SAP Knowledge Base Article - Public

2826568 - How to renew/install Client Certificate used in S/4HANA Cloud or SAP Marketing Cloud?


You are getting HTTP status code (403) forbidden error while calling SAP S/4HANA or SAP Marketing Cloud API URL.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.


  • SAP S/4HANA Cloud
  • SAP Marketing Cloud 


The client certificate used for authentication in the Outbound Communication Arrangement(s) has expired.


As described in the announcement that the customer receives, Your S/4HANA cloud systems, acting as clients, will be affected for those communication scenarios which have outbound communication, and which use certificate-based authentication.

Please follow the below instructions to download the latest Client Certificate:

  1. Login to the communication Arrangements App and select the communication arrangement by clicking on it.


  2. Please click on highlighted Display button next to Communication System


  3. Please Scroll Down to the “Outbound Communication” section and click on Download button for downloading the certificate to
    your local desktop.


  4. Please follow the steps mentioned in below blog to upload it to system used in this communication arrangement.


SAP S/4HANA Cloud, SAP Marketing Cloud, Certificate Expired , KBA , XX-S4C-OPR-INC , S/4HANA Cloud Availability, Performance and Administration , CEC-MKT-BF , Basic Functions , How To


SAP S/4HANA Cloud all versions