on 10-02-2014 8:18 AM
All,
We recently renewed some certificates with the SAP PI key storage. They are now valid until 2017.
I'm just curious if there is somehow a possibility to trigger an alert or other notification when the expiration date is coming closer.
Now, we are aware of it, but within a few months, we probably forgot the expiration date.
Any suggestions?
Thanks.
Dimitri
Hello Dimitri,
If your PI system is a dual stack, you can upload the certificates in "STRUST" of ABAP and use ABAP report "SSF_ALERT_CERTEXPIRE" which reports certificates nearing expiry.
You can schedule this report as a background job with 'daily' frequency. Only condition is, you should upload certificates present in your keystorage to STRUST of ABAP also.
If your PI is a "Java" only system, it might be interesting for you to use "Solution Manager - Technical Monitoring" which also has monitoring & alerting setup for J2EE certificates present in "Key storage".
Hope this helps.
Regards,
Shahid Ahmed
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Interesting..
I could think of a way of achieving this by accessing the PI system tables to check for the end date and having a scheduled daily job to send alert emails when the end date is near.
I doubt if anything standard or any API is available to access the key storage data.
Regards
Varun
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Just to add - We do have a standard service to access some of the key store information.
But unfortunately i don't see any details about expiration date etc
Service : KeystoreHelpVi
Method : getKeystore
Not sure if SAP has enhanced this service in the later releases but i don't see in 7.31(dual stack)
User | Count |
---|---|
84 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.