How To Fix TRUST157 - On server &1, &2 applies

SAP Error Message - Details

• Message type: E = Error

• Message class: TRUST - Certificate Management

• Message number: 157

• Message text: On server &1, &2 applies

What causes this issue?

The specified maximu protection level for this server is only used if
the PSE mode for the system or this server has been set to the value
"Protected". If the system or the server are unprotected, the PSE files
are not protected.
The protection level means:
Fallback: The PSE files are not unprotected, but the protection is
dependent on the server.
DPAPI: The PSE files are protected using the Microsoft Windows Data
Protection API (DPAPI).
TPM: The PSE files are protected using the Trusted Platform Module
(TPM). TPM is used, for example, on many Linux platforms.
Both DPAPI and TPM use server-dependent protection. This protection can
only be removed on the server on which the file was protected.
If the server has TPM but this is not active, this can be a reason for
the protection level fallback.

System Response

The system determines the protection level and displays it in the server
row. If you double-click the protection level, the corresponding message
is displayed.

How to fix this error?

To protect PSE files, you must first set the entire system or the server
to "Protected". To do this for the system, set the field in the "System"
area to "Protected". For a server, use the context menu, or select the
server and choose "Change PSE Mode".
On Microsoft Windows servers, DPAPI is available without specific
activation. As soon as you set the PSE mode "Protected", the PSE files
are protected with DPAPI.
On Linux servers, the way in which TPM is activated depends on the
platform. It can be necessary to activate TPM in the BIOS. Whether you
need to perform additional administrative steps is also
platform-dependent.
As soon as TPM is active, the PSE files are protected using TPM. The
activation of TPM can improve the protection. PSE files with protection
using TPM can only be read again on the same server.
If TPM is not active, the protection is performed using the fallback
mode. This protects PSE files regardless of the server.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.