys for secure communication.
  Transaction STRUST: This transaction is used to manage the PSE, where you can import/export certificates and manage trust relationships.
  ICM Configuration: Ensure that your ICM is properly configured for SSL. This includes settings in the instance profile and ensuring that the correct ports are open for HTTPS traffic.
  Logs and Traces: If you encounter issues after restarting, check the ICM logs (found in the dev_icm log file) for any errors or warnings that may indicate further issues with the SSL configuration.
  
  By following these steps, you should be able to resolve the TRUST085 message and ensure that your SSL configuration is correctly applied in your SAP system.