2571763 - Authorization problem in SAP Cloud Connector when adding Cloud Foundry subaccount

A subaccount is being added in Cloud Foundry environment to SAP Cloud Connector, via manual configuration (not via a subaccount authentication data file).

The error appears: "417 An authorization problem occurred when downloading the configuration. Check the spelling of the subaccount name, user, and password — see ''Logs'' for details"

Additionally the following example errors might be seen in the cloud connector ljs_trace.log/scc_core.trc:

#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-1# #Send Certificate Signing Request for Cloud Connector certificate to SAP Cloud Platform
#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-1# #Executing Http Post request to https://connectivitycertsigning.cf.eu10.hana.ondemand.com:443/certificate/management/v1/sign/account/<subaccount>
#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-1# #Returned Http Response with code 401
#INFO#com.sap.scc.config#https-jsse-nio2-8443-exec-1# #Stopping service channels on <subaccount>@cf.eu10.hana.ondemand.com
#ERROR#com.sap.scc#https-jsse-nio2-8443-exec-1# #SCC handshake failed: 401 — Unauthorized

or

"An authorization problem occurred when downloading the configuration. Check the spelling of the subaccount name, user, and password as well as the validity of the authentication data. See 'Log and Trace Files' and in particular scc_core.trc for details. Associated entries were logged on or around 2025-12-29 08:41:51,815 +0000. Consult SAP note 2571763 for possible remedies." 

or

#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-1# #Send Certificate Signing Request for Cloud Connector certificate to SAP Cloud Platform
#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-1# #Executing Http Post request to https://connectivitycertsigning.cf.us10.hana.ondemand.com:443/certificate/management/v1/sign/account/<subaccount>
#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-1# #Returned Http Response with code 403

Note: For Neo subaccounts, refer to KBA 2461997.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP Cloud Connector 2.10.2 or higher
• SAP BTP, Cloud Foundry environment

cloud foundry, SCC, Cloud Connector, Authorization, handshake, unauthorized, code 401, error, HTTP, HTTPs, certificate renew manage subaccount, subaccount certificate, an error occurred when trying to connect, 417 an authorization problem occurred unable to add a cloud foundry subaccount, subaccount (sac) in sap cloud connector,sap cloud platform , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-CP-CON-CF , Cloud Foundry to On-premise Connectivity service , Problem