Show TOC

Export and Import of TREX CertificatesLocate this document in the navigation structure


To join the security information you export the TREX certificate that is stored in the keystore on TREX side and import this certificate on application side.

  • The SAP Cryptographic Library is installed on the application server.

  • The environment variable SECUDIR is set to the location where the PSE is stored.

  • The SNC PSE exists on the application server.

  • The TREX certificate exists as a file in the file system.


Export TREX Certificate

Use the following command line to export the TREX certificate to the file SAPSNCS.trex.crt:

sapgenpse export_own_cert -o SAPSNCS.trex.crt -p SAPSNCS.pse




Starts the cryptography tool SAPGENPSE.


Function of SAPGENPSE that exports the certificate to the keystore.


Enter the file name of the TREX certificate to be exported.

- p SAPSNCS.pse

You specify the file name of the keystore that is to contain the root certificate here.

Import TREX Certificate on Application Side

You import the TREX certificate into the certificate list of the application server. You do this using the trust manager (transaction STRUST):

  1. Start the transaction STRUST.

  2. Select the SNC PSE.

    Information about the SNC PSE appears in the maintenance section.

  3. In the section Certificate, choose the button Import certificate. The Import Certificate dialog appears.

  4. Select the certificate (for example, the file SAPSNCS.trex.crt) from the destination where your stored it during the TREX certificate export. Choose file format.

    Information about the certificate appears in the section Certificate.

  5. Choose Add to Certificate List.

    The certificate is added to the Certificate List.

  6. Save your data.


The TREX certificate is added to the certificate list of the application server.