3112901 - Securing Sapcontrol connection in Cockpit failed with error: "Error validating SAP Control credentials"

• After following the steps in Chapter 4 "Sapcontrol SSL Setup Steps between Cockpit and HDB" in the linked Guide in KBA 3007745 to secure the sapcontrol connection in HANA Cockpit, when entering the SAP Control logon credentials, the access fails with error "Error validating SAP Control credentials".

• Further, when checking the cockpit-hdb-svc log, you may find below error messages:

DD/MM/YYYY HH:MM:SS [ERR] APP/13-1 #2.0#YYYY MM DD HH:MM:SS#ERROR#com.sap.hana.cockpit.hdb.SAPControlCredentialsValidate#
DD/MM/YYYY HH:MM:SS [ERR] APP/13-1 ###<hash>##cockpit-hdb-svc#com.sap.hana.cockpit.hdb.api.SAPControlServlet......
DD/MM/YYYY HH:MM:SS [ERR] APP/13-1 SAPCTL_SSL_CONNECTION_FAILED: Failed to open SSL connection to SAP Control: {"url":"https://<hdb_host_name>:50014/SAPControl"}

DD/MM/YYYY HH:MM:SS [ERR] APP/13-1 #2.0#YYYY MM DD HH:MM:SS#ERROR#com.sap.hana.cockpit.hdb.util.DerivedHostnameVerifier#
DD/MM/YYYY HH:MM:SS [ERR] APP/13-1 ###<hash>##cockpit-hdb-svc#com.sap.hana.cockpit.hdb.util.DerivedHostnameVerifier......
DD/MM/YYYY HH:MM:SS [ERR] APP/13-1 SSL certificate for host [<hdb_host_name>] is not issued by SAP System PKI

Images/data in this KBA are from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental. 

• HANA Platform Edition 2.0
• HANA Cockpit 2.0

SAPCTL_SSL_CONNECTION_FAILED, SAP System PKI, CN, SAN, common name, subject alternative name, certificate, SAP control, HANA cockpit , KBA , HAN-CPT-CPT2-SEC , SAP HANA Cockpit 2 (Security) , HAN-DB-SEC , SAP HANA Security & User Management , Problem