SAP Knowledge Base Article - Public

3128030 - Cloud for Customer Leaf Certificate Renewal for Chinese Domains

Symptom

The existing server certificate (Leaf Certificate) for domain “*.c4c.saphybriscloud.cn” is being renewed on AKAMAI platform as it will get expired on December 22nd, 2021.

Environment

SAP Cloud for Customer

Resolution

Timelines

Change will be executed on December 10th, 2021 between 18:00 and 22:00 UTC for Test Systems.

Change will be executed on December 18th, 2021 between 15:00 and 19:00 UTC for Production Systems.

ACTION REQUIRED

If your C4C URL is AKAMAI ION enabled and If you have third party integrations like web services/APIs in your test/production environment, you may be required to add the new certificate chain in the required trust stores.

If your URL is not AKAMAI enabled, then there is no change required from your side.

NOTE: Issuer certificates (Root and Intermediate) of *.c4c.saphybriscloud.cn are not getting changed.

Download New Certificate

The new certificate is available for download here in the attachment section of this article.

1) What is the being done at our side with regard to the renewal?

Answer: We shall replace the new PSE (renewed PSE) at our side on AKAMAI platform which is being issued by the same Root and Intermediate Certificates.

2) What does this renewal mean to you while accessing C4C tenants from browser?

Answer: No action required; you can access your C4C URL through browser normally after the certificate renewal.

3) What does this renewal mean when you are using systems for integration with C4C systems?

Answer: In case your C4C URL is AKAMAI ION enabled and if you have uploaded the leaf certificate as well(*.c4c.saphybriscloud.cn) in your local system or integration system, you may update this with the new leaf certificate, you can download the new leaf certificate from the section mentioned above: "Download New Certificate"

NOTE: In general, for SSL handshake between C4C system and your system having ROOT and Intermediate certificate of leaf certificate should suffice (i. e.: DigiCert Global Root CA and DigiCert SHA2 Secure Server CA).

Keywords

Leaf, certificate, renewal, Chinese, domain , KBA , SRD-CC-SEC , Security , LOD-CRM-SEC , Security Topics , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions

Attachments

star_c4c_saphybriscloud_cn.zip