cancel
Showing results for 
Search instead for 
Did you mean: 

Problem downloading SAP Cloud Root CA certificate

MarioNik
Explorer
0 Kudos

Hi SAP community,

I've been configuring SAP secure login service and come across a problem downloading SAP Cloud CA certificate by following the Help "SLS for SAP GUI" > Adding Root certificate during installation (secure login client) link https://help.sap.com/docs/SAP%20SECURE%20LOGIN%20SERVICE/c35917ca71e941c5a97a11d2c55dcacd/d86aa629f8...

Instructions on page are to go to PKI web site and download Root certificate although link to actual SAP Cloud Root CA is not present. Secon option, direct link to crt, is also not working. Only workaround is to copy provided direct URL and copy &paste to the new browser sessions. After that Root certificate can be downloaded.

Can you please help in rectify the SAP Help link documentation and provided procedure for certificate download.

Accepted Solutions (0)

Answers (4)

Answers (4)

MarioNik
Explorer

Hi Martina,

SAP PKI looks updated and I can now see and download the SAP Cloud Root CA certificate. Thank you for letting me know.

Regards,

Mario

MarioNik
Explorer
0 Kudos

Hi Martina,

Thank you for your update. The section you have mentioned is not visable when I access the PKI site, perhaps some security configuration is preventing the access. I have attached the screenshot of PKI Site, at least what I can see and access.

Regards,

Mario

pki-web-site.png

Christian_Cohrs
Advisor
Advisor
0 Kudos

Hi Mario,

while we are investigating this, you can also download the SAP Cloud Root CA file from https://support.sap.com/en/offerings-programs/support-services/trust-center-services.html?anchorId=s...

Best regards,

Christian

Martina_K
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi Mario,

Thank you for making us aware of this issue. The problem should be fixed now.

Best regards,

Martina

MarioNik
Explorer
0 Kudos

Hi Jonas,

Thank you for the quick response and good pickup about the protocol. However, even PKI site is accessed with HTTPS. download link to "SAP Cloud Root CA" certificate is still not present, only CRL (revocation lists) and documentation. Please pass this information to the team maintinaing PKI site.

Best Regards,

Mario

Martina_K
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi Mario,

On the PKI web page, you can find the “SAP Cloud Root CA” certificate file in the section called SAP Global PKI Authority Information Access / CA Certificates.

We will adapt our documentation shortly to make things clearer.

Thanks,

Martina

jonas_zengerle
Discoverer
0 Kudos

Hi Mario,

indeed, some browser don't like HTTP links anymore. They prefer HTTPS.

I'll try to reach out to our documentation colleagues to update the HTTP links to be HTTPS.

In the meantime, feel free to use my manual replacement below:

http://www.pki.co.sap.com/ -> https://www.pki.co.sap.com/

http://aia.pki.co.sap.com/aia/SAP%20Cloud%20Root%20CA.crt -> https://aia.pki.co.sap.com/aia/SAP%20Cloud%20Root%20CA.crt

Hope that helps.

Best regards,

Jonas