Symptom
- When communicating using SSL-based connections such as HTTPS, a trust relationship must first be established between the connected systems. Therefore, when SAP Datasphere connects to any system using SSL, the relevant root certificate should be imported on the SAP Datasphere side to establish this trust relationship.
- This note provides a list of URLs where you can download the relevant root certificate files.
Environment
SAP Datasphere
Resolution
- Relevant root CA can be found in below table
Remote Source Downloading Link Other Info Amazon Athena
Amazon Trust Service
The relevant PEM download link exists in the left link. For example, Amazon Root CA 1 can be downloaded from https://www.amazontrust.com/repository/AmazonRootCA1.pem Google BigQuery Google Trust Service
The PEM file can be found in "Root CAs" section. Microsoft Azure SQL Database https://learn.microsoft.com/en-us/azure/security/fundamentals/azure-ca-details PEM file link can be directly found in this page. SAP Product https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
https://dl.cacerts.digicert.com/DigiCertGlobalRootG2.crt.pemSAP Products are using certificate signed by Digi Cert.
The 2 root CAs in left column should be downloaded.
- Below steps can be used to import the CA in Datasphere
1. In Datasphere, System -> Configuration -> Security, press add button in “SSL/TLS Certificates” area
2. Select the downloaded root CA files and give relevant description to upload. (Below is using DigiCertGlobalRootG2 as example)
3. Once uploaded, the root CA should be displayed in the list like below
See Also
Keywords
KBA , DS-DI-CON , Connections , How To
Product
SAP Datasphere all versions
Attachments
Pasted image.png |