SAP Knowledge Base Article - Preview

2519468 - Setting up STS per SAP note 2437674 fails with certificate errors in BW

Symptom

  • After following solution in SAP note 2437674 on BI 4.2 SP4+, SSO still fails with various errors in BI
  • Further logging on BW shows something like below

"SsfVerify returned 5 :: SSF_API_SIGNER_ERRORS :: Error during verify - signer error.
N MYSAPSSO2 ticket last error from SSF: ERROR in sec_decrypt_Digest: verification failed
N ERROR in dsa_verify_all: Hash value size (160) too short for DSA key (2048,224)”

  • On the BI site the error would be more generic like "JCO_ERROR_LOGON_FAILURE: Issuer of SSO ticket is not authorized on bw servername sysnr 00"


Read more...

Environment

  • SAP BusinessObject Business Intelligence Platform 4.2 SP4 and above
  • SAP Business warehouse (various versions)
  • SAP crypto version 5.5.5.p134 (may also affect other crypto versions)

Product

SAP BusinessObjects Business Intelligence platform 4.2

Keywords

biauth htkba PKCS12Tool.jar, Algorithm, FIPS140 mode, SHA1, SSO to BW, SSO between SAP-BI Platform and SAP-BW Not able to run the command when creating the certificate. Error is thrown "Algorithm not allowable in FIPS140 mode: SHA1" , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.