We can use the crytography tool SAPGENPSE to generate a keystore in which we can store a certificate.
First of all we need to define SECUDIR environment variable.The crytography tool SAPGENPSE generates the keystores and stores in this directory.

set SECUDIR

Usage ;

sapgenpse gen_pse <additional_options> [-p <PSE_name>] [-r <cert_req_file_name>] [-x <PIN>] [DN]

For an example ;

Creating SAPSSLS.pse

sapgenpse gen_pse -p SAPSSLS.pse

Creating server’s credentials

sapgenpse seclogin -p SAPSSLS.pse -O SAPService<SAPSID>

*The credentials file “cred_v2″ for the user provided (SAPService<SID>) with the -o option is in the SECUDIR directory.

Result ;

The server’s PSE is created in the directory you specified with the credential file.