Fieldglass-Hyperscaler technical checklist

[Tina_Martinez]

Does anyone know if new certificates are required since there is a domain change that happens as part of the hyperscaler transition?

[josie_n]

Hi Tina

Which type of certificates are you referring to? For browser access or system to system integrations? Please see the info below.

--------------------------------------------------------------------------------------------------------------------------------------------------------
Customers access the SAP Fieldglass application over the Internet using the secure TLS protocol. As part of the protocol, digital certificates are used to encrypt the communication.

When SAP Fieldglass is deployed on the public cloud, the digital certificates for the server instances will be rotated every 30 days. This differs from the current implementation, where rotation was done yearly.

Browser Access

Customers who access the SAP Fieldglass application using a web browser do not require users to explicitly install SAP Fieldglass server certificates, as the browser’s certificate store will typically trust certificates issued by the “Let’s Encrypt” certificate authority. This may be dependent on IT policies / implementations, so it may be best to confirm with those teams, but action is typically not required.

System to system integration

Customers who use the system-to-system integrations (example: Web Services integrations) with SAP Fieldglass application should consult their IT departments / development teams to determine if their integration application requires the installation of SAP Fieldglass certificates to establish a trusted connection.  

SAP Fieldglass does not recommend that the customer store or install the SAP Fieldglass certificates (known as “Pinning”) because of how quickly they are rotated. If the customer chooses to store or install the SAP Fieldglass certificate, additional work is needed from the customer side to continue to access the SAP Fieldglass application without disruptions.

If the customer does not trust the refreshed SAP Fieldglass server certificate, then disruptions will occur in system-to-system integrations between the customer application and SAP Fieldglass. 

[NancyKane_ProductSuccess]

Hi @Tina_Martinez - New certificates are not required as part of the SAP Fieldglass hyperscaler migration. You can find reference material on this topic on the SAP Help Portal.