Symptom
Your PI/PO Integrations with SAP Successfactors start failing after a SAP SuccessFactors Next Generation Cloud Delivery (NGCD) migration:
- Exception caught by adapter framework: iaik.security.ssl.SSLException: Peer sent alter: Alert Fatal: handshake failure
Environment
- SAP SuccessFactors HCM Suite
- SAP NetWeaver Process Integration (PI/PO)
Cause
SAP Successfactors HCM is using newer / stronger Cipher Suites post NGCD migration
Older / weaker cipher suites will no longer be used by SAP SuccessFactors
Resolution
In order to overwrite the default cipher suites used by the PI/PO system, the SSLContext.properties file needs to be updated as described in the following two KBAs:
- 2569156 - How to get and validate SSLContext.properties file
- 2616983 - How to customize cipher suites in SSLContext.properties file
If you are not clear on what Cipher Suites are current supported by successfactors
The supported Cipher Suites that are supported by SF can be determined by using https://www.ssllabs.com/ to check the API Endpoint URL/
SAP SuccessFactors official position on TLS version support can be found in KBA:
- 2861289 - TLS version support for SAP SuccessFactors
Should the issue persist following the above checks / actions, please engage the PI/PO support team: BC-XI-CON to further assess the issue
See Also
3089960 - SAP SuccessFactors Next Generation Cloud Delivery (NGCD) Customer checklist
3262302 - NGCD - DC Migration Timeline
Keywords
NGCD, PI, PO, TLS, SSL, handshake, failure, migration, fatal, alert, cipher, suite, Next Generation Cloud Delivery, NextGen, Exception caught by adapter framework, iaik.security.ssl.SSLException, Peer sent alert, Alert Fatal: handshake failure , KBA , LOD-SF-INT-API , API & Adhoc API Framework , LOD-SF-INT , Integrations , LOD-SF-INT-ODATA , OData API Framework , Problem