SAP Knowledge Base Article - Preview

3170311 - A220021F: Don't accept certificate based key exchange - when using Kerberos/Certificate-based SSO


When trying to connect to AS ABAP via SSO with SAPGUI, the error A220021F is displayed:

GSS-API(maj): Miscellaneous failure
GSS-API(min): A220021F: Don't accept certificate based key exchange target="[SNC name of the target system]"



Target system is an AS ABAP system, where an SSO method has been configured (Kerberos or x509 certificates).


SAP NetWeaver Application Server for ABAP all versions ; SAP Single Sign-On 3.0


A220021F, SAPCryptolib, key exchange, Kerberos or x509 certificates SSO, Strust, SNC Parameters  , KBA , BC-IAM-SSO-SL , Secure Login , BC-SEC-LGN , Authentication , BC-SEC-SNC , Secure Network Communications , BC-IAM-SSO-CCL , CommonCryptoLib , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.