How To Fix TRUST102 - Certificate with SHA-1 checksum &1 already exists

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 102

• Message text: Certificate with SHA-1 checksum &1 already exists

What causes this issue?

There is already another certificate in the address book with the SHA1
checksum &V1&. It is therefore not possible to add this certificate to
the address book.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

In the <DS><DS:TRAN.STRUST>Trust Manager</></> menu, call the address
book, and check whether you want to continue to use the certificate with
the SHA1 checksum &V1&.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST102 - Certificate with SHA-1 checksum &1 already exists ?

  The SAP error message TRUST102 indicates that there is a certificate in the system that has a SHA-1 checksum which already exists. This typically occurs when you are trying to import a new certificate that has the same SHA-1 hash as an existing certificate in the SAP Trust Manager (transaction code STRUST).
  Cause:
  
  Duplicate Certificate: The most common cause of this error is that you are attempting to import a certificate that is already present in the system. The SHA-1 checksum is a unique identifier for the certificate, and if it matches an existing certificate, the system will prevent the import to avoid duplicates.
  Certificate Expiration: Sometimes, if a certificate is expired or about to expire, you might be trying to import a new one without properly removing or updating the old one.
  
  Solution:
  
  
  Check Existing Certificates:
  
  Go to transaction code STRUST.
  Check the list of existing certificates in the relevant trust store (e.g., SSL, PSE).
  Look for the certificate with the same SHA-1 checksum.
  
  
  
  Remove or Update the Existing Certificate:
  
  If you find the duplicate certificate, you can either:
  
  Delete the existing certificate if it is no longer needed.
  Update the existing certificate if you have a new version of it.
  
  
  To delete, select the certificate and use the delete option.
  
  
  
  Import the New Certificate:
  
  After removing or updating the existing certificate, try importing the new certificate again.
  
  
  
  Use Different Certificate:
  
  If the new certificate is not essential, consider using a different certificate that does not conflict with the existing one.
  
  
  
  Related Information:
  
  SHA-1 Deprecation: Note that SHA-1 is considered weak and is being phased out in favor of stronger hashing algorithms like SHA-256. If possible, consider using certificates that utilize SHA-256 or stronger.
  Certificate Management: Regularly review and manage your certificates to avoid conflicts and ensure that you are using up-to-date and secure certificates.
  SAP Notes: Check for any relevant SAP Notes that may provide additional guidance or updates related to certificate management and the TRUST102 error.
  
  By following these steps, you should be able to resolve the TRUST102 error and successfully manage your certificates in SAP.