3240107 - Error when uploading SSL Certificate in CSB - Recruiting Marketing

This KBA describe the steps that can be done in order to resolve the issue when uploading SSL Certificate in CSB and getting the following errors. 

• An error occurred. Please try again later. 
• The Private Key is not associated with the SSL Certificate.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

SAP SuccessFactors Recruiting Marketing

1. Go to Manage Career Site Builder from Admin Center. 
2. Go to Tools > SSL Certificate
   1. If CSR has been generated using Option 1, click on upload and upload the SSL and Intermediate Certificate.
   2. If Uploading the certificate using Option 2, "I want to upload an SSL certificate that I obtained using my own CSR." Upload the SSL, Intermediate Certificate and Private Key.
3. You will receive an error message.

There are some possible causes for this error:

• CSR generated in CSB does not match the SSL Certificate. 
• Invalid Intermediate Certificate Format. 
• The .PEM file uploaded is a bundle and does not only contain the SSL Certificate.
• The CSR doesn't have all the required information

CSR generated in CSB does not match the SSL Certificate.
When using the previous CSR in Option 2, CSR might not have been imported to CSB.

• If the CSR was generated using Option 1 and getting the error: 

1. Open the CSR and SSL Certificate using a Notepad, Notepad++ or any similar application. If the SSL Certificate contains more than one certificate, this means that the SSL Certificate contains the intermediate certificate as well. Hence, it needs to be saved separately. 
2. Copy the text of the CSR and SSL certificate on Certificate Key Matcher. 
3. If the CSR and SSL Certificate does not match, this means that the SSL certificate was generated without using the CSR that was generated in CSB. 
4. In order to use the SSL Certificate, the "Private Key" is needed from the vendor. 
5. The SSL Certificate can then be installed using option 2: I want to upload an SSL certificate that I obtained using my own CSR. 

• If the SSL certificate was generated using CSR from elsewhere and is being uploaded using option 2 and getting the error, the same steps can be performed. However, on both scenarios, if the SSL Certificate matches the CSR and still getting the error, create a ticket to support and provide a copy of the SSL Certificate on the attachment. 
• Note: "I have a new SSL certificate based on an existing CSR" option from the SSL Certificates page in Career Site Builder has been removed from 2H 2023 release.

Invalid Intermediate Certificate Format. 

Contact your Certificate Authority to request the intermediate certificate file in PEM, CRT or CER format.

The .PEM file uploaded is a bundle and does not only contain the SSL Certificate.

Contact your Certificate Authority to request a valid SSL Certificate file

The CSR doesn't have all the required information

1. If you're using the Option 2, access the CSR Decoder
2. Enter the CSR
3. You will see at least 1 of the following data missing:
   • Common Name
   • Organization
   • Organizational Unit
   • City/Locality
   • State/County/Region
   • Email address
4. Please generate a new CSR providing all the above information, then ask the Certificate Authority to procure the Certificates again.

3156722 - How to generate an intermediate certificate - Recruiting Marketing
2231401 - Updated SSL Certificate Renewal process - Recruiting Marketing

SSL Certificate Upload Option for Existing Certificate Signing Requests in Career Site Builder is Deleted

Upload, Private key, SSL Certificate, Install, Renew, error, csr , KBA , LOD-SF-RMK-CER , Certificate Renewal, IP Address, Domain , LOD-SF-RMK-CSB , Career Site Builder , Problem