I know this thread is old, but for everyone looking for the solution to this, when you create the PSE with a PIN, you also need to add credentials to the PSE for the SAP service user SAPService<SID>, as follows:
sapgenpse seclogin -p <patch to PSE> -x <pin> -O <domain\SAPService<SID>>
then restart the WDP.