Problem downloading SAP Cloud Root CA certificate

[MarioNik]

Hi SAP community,

I've been configuring SAP secure login service and come across a problem downloading SAP Cloud CA certificate by following the Help "SLS for SAP GUI" > Adding Root certificate during installation (secure login client) link https://help.sap.com/docs/SAP%20SECURE%20LOGIN%20SERVICE/c35917ca71e941c5a97a11d2c55dcacd/d86aa629f8...

Instructions on page are to go to PKI web site and download Root certificate although link to actual SAP Cloud Root CA is not present. Secon option, direct link to crt, is also not working. Only workaround is to copy provided direct URL and copy &paste to the new browser sessions. After that Root certificate can be downloaded.

Can you please help in rectify the SAP Help link documentation and provided procedure for certificate download.

[MarioNik]

Hi Martina,

SAP PKI looks updated and I can now see and download the SAP Cloud Root CA certificate. Thank you for letting me know.

Regards,

Mario

[MarioNik]

Hi Martina,

Thank you for your update. The section you have mentioned is not visable when I access the PKI site, perhaps some security configuration is preventing the access. I have attached the screenshot of PKI Site, at least what I can see and access.

Regards,

Mario

pki-web-site.png

[Christian_Cohrs]

Hi Mario,

while we are investigating this, you can also download the SAP Cloud Root CA file from https://support.sap.com/en/offerings-programs/support-services/trust-center-services.html?anchorId=s...

Best regards,

Christian

[Martina_Kirschenmann]

Hi Mario,

Thank you for making us aware of this issue. The problem should be fixed now.

Best regards,

Martina

[MarioNik]

Hi Jonas,

Thank you for the quick response and good pickup about the protocol. However, even PKI site is accessed with HTTPS. download link to "SAP Cloud Root CA" certificate is still not present, only CRL (revocation lists) and documentation. Please pass this information to the team maintinaing PKI site.

Best Regards,

Mario

[Martina_Kirschenmann]

Hi Mario,

On the PKI web page, you can find the “SAP Cloud Root CA” certificate file in the section called SAP Global PKI Authority Information Access / CA Certificates.

We will adapt our documentation shortly to make things clearer.

Thanks,

Martina

[jonas_zengerle]

Hi Mario,

indeed, some browser don't like HTTP links anymore. They prefer HTTPS.

I'll try to reach out to our documentation colleagues to update the HTTP links to be HTTPS.

In the meantime, feel free to use my manual replacement below:

http://www.pki.co.sap.com/ -> https://www.pki.co.sap.com/

http://aia.pki.co.sap.com/aia/SAP%20Cloud%20Root%20CA.crt -> https://aia.pki.co.sap.com/aia/SAP%20Cloud%20Root%20CA.crt

Hope that helps.

Best regards,

Jonas