You have received a certificate response from the certifying authority (CA) and you want to import it into the transaction code STRUST.
The import of the certificate response fails with the below error message,
Issuer certificate missing in database:CN = ITSITI SHA256 Intermediate CA, DC= DDDD
Message no. TRUST057
Diagnosis
The following issuer certificate is missing from the database or is marked as inactive:
CN = ITSITI SHA256 Intermediate CA, DC= DDDD
Procedure
Store the issuer certificate in the database (menu function Certificate -> Export -> Database)
and make sure that the certificate is not amrked as inactive (menu function Certificate -> Database)
Solution
We manage to solve the issue via SAP Note 1468249 – STRUST: Error TRUST057 “CA certificate is missing on database”. Import of certificate response not possible,
- Get the missing certificates from your CA. There is a good chance that the certificates are available in the certificate store of your browser, too.
- All certificates should be single PEM encoded certificates in Base64 format.
- Press the button “Import certificate response” for the concerned SSL Server PSE.
- Into the opening popup, paste the actual certificate response and the CA root and intermediate certificates in Base64 format one after the other. The actual sequence does not play any role, but all certificates (root, intermediate, server certificate response) need to be present.There can be no, one, or more than one intermediate certificates.
- Press the OK button.
Reference
- SAP Note 1468249 – STRUST: Error TRUST057 “CA certificate is missing on database”. Import of certificate response not possible
- SAP Note 508307 – Trust Manager: Problems importing certificate responses
