How To Fix TRUST107 - SSL requires PSE with RSA or GOST key pair

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 107

• Message text: SSL requires PSE with RSA or GOST key pair

What causes this issue?

SSL requires the use of the public key algorithm <DS>
<DS:GLOS.57CD1C53EB6AD411B1360060B03C6BFB>RSA</></> or GOST. However,
the PSE uses a different public key algorithm.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST107 - SSL requires PSE with RSA or GOST key pair ?

  The SAP error message TRUST107 indicates that the system requires a Personal Security Environment (PSE) that contains an RSA or GOST key pair for SSL communication, but it is currently missing or improperly configured. This error typically arises when trying to establish a secure connection (SSL/TLS) and the necessary cryptographic keys are not available.
  Cause:
  
  Missing Key Pair: The PSE does not contain a valid RSA or GOST key pair.
  Incorrect PSE Configuration: The PSE might be incorrectly configured or corrupted.
  SSL Configuration Issues: The SSL configuration in the SAP system may not be set up correctly.
  Outdated or Unsupported Cryptographic Algorithms: The system may be using outdated algorithms that are no longer supported.
  
  Solution:
  To resolve the TRUST107 error, follow these steps:
  
  
  Check the PSE:
  
  Use transaction STRUST to check the current PSE configuration.
  Ensure that the PSE contains a valid RSA or GOST key pair.
  
  
  
  Create or Update the PSE:
  
  If the PSE is missing the required key pair, you can create a new one:
  
  In transaction STRUST, select the appropriate PSE (e.g., SSL Client PSE or SSL Server PSE).
  Click on "Create" or "Change" to generate a new key pair.
  Follow the prompts to create the key pair, ensuring you select RSA or GOST as the algorithm.
  
  
  
  
  
  Import Certificates:
  
  If you have existing certificates that need to be imported, ensure they are correctly imported into the PSE after creating the key pair.
  
  
  
  Check SSL Configuration:
  
  Verify the SSL configuration settings in the SAP system. Ensure that the SSL parameters are correctly set in the instance profile or via transaction RZ10.
  
  
  
  Restart the SAP System:
  
  After making changes to the PSE or SSL configuration, restart the SAP instance to apply the changes.
  
  
  
  Test the Connection:
  
  After the changes, test the SSL connection to ensure that the error is resolved.
  
  
  
  Related Information:
  
  Documentation: Refer to the SAP Help Portal for detailed documentation on SSL configuration and PSE management.
  SAP Notes: Check for relevant SAP Notes that may provide additional guidance or patches related to SSL and PSE issues.
  Security Guidelines: Follow SAP security guidelines to ensure that your cryptographic settings comply with best practices.
  
  If the issue persists after following these steps, consider reaching out to SAP support for further assistance.