SAP Knowledge Base Article - Preview

3312105 - User Client Certificate cannot be generated from Secure Login Server


  1. It is required to use a Secure Login Server (SLS) to generate X.509 Client certificates for users to logon to On Premise systems rather than short lived certificates generated by the cloud connector. SLS server is a component of the SAP Single Sign On 3.0 application. 
  2. Following SAP help Principal Propagation step 'Configure a Secure Login Server' 
  3. Although all steps are followed the certificate can never be generated rather .err file is produced for download rather than expected .der file 



BTP all versions ; SAP Single Sign-On 3.0


KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-IAM-SSO-SL , Secure Login , Known Error

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.