How To Fix TRUST086 - SSL PSE was saved (ICM was notified)

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 086

• Message text: SSL PSE was saved (ICM was notified)

What causes this issue?

The SSL PSE was saved and distributed to the application servers. The
ICMs on all application servers were also notified of the change, so
that the change automatically takes effect.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST086 - SSL PSE was saved (ICM was notified) ?

  The SAP error message TRUST086 indicates that the SSL PSE (Personal Security Environment) was successfully saved, and the Internet Communication Manager (ICM) has been notified of this change. This message is generally not an error but rather an informational message indicating that the SSL PSE has been updated.
  Cause:
  The message is triggered when you perform actions related to SSL configuration in the SAP system, such as:
  
  Importing a new SSL certificate.
  Updating an existing SSL certificate.
  Modifying the SSL PSE settings.
  
  Solution:
  Since this message is informational, there is typically no action required unless you are experiencing issues with SSL connections. However, if you are facing SSL-related problems, consider the following steps:
  
  
  Verify SSL Configuration:
  
  Ensure that the SSL certificates are correctly imported into the PSE.
  Check the validity of the certificates (expiration dates, trust chain).
  
  
  
  Restart ICM:
  
  If you have made changes to the SSL PSE, you may need to restart the ICM to apply the changes. This can be done using transaction SMICM:
  
  Go to transaction SMICM.
  Choose "Administration" -> "ICM" -> "Restart".
  
  
  
  
  
  Check Logs:
  
  Review the ICM logs for any additional messages or errors that may indicate issues with SSL connections. You can access the logs in transaction SMICM under "Trace" or "Log".
  
  
  
  Test SSL Connection:
  
  Use tools like openssl to test the SSL connection to ensure that it is working as expected. You can run a command like:
  openssl s_client -connect <hostname>:<port>
  
  Replace <hostname> and <port> with your SAP system's details.
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation or notes related to SSL configuration for specific guidance based on your SAP version.
  
  
  
  Related Information:
  
  PSE Management: The PSE is crucial for SSL communication in SAP systems. It contains the private key and the corresponding public certificate.
  ICM: The Internet Communication Manager is responsible for handling HTTP(S) requests and responses in SAP systems.
  SAP Notes: Check SAP Notes related to SSL configuration and troubleshooting for your specific SAP version.
  
  If you continue to experience issues or if there are specific symptoms associated with this message, it may be helpful to consult with your SAP Basis team or SAP support for further assistance.