3229794 - Import Data Connection to SAP HANA with TLS Option "Signed by a certificate authority" fails in SAP Analytics Cloud

When attempting to create an Import Data Connection to SAP HANA with the TLS Option "Signed by a certificate authority" the following error is shown in the Console log and Network trace;

• {"result":"{\"status\":\"Error\",\"error\":{\"code\":\"ERROR_CONNECTION_INVALID_CERTIFICATE_VALIDATION_FAID\",\"rawError\":\"SAP DBTech JDBC: Certificate validation failed : com.ibm.jsse2.util.j: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target.\",\"params\":[\"SAP DBTech JDBC: Cannot connect to jdbc:sap://<HANAHost:HANAPort> [Cannot connect to host <HANAHost:HANAPort> [com.ibm.jsse2.util.j: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target], -813.].\"]},\"httpStatus\":500}"}

• {"result":"{\"status\":\"Error\",\"error\":{\"code\":\"ERROR_CONNECTION_INVALID\",\"rawError\":\"SAP DBTech JDBC: TLSv1 protocol cannot be initialized: Error constructing implementation (algorithm: Default, provider: IBMJSSE2, class: com.ibm.jsse2.bf$d).\",\"params\":[\"SAP DBTech JDBC: Cannot connect to jdbc:sap://<HANAHost:HANAPort>  [Cannot connect to host <HANAHost:HANAPort> [Error constructing implementation (algorithm: Default, provider: IBMJSSE2, class: com.ibm.jsse2.bf$d)], -813.].\"]},\"httpStatus\":500}"}

• {\"code\":\"ERROR_CONNECTION_INVALID_CERTIFICATE_VALIDATION_FAID\",\"rawError\":\"SAP DBTech JDBC: Certificate validation failed : sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.\",\"params\":[\"SAP DBTech JDBC: Cannot connect to jdbc:sap:// <HANAHost:HANAPort>[Cannot connect to host <HANAHost:HANAPort> [sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target], -813.].\"]}

• SAP Analytics Cloud 2022.8+
• SAP HANA secured with valid CA Signed Certificate

1. Log in to SAP Analytics Cloud.
2. Navigate to Connections.
3. Create a new Import Data Connection to SAP HANA.
4. Select TLS Option "Signed by a certificate authority (Recommended).
5. Observe the error in the Console and Networks tab within Google Chrome Developer Tools.

• Please make sure the following guide has been followed;
  
  • https://help.sap.com/docs/SAP_ANALYTICS_CLOUD/00f68c2e08b941f081002fd3691d86a7/61f2f4c1bc6f44798519131678bdc631.html?locale=en-US&q=hana%20tls
• Make sure that the HANA CA Signed Certificate is within the JVM Keystore used by the SAP Analytics Cloud Agent
  
  • If you are using the Simple Deployment Kit (SACAgentKit) this can be found in the following directory - <SACAgentKitInstallationDirectory>\sapjvm_8\jre\lib\security
• Please also make sure you are using a supported JVM such as SAP JVM

The issue has been resolved by HANA team with version 2.00.067.01 and 2.00.070.

• 2569847 - Where can you find SAC user assistance (help) to use, configure, and operate it more effectively?
• Have a question? Ask it here and let our amazing SAP community help! Or reply and share your knowledge!
• 2487011 - What information do I need to provide when opening a case for SAP Analytics Cloud?
• 2511489 - Troubleshooting performance issues in SAP Analytics Cloud
• Search for SAP Analytics Cloud content using Google or Bing:
  
  • https://www.google.ca/search?q=site%3Ahttps%3A%2F%2Fapps.support.sap.com+SAP+Analytics+Cloud
  • https://www.bing.com/search?q=site%3Ahttps%3A%2F%2Fapps.support.sap.com+SAP+Analytics+Cloud
  • Note: Add relevant text or warning/error messages to the text search field to filter results.
• SAP Analytics Cloud Connection Guide
• Getting Started with SAP Analytics Cloud Expert Community page
• SAP Analytics Cloud Get More Help and SAP Support
• Need More Help? Contact Support or visit the solution finder today!

Your feedback is important to help us improve our knowledge base.

• ERROR_CONNECTION_INVALID_CERTIFICATE_VALIDATION_FAID
• ERROR_CONNECTION_INVALID
• ERROR_CONNECTION_INVALID_CERTIFICATE_VALIDATION_FAID

SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics,Error, Issue, System, Data, User, Unable, Access, Connection, Sac, Connector, Live, Acquisition, Up, Set, setup, Model, BW, Connect, Story, Tenant, Import, Failed, Using, Working, SAML, SSO, sapanalyticscloud, sap analytical cloud, sap analytical cloud, SAC, sap analyst cloud, connected, failure, stopped, sap analyst cloud, https://hcs.cloud.sap, https://hanacloudservices.cloud.sap, https://cloudanalytics.accounts.ondemand.com, https://hanacloudservices-us.accounts.ondemand.com, https://www.sap.com, https://help.sap.com, predictive analytics (analysis), data analysis (analytics) tools, analytics tools, sap analytics cloud, data literacy, advanced analytics, data democratization, analytics software, real time analytics, self service analytics, advanced data analytics, analytics as a service, analytics cloud / cloud analytics, saas analytics, cloud bi, enterprise planning, cloud data analytics, cloud based analytics, analytics cloud platform, modern analytics, real time analysis, cloud analytics solution(s), what is sap analytics cloud, cloud analytics tools, analytics in the cloud, cloud analytics software , KBA , LOD-ANA-AUT , SAC Authentication / Login , LOD-ANA-AQU , Import Data Connections (Acquiring Data) , Problem

SAP Analytics Cloud 1.0