3570310 - API call against Repository onboarded via Application Option ends with "Internal Server Error" in SAP Document Management Service

• Onboarded repository via SAP Document Management Service, Application Option.
• Followed document Access Document Management Service, Application Option Repository Using API to enable API calls against the repository.
• When trying to create or retrieve a document via API, a "500 Internal Server Error" occurs with response as following:
  --------------
  {
      "message": "Oops! We faced an issue processing your request. Please try again later. If the problem persists, please reach out to the support team for assistance."
  }
  
  
• When SAP Support check internal logs, could find following log:
  --------------
  org.apache.chemistry.opencmis.commons.exceptions.CmisRuntimeException: Caught Exception while decrypting the data.
  ...
  Caused by: com.sap.security.dataencryption.DataEncryptionException: Error while decrypting data from stream!Error code: unavailable_encryption_keyring
  ...
  Caused by: com.sap.security.dataencryption.DataEncryptionException: Unable to decrypt the encrypted key. Error code: unavailable_encryption_keyring
      at com.sap.security.dataencryption.credstore.EnvelopeEncryptionKeyProvider.getDecryptionKeyFromKeyring(EnvelopeEncryptionKeyProvider.java:240)
      at com.sap.security.dataencryption.credstore.EnvelopeEncryptionKeyProvider.getDecryptionKey(EnvelopeEncryptionKeyProvider.java:168)
      at com.sap.security.dataencryption.DataCipherKeyProvider.getDecryptionKey(DataCipherKeyProvider.java:82)
      ... 83 more
  Caused by: com.sap.cp.security.credstore.client.CredentialStoreErrorResponseException: Unexpected status code 400 returned from credential operation: CredentialStoreOperation [request=POST https://credstore.cfapps.<region>.hana.ondemand.com/api/v1/keyencryption/decrypt HTTP/1.1, expectedStatusCodes=[200]] {"trackingId":"<region>-<xx>","errorCode":"unavailable_encryption_keyring","errorDescription":"Encryption Keyring used is unavailable","error_code":"unavailable_encryption_keyring"}
      at com.sap.cp.security.credstore.client.CredentialStoreOperationExecutorGlobal.retry(CredentialStoreOperationExecutorGlobal.java:75)
      at com.sap.cp.security.credstore.client.CredentialStoreOperationExecutor.executeOperation(CredentialStoreOperationExecutor.java:75)
      at com.sap.cp.security.credstore.client.KeyEncryption.decryptKey(KeyEncryption.java:189)
      at com.sap.cp.security.credstore.client.KeyEncryption.decryptKey(KeyEncryption.java:207)
      at com.sap.security.dataencryption.credstore.EnvelopeEncryptionKeyProvider.decryptByKeyring(EnvelopeEncryptionKeyProvider.java:252)
      at com.sap.security.dataencryption.credstore.EnvelopeEncryptionKeyProvider.getDecryptionKeyFromKeyring(EnvelopeEncryptionKeyProvider.java:238)
      ... 85 more

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP Document Management Service (DMS)

SAP Document Management service, DMS, SDM, BTP SDM, BTP DMS, SAP DMS, SAP SDM, API, API authentication, internal server error, 500, create document, retrieve document, repository content, no media document, isEncryptionEnabled, unavailable_encryption_keyring , KBA , BC-CP-CF-SDM-INT , Document Management, integration option , Problem