Hi.
If you try to use sap logon tickets check this:
1) In Administration guide (SP07) you'll see article 5.6.5 (Maintaining SSO with SAP Logon Tickets for SAP HANA XS Applications)
2) You should copy saplogon.pse from system that issue tickets , you shouldn't create it on HANA server.
3) SSL configuration must be configured ( at this point you used sapgenpse)
4) Go to the issue system, then check if cookie with ticket received( portal give to browser 5 cookies as example). In my opinion most user friendly interface in Chrome.
Check that all systems in the same domain.
I also using XCA to create my CA and sign all certificates. All certificates are sign by the same CA.
Hope you'll find answer.