Symptom
You have uploaded your certificate in Edit Certificate Trust List view. You have successfully uploaded the certificate but there is Chain Incomplete mark on your certificate. So you want to know what this mark indicates and how can this be corrected.
Environment
SAP Cloud for Customer and SA
Reproducing the Issue
- Navigate to Administrator--> Common Tasks.
- Select Edit Certificate Trust List view.
- Click Upload.
- Click Browse.
- Select your certificate.
- Click Open and Add.
- Even though the message Certificate successfully uploaded is shown, the Chain Incomplete is marked on your certificate.
Cause
The certificate signed by (Certification Authorities) will have Root, Intermidiate and Child as the hierarchy.
So, based on the certificate which you uploaded, you need to upload the other 2 certificates for the chain to be completed.
Resolution
- In your computer double click on your certificate.
- Select Certification Path tab.
- Verify how many certificates there are in the chain above your certificate and follow the step 4 on for each Certification Authority certificate you see in the certification path.
- Select the Certification Authority certificate.
- Click on View Certificate button.
- Select Details tab.
- Click on Copy to File button.
- Follow the Certificate Export Wizard to copy the certification authority certificate and save it to your disk.
- In the system navigate to Application and User Management.
- Select Edit Certificate Trust List view.
- Click Upload.
- Click Browse.
- Select the Certification Authority certificate you have exported previously.
- Click Open and Add.
- Your certificate appears now in the Certificate Trust List under its certification authority certificate without the chain incomplete mark.
Keywords
Certificate upload, Edit certificate trust list , KBA , LOD-CRM-SEC , Security Topics , How To