Symptom
This KBA describe the steps that can be done in order to resolve the issue when uploading SSL Certificate in CSB and getting the following errors.
- An error occurred. Please try again later.
- The Private Key is not associated with the SSL Certificate.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
SAP SuccessFactors Recruiting Marketing
Reproducing the Issue
- Go to Manage Career Site Builder from Admin Center.
- Go to Tools > SSL Certificate
- If CSR has been generated using Option 1, click on upload and upload the SSL and Intermediate Certificate.
- If Uploading the certificate using Option 2, "I want to upload an SSL certificate that I obtained using my own CSR." Upload the SSL, Intermediate Certificate and Private Key.
- You will receive an error message.
Cause
There are some possible causes for this error:
- CSR generated in CSB does not match the SSL Certificate. (Trying to upload an SSL Certificate obtained using another CSR through Option 1)
- Invalid Intermediate Certificate Format.
- The .PEM file uploaded is a bundle and does not only contain the SSL Certificate.
- The CSR doesn't have all the required information.
Resolution
CSR generated in CSB does not match the SSL Certificate (Trying to upload an SSL Certificate obtained using another CSR through Option 1).
1) If the CSR was generated using Option 1 and getting the error:
- Open the CSR and SSL Certificate using a Notepad, Notepad++ or any similar application. If the SSL Certificate contains more than one certificate, this means that the SSL Certificate contains the intermediate certificate as well. Hence, it needs to be saved separately.
- Copy the text of the CSR and SSL certificate on Certificate Key Matcher.
- If the CSR and SSL Certificate does not match, this means that the SSL certificate was generated without using the CSR that was generated in CSB.
- In order to use the SSL Certificate, the "Private Key" is needed from the vendor.
- The SSL Certificate can then be installed using option 2: I want to upload an SSL certificate that I obtained using my own CSR.
2) If the SSL certificate was generated using CSR from elsewhere and is being uploaded using option 2 and getting the error, the same steps can be performed.
However, on both scenarios, if the SSL Certificate matches the CSR and still getting the error, create a ticket to support and provide a copy of the SSL Certificate and the Intermediate Certificate on the attachment.
Note: DO NOT attach the private key.
Invalid Intermediate Certificate Format.
Contact your Certificate Authority (CA) to request the intermediate certificate file in PEM, CRT or CER format.
Alternatively, refer to the KBA 3299713 to extract the Intermediate Certificate (.cer) from the SSL certificate.
Some Certificate Authorities (CA) provide two intermediate certificates. Refer to the KBA 3111993 to combine them in one single file.
The .PEM file uploaded is a bundle and does not only contain the SSL Certificate.
Contact your Certificate Authority (CA) to request a valid SSL Certificate file.
The CSR doesn't have all the required information
- If you're using the Option 2, access the CSR Decoder
- Enter the CSR
- You will see at least 1 of the following data missing:
- Common Name
- Organization
- Organizational Unit
- City/Locality
- State/County/Region
- Email address
- Please generate a new CSR providing all the above information, then ask the Certificate Authority to procure the Certificates again.
See Also
Overview:
- 2231401 - Updated SSL Certificate Renewal process - Recruiting Marketing
- 3109381 - Overview About SSL Certificates tab in CSB - Recruiting Marketing
- 3153100 - How to Identify SSL Certificate, Intermediate Certificate/s and Private Key - Recruiting Marketing
Intermediate Certificate:
- 3156722 - How to generate an intermediate certificate - Recruiting Marketing
- 3299713 - How to extract the Intermediate Certificate (.cer) from the SSL certificate - Recruiting Marketing
- 3111993 - How to Upload Two Intermediate Certificates in CSB - Recruiting Marketing
Private Key:
- 3132774 - Private Key file not accepted in Career Site Builder SSL tool - Recruiting Marketing
Keywords
Upload, Private key, SSL Certificate, Install, Renew, error, csr , KBA , LOD-SF-RMK-CER , Certificate Renewal, IP Address, Domain , LOD-SF-RMK-CSB , Career Site Builder , Problem
Product
Attachments
Pasted image.png |
Pasted image.png |