SAP Certificate Monitor
Shows the status of SAP certificates.
General
| Executable | SAP_Certificate_Monitor.exe |
| Connection method | HTTP |
| Ports |
|
| Lookup files |
|
Default parameters
| Parameter name | Possible values | Default | Description |
|---|---|---|---|
| Host | <ip> | <hostname> | empty | Hostname or IP of the target system. If you use a virtual hostname on your SAP servers, please use also the virtual host to connect. |
| SAPInstance | number (2) | 00 - 99 | empty | Instance number of the SAP system |
| OSUsername | string | empty | Operating system user |
| OSPassword | string | empty | Password of the operating system user |
Sensor-specific parameters
| Parameter name | Possible values | Default | Description |
|---|---|---|---|
| Protocol | http | https | http | Used protocol for the connection to sapstartsrv |
Channels
| Channel name | Description | Lookup file |
|---|---|---|
| <PSEName> | Status of certificates in <PSEName> | itesys.sapcertificatemonitor.certstatus.ovl |
Lookup values
Values, states and texts defined in the lookup files of this sensor.
Lookup file: itesys.sapcertificatemonitor.certstatus.ovl
| Value | State | Description |
|---|---|---|
0 | OK | Certificate valid |
1 | Warning | Certificate expires in 90 days |
2 | Warning | Certificate expires in 60 days |
3 | Warning | Certificate expires in 30 days |
4 | Error | Certificate expires in 7 days |
5 | Error | Certificate expired |
6 | Error | Certificate not yet valid |
7 | Error | Could not parse PSE validity |
8 | Error | Certificate check failed |
Important notes
Troubleshooting
| Error Code | Error Message | Possible Solution |
|---|---|---|
[SCN-060-000] | The following parameters has not been provided: <parameters> Please read the sensor documentation for further information! | Specify the listed parameters in the profile or in the sensor-specific parameters. |
[SCN-060-051] | Please provide a valid value for the parameter SAPInstance! | Specify the two-digit instance number in the parameter SAPInstance. |
[SCN-060-052] | <message> Hostname='<Host>' | The URL for SAP Control could not be built. Check the parameter Host. |
[SCN-060-300] | Error: <message> | The profile parameter SECUDIR could not be read via SAP Control. Check OSUsername/OSPassword and that the SAP Control web service (port 5<SAPInstance>13) is reachable. |
[SCN-060-301] | Error: <message> | The environment of the instance could not be read via SAP Control (GetEnvironment). Check OSUsername/OSPassword and that the SAP Control web service is reachable. |
[SCN-060-302] | Error: <message> | The PSE files could not be listed via SAP Control (OSExecute). Check that the OS user is allowed to run OSExecute (profile parameter service/protectedwebmethods). |
Changelog
| Version | Changes |
|---|---|
| 2023.09 | Added parameter to use https for sapstartsrv connection |
| 2021.03 | Added parameter to use https for sapstartsrv connection |
| 1.3.6.0 | First stable release |