How To Fix TRUST104 - Certificate with public key checksum &1 already exists

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 104

• Message text: Certificate with public key checksum &1 already exists

What causes this issue?

There is already another certificate in the address book with the public
key checksum &V1&. It is therefore not possible to add this certificate
to the address book.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

In the <DS><DS:TRAN.STRUST>Trust Manager</></> menu, call the address
book and check whether you want to continue to use the certificate with
the public key checksum &V1&.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST104 - Certificate with public key checksum &1 already exists ?

  The SAP error message TRUST104 indicates that there is an issue with a digital certificate that you are trying to import into the SAP system. Specifically, the error message states that a certificate with the same public key checksum already exists in the system. This typically occurs when you attempt to import a certificate that is already present in the system's trust store.
  Cause:
  
  Duplicate Certificate: The certificate you are trying to import is already present in the system, which means that the public key checksum of the new certificate matches that of an existing certificate.
  Certificate Update: You might be trying to update an existing certificate with a new one that has the same public key.
  Incorrect Import Process: The import process may have been executed incorrectly, leading to duplicate entries.
  
  Solution:
  To resolve the TRUST104 error, you can follow these steps:
  
  
  Check Existing Certificates:
  
  Go to transaction code STRUST in the SAP GUI.
  Navigate to the appropriate trust store (e.g., "SSL Client (Standard)" or "SSL Server (Standard)").
  Look for the certificate that has the same public key checksum as the one you are trying to import.
  
  
  
  Delete or Replace the Existing Certificate:
  
  If the existing certificate is outdated or no longer valid, you can delete it.
  If you need to replace it, you can delete the old certificate and then import the new one.
  
  
  
  Import the Certificate Again:
  
  After deleting the old certificate, try importing the new certificate again using the same process you initially used.
  
  
  
  Verify the Import:
  
  After importing, ensure that the new certificate appears in the trust store and that there are no duplicate entries.
  
  
  
  Check for Other Trust Stores:
  
  If you are working with multiple trust stores (e.g., for different clients or systems), ensure that you check all relevant trust stores for duplicate certificates.
  
  
  
  Related Information:
  
  Transaction STRUST: This transaction is used to manage SSL certificates and trust relationships in SAP systems.
  Public Key Infrastructure (PKI): Understanding PKI concepts can help in managing certificates effectively.
  SAP Notes: Check for any relevant SAP Notes that may provide additional guidance or updates related to certificate management and the TRUST104 error.
  
  If the problem persists after following these steps, consider consulting SAP support or your system administrator for further assistance.