Unable to connect using Trial account - 403

[Mofizur]

Hi Team,

I have installed SCC 2.13.1 and tring to connect with a trial account and we have established teh network connectiivty whcih is in place towards below on port 443

connectivitynotification.cf.us10.hana.ondemand.comconnectivitycertsigning.cf.us10.hana.ondemand.comconnectivitytunnel.cf.us10.hana.ondemand.com

However while connecting we are getting attached error

2022-04-08 14:46:21,084 +0100#INFO#com.sap.scc.config#https-jsse-nio2-8443-exec-2# #Proxy update not required - no changed detected

2022-04-08 14:46:21,829 +0100#WARN#com.sap.scc.config#https-jsse-nio2-8443-exec-2# #Creating an sslContextProvider for account trial@cf.us10.hana.ondemand.com without SSLContext. Keystore did not contain a certificate.

2022-04-08 14:46:21,832 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Will retrieve Connectivity CA certificate from SAP Cloud Platform

2022-04-08 14:46:21,833 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Executing Http Get request to https://connectivitycertsigning.cf.us10.hana.ondemand.com:443/certificate/management/v1/trusted/ca/a...

2022-04-08 14:46:22,336 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Returned Http Response with code 200

2022-04-08 14:46:22,344 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Connectivity CA certificate retrieved successfully from SAP Cloud Platform

2022-04-08 14:46:27,445 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #New RSA keypair was generated. Key size used 4096, time 4879 ms

2022-04-08 14:46:27,603 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Send Certificate Signing Request for Cloud Connector certificate to SAP Cloud Platform

2022-04-08 14:46:27,603 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Executing Http Post request to https://connectivitycertsigning.cf.us10.hana.ondemand.com:443/certificate/management/v1/sign/account...

2022-04-08 14:46:30,129 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Returned Http Response with code 403

2022-04-08 14:46:30,131 +0100#INFO#com.sap.scc.config#https-jsse-nio2-8443-exec-2# #Stopping service channels on trial@cf.us10.hana.ondemand.com

2022-04-08 14:46:30,136 +0100#ERROR#com.sap.scc#https-jsse-nio2-8443-exec-2# #SCC handshake failed: 403 — Forbidden

com.sap.scc.servlets.SccHandshakeException: SCC handshake failed: 403 — Forbidden

Any idea?

Thanks,

Mofizur

[poojan37]

In your logs it has following "2022-04-08 14:46:27,603 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Executing Http Post request to https://connectivitycertsigning.cf.us10.hana.ondemand.com:443/certificate/management/v1/sign/account...

2022-04-08 14:46:30,129 +0100#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-2# #Returned Http Response with code 403"

It means the proxy connection from cloud connector server to target URL is not open. You need to whitelist all URL connectivitycertsigning.cf.us10.hana.ondemand.com at proxy or better you can whitelist domain to avoid same issue for different regions.