Re: OSS1 error SncSessionInitiatorAK

Hi,

   Fisrt check you have environment variables SECUDIR and SNC_LIB pointing to the right path of user <SID>adm

Ex: c\usr\saprouter

Then take a backup of your soaprouttab file and  download files saprouter.sar and sapcrypto.sar  from market place.

      Generate the certificate Request with the command:
sapgenpse get_pse -v -r certreq -p local.pse
“ <Distinguished Name>”

Display the output file "certreq" and
with copy&paste (including the BEGIN and END statement) insert the
certificate request into the text area of the same form on the SAP Service
Marketplace from which you copied the Distinguished Name.

In response you will receive the certificate signed
by the CA in the Service Marketplace. Copy&paste the text to a new local
file named "srcert", which must be created in the same directory as
the sapgenpse executable.

With this in turn you can install the certificate
in your saprouter by calling:

sapgenpse import_own_cert -c srcert -p local.pse

C:\saprouter>sapgenpse import_own_cert -c srcert -p
local.pse

Please enter PIN:

CA-Response successfully imported into PSE
"C:\saprouter\local.pse"

Now you will have to create the credentials for the
SAProuter with the same program (if you omit -O <user_for_saprouter>, the
credentials are created for the logged in user account).
sapgenpse seclogin -p local.pse -O <user_for
_saprouter>Note: The account of the service user should always be
entered in full <domainname>\<username>

C:\saprouter>sapgenpse seclogin -p local.pse

running
seclogin with USER="adminmqa"

Please enter PIN:

Added
SSO-credentials for PSE "C:\saprouter\local.pse"

"CN=autdev,
OU=0001053079, OU=SAProuter, O=SAP, C=DE"

8. This will create a file called "cred_v2"
in the same directory as "local.pse"

Check if the certificate has been imported
successfully with the following command:

sapgenpse get_my_name -v -n Issuer

Check if the environment of the user running SAProuter
contains the environment variable SNC_LIB and SECUDIR

Start the SAProuter with the following command line (to start the
SAProuter as a Windows service, please follow the steps described in SAP note
525751):

saprouter -r -S <port> -K "p:<Distingushed Name>"

               -K tells the saprouter to start
with loading the SNC library

HOpe this helps

Example

saprouter
-r -K "p:CN=example, OU=0000123456, OU=SAProuter, O=SAP, C=DE"