how to build a live connection from SAC to S4HANA On Prem using Cloud Connector?

[Pradipta]

Hi everyone,
 my team has been trying to build a live connection from SAC to S4HANA using cloud connector. We have installed and configured the cloud connector in BTP. We have also installed cloud connector on our S4HANA. But everytime while building a live connection in SAC in the Connections section we keep getting the error : "We couldn't connect to your S/4 HANA system. Possible causes: The SSL certificate is not trusted, or a network error occurred. For more information, see our troubleshooting page.
Correlation ID: 23075871-0937-4657-8611-230123129568"

Can someone please help us to solve this particular error?

[JBARLOW]

The error message "We couldn't connect to your S/4HANA system..." when setting up a Live Connection from SAC to S/4HANA via Cloud Connector is typically caused by SSL certificate issues or network misconfigurations. Below are the troubleshooting steps to help resolve it.

---

1️⃣ Verify SSL Certificate Trust

Since SAC requires a trusted SSL certificate, if your S/4HANA system uses a self-signed or untrusted certificate, it may cause this issue.

🔹 Solution: Import the SSL Certificate

Open SAP Cloud Connector (SCC) UI (https://<SCC_HOST>:8443).

Go to Trust Manager and check if the SSL certificate of your S/4HANA system is trusted.

If not, manually import the SSL certificate from S/4HANA:

1. Open the S/4HANA URL in a browser (https://<S4_HOST>:<PORT>).

2. Export the SSL certificate (usually a .crt or .pem file).

3. In Cloud Connector UI, go to Administration > Certificate and Keys > Trusted Certificates.

4. Upload the exported SSL certificate and restart the SCC.

Also, ensure SAC trusts the SSL certificate:

1. Log into SAP Analytics Cloud.

2. Go to System > Administration > Security > Certificate Trust List.

3. Upload the same SSL certificate there.

---

2️⃣ Check Cloud Connector Status

Open SAP Cloud Connector (https://<SCC_HOST>:8443).

Go to Connector Status and ensure:

The connection to BTP is Green.

The connection to the backend system (S/4HANA) is Green.

If the status is Red, check:

The subaccount settings in SCC.

The mapping of internal/external hostnames.

The backend connection details.

---

3️⃣ Verify the Exposed Resources in Cloud Connector

In SAP Cloud Connector, go to:

Cloud to On-Premise > Access Control.

Ensure that S/4HANA is correctly exposed under Mapped System.

The Protocol should be HTTPS, and the Virtual Host/Port must match the live connection settings in SAC.

If using a Principal Propagation, ensure:

Identity Provider (IdP) is correctly configured.

The SAML assertion is properly mapped.

---

4️⃣ Validate the Connection in SAP Analytics Cloud (SAC)

Go to Connections in SAC and click Edit on the S/4HANA live connection.

Ensure that:

The Host/Port matches what is mapped in SCC.

The Authentication Type (e.g., "None", "Basic Authentication", or "Principal Propagation") is correct.

The Path Prefix is /sap/bw/ina/GetServerInfo (for INA-based connections).

---

5️⃣ Check Network & Proxy Settings

If your SAC instance is behind a firewall or proxy:

Whitelist the Cloud Connector’s IP in your firewall.

Check whether SAC can reach your S/4HANA system.

Run a traceroute from the Cloud Connector machine:

tracert <S4HANA_Host>

If network packets are blocked or failing, adjust firewall settings.

---

6️⃣ Enable Logging for More Debugging

On SAP Cloud Connector, go to:

Monitoring > Logs > Cloud Connector Logs.

Enable DEBUG mode and try reconnecting.

Look for connection errors in the logs.

7️⃣ Restart & Test Again

After making any changes:

1. Restart Cloud Connector (https://<SCC_HOST>:8443).

2. Restart the S/4HANA backend.

3. Retry creating the Live Connection in SAC.