3471359 - List of Root Certificates for SSL Connections in Datasphere

• When communicating using SSL-based connections such as HTTPS, a trust relationship must first be established between the connected systems. Therefore, when SAP Datasphere connects to any system using SSL, the relevant root certificate should be imported on the SAP Datasphere side to establish this trust relationship.
• This note provides a list of URLs where you can download the relevant root certificate files.

SAP Datasphere

• Relevant root CA can be found in below table
  

  Remote Source	Downloading Link	Other Info
  Amazon Athena	Amazon Trust Service https://www.amazontrust.com/repository/	The relevant PEM download link exists in the left link. For example, Amazon Root CA 1 can be downloaded from https://www.amazontrust.com/repository/AmazonRootCA1.pem
  Google BigQuery	Google Trust Service https://pki.goog/repository/	The PEM file can be found in "Root CAs" section.
  Microsoft Azure SQL Database	https://learn.microsoft.com/en-us/azure/security/fundamentals/azure-ca-details	PEM file link can be directly found in this page.
  SAP Product	https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem https://dl.cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem	SAP Products are using certificate signed by Digi Cert. The 2 root CAs in left column should be downloaded.

  
  
  
• Below steps can be used to import the CA in Datasphere
  
  1. In Datasphere, System -> Configuration -> Security, press add button in “SSL/TLS Certificates” area
  
  
  
  2. Select the downloaded root CA files and give relevant description to upload. (Below is using DigiCertGlobalRootG2 as example)
  
  
  
  3. Once uploaded, the root CA should be displayed in the list like below
  

Manage Certificates for Connections

KBA , DS-DI-CON , Connections , How To