3119842 - Leaf Certificate Renewal(*.c4c.saphybriscloud.cn)

Background

The existing server certificate(Leaf Certificate) for domain “*.c4c.saphybriscloud.cn” is being renewed as it will get expired on 10th July 2024.

Timelines

 SAP Cloud for Customer

ACTION REQUIRED

If you have third party integrations like web services/APIs in your test/production environment, you may be required to add the new certificate chain in the required trust stores.

NOTE: Issuer certificates(Root and Intermediate) of *.c4c.saphybriscloud.cn are also getting changed along with the leaf certificate, so entire chain must be installed in your Integrations, wherever it is used to work.

FAQ's

1. What is the being done at our side with regards to the renewal?
   Answer: We shall replace the new PSE (renewed PSE) at our side which is being issued by the Root and Intermediate Certificates.
   
   
2. What does this renewal mean to you while accessing C4C tenants from browser?
   Answer: No action required, you can access your C4C systems through browser normally after the certificate renewal.
   
   
3. What does this renewal mean when you are using systems for integration with C4C systems?
   Answer: In case if you have uploaded the leaf certificate as well (*.c4c.saphybriscloud.cn) in your local system or integration system, you may update this with the new leaf certificate, you can download the new leaf certificate from the section mentioned above: "Download New Certificate"
   
   NOTE: In general, for SSL handshake between C4C system and your system having ROOT and Intermediate certificate of leaf certificate should suffice (i.e.: DigiCert Global Root G2 and DigiCert Global G2 TLS RSA SHA256 2020 CA1).
   
   
4. How to check the certificate in my browser trust list
   
   Google Chrome : Open settings in chrome browser and search for security in the search box and click on it. 
   
   
   
   Go to manage certificates tab and click on it to see the certificates window popup 
   
   
   
   And check in “Trusted root certification Authorities” list and you should find “DigiCert Global Root G2". 
   
   
   
   Similarly check in “Intermediate Certification Authorities” list and you should find “DigiCert Global G2 TLS RSA SHA256 2020 CA1". 
   
   
   
   

   Microsoft Edge:

   Open Microsoft Edge >> Settings and search for security in the search box and click on it >> then click on Manage Certificates 
   
   
   And check in “Trusted root certification Authorities” list and you should find “DigiCert Global Root G2". 
   
   
   Similarly check in “Intermediate Certification Authorities” list and you should find “DigiCert Global G2 TLS RSA SHA256 2020 CA1" 
   
   
   If the certificate is not present, please proceed with steps mentioned under: “How to import certificate into my browser?”
5. I notice a discrepancy in the validity start date and end date mentioned in this knowledge article table and my downloaded certificate. What does this indicate?
   
   Answer : Sometimes, due to time zone difference, you may see a different date in the downloaded certificate. There is no impact on the certificate update activity due to this. You will be renewing the certificate well in advance, before the certificate expiry date. 
   
   
6. How to import the certificate into my browser? 

   • Open Google Chrome or Microsoft Edge.

   • Open settings and search for security in the search box and click on it.

   • Click on Manage Device Certificates / Manage Certificates.

   • Go to tab “Trusted root certification Authorities” list and Import attached Digi Certificates using "Import" button at bottom.

   • Go to tab “Intermediate certification Authorities” list and Import attached Digi Certificates using "Import" button at bottom.

   • Ensure that “DigiCert Root and Intermediate" is added in the list. 

KBA , LOD-CRM-SEC , Security Topics , How To