How To Fix TRUST117 - Certificates with this subject and this issuer have been blocked

TRUST117 - Overview

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 117

• Message text: Certificates with this subject and this issuer have been blocked

What causes this issue?

All certificates with this subject and issuer that were issued before
the specified date are now locally blocked.

System Response

The encryption of messages and the verification of digital signatures is
no longer possible with the affected certificates if the CRL profiles
used for the encryption or signature verification are active. You can
set this in the certificate blocking administration tool.

How to fix this error?

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message TRUST117 - Certificates with this subject and this issuer have been blocked ?

  The SAP error message TRUST117 indicates that a certificate has been blocked due to its subject and issuer being deemed untrusted or invalid in the context of the SAP system's trust management. This typically occurs when the certificate is either self-signed, expired, or not recognized as a valid certificate by the system.
  
  Cause:
  
  Untrusted Certificate: The certificate's issuer is not in the trusted certificate store of the SAP system.
  Expired Certificate: The certificate has expired and is no longer valid.
  Self-Signed Certificate: The certificate is self-signed and not trusted by default.
  Revoked Certificate: The certificate has been revoked and is no longer valid for use.
  
  Configuration Issues: The trust relationship between the SAP system and the external system may not be properly configured.
  
  
  Solution:
  To resolve the TRUST117 error, you can follow these steps:
  
  
  Check Certificate Validity:
  
  Verify if the certificate is expired or revoked. If it is, you will need to obtain a new valid certificate.
  
  
  
  Import the Certificate:
  
  If the