SAP Knowledge Base Article - Preview

2519468 - Setting up STS per SAP note 2437674 fails with certificate errors in BW


  • After following solution in SAP note 2437674 on BI 4.2 SP4+, SSO still fails with various errors in BI
  • Further logging on BW shows something like below

"SsfVerify returned 5 :: SSF_API_SIGNER_ERRORS :: Error during verify - signer error.
N MYSAPSSO2 ticket last error from SSF: ERROR in sec_decrypt_Digest: verification failed
N ERROR in dsa_verify_all: Hash value size (160) too short for DSA key (2048,224)”

  • On the BI site the error would be more generic like "JCO_ERROR_LOGON_FAILURE: Issuer of SSO ticket is not authorized on bw servername sysnr 00"



  • SAP BusinessObject Business Intelligence Platform 4.2 SP4 and above
  • SAP Business warehouse (various versions)
  • SAP crypto version 5.5.5.p134 (may also affect other crypto versions)


SAP BusinessObjects Business Intelligence platform 4.2


biauth htkba PKCS12Tool.jar, Algorithm, FIPS140 mode, SHA1, SSO to BW, SSO between SAP-BI Platform and SAP-BW Not able to run the command when creating the certificate. Error is thrown "Algorithm not allowable in FIPS140 mode: SHA1" , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.