Creating an SNC PSE for the AS Java 

Use

When using the SAP Cryptographic Library as the security product for SNC, the AS Java must possess a Personal Security Environment (PSE). This PSE contains the AS Java’s public-key information, which includes its private key, its public-key certificate, and the list of public-key certificates that it trusts.

To create the SNC PSE for the AS Java use the command line tool sapgenpse.exe as shown below.

As an alternative, you can use a single PSE for both the application server and the AS Java. In this case, copy the application server’s SNC PSE to the AS Java’s SECUDIR directory.

Prerequisites

●      The SAP Cryptographic Library is installed on the AS Java.

●      The environment variable SECUDIR is set to the location where the PSE is to be stored.

To check the location of the SECUDIR directory, execute sapgenpse without including any command options. The program will display various information such as the library version and the location of SECUDIR.

Procedure

Use the following command line to create the PSE.

sapgenpse get_pse –p <PSE_Name> -x <PIN> <Distinguished_Name>

The Distinguished Name consists of the following elements:

●      CN = <Common_Name>

●      OU = <Organizational_Unit>

●      O = <Organization>

●      C = <Country>

Example Distinguished Name

CN=ASJAVA, O=MyCompany, C=US

Result

sapgenpse creates a PSE in the AS Java’s SECUDIR directory.

Example

The following command line creates the file SAP_ASJAVA.pse that is protected with the PIN asjavapin. When using this PSE, the AS Java has the Distinguished Name CN=ASJAVA, O=MyCompany, C=US.

sapgenpse get_pse –p SAP_ASJAVA.pse -x asjavapin CN=ASJAVA, O=MyCompany, C=US