SAP Knowledge Base Article - Preview

3665750 - HTTP 401 unauthorized error raised after importing BTP authentication data file onto SCC

Symptom

Even though downloading BTP authentication data aiming to either add or refresh a subaccount certificate from SCC, an authentication error is still perceived from SCC trace (ljs_trace.log / scc_core.trc), as per below.


=====
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-5#          #https://connectivitycertsigning.cf.eu10.hana.ondemand.com:443/certificate/management/v1/trusted/ca/account/<subaccount-ID> Returned Http Response with code 200

20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-5#          #Executing Http Post request to https://connectivitycertsigning.cf.eu10.hana.ondemand.com:443/certificate/management/v1/sign/account/<subaccount-ID>

com.sap.scc.servlets.RequestFailureExecution$InvalidConfiguration: An error occurred when trying to connect <subaccount-ID>@cf.eu10.hana.ondemand.com. See 'Log And Trace Files' and in particular scc_core.trc for details. Associated entries were logged on or around 20xx-xx-xx xx:xx:xx,xxx +0000.
    at com.sap.scc.servlets.ConfigurationServlet.refreshCertificate(ConfigurationServlet.java:1634)
    at com.sap.scc.servlets.ConfigurationServlet.uploadSubaccountAuthenticationData(ConfigurationServlet.java:1221)

Caused by: com.sap.scc.servlets.CriticalSccException: Preparation of tunnel certificate for <subaccount-ID>@cf.eu10.hana.ondemand.com account failed. Used subaccount authentication data Token for <subaccount-ID>@cf.eu10.hana.ondemand.com expiring at 20xx-xx-xx xx:xx:xx +0000
    at com.sap.scc.ui.SubaccountControl.applyConfig(SubaccountControl.java:271)

Caused by: com.sap.scc.cert.HttpRequestException: SCC handshake failed: 401 — Unauthorized
    at com.sap.scc.cert.HttpCertificateManagementService.processRequest(HttpCertificateManagementService.java:154)
=====


Read more...

Environment

  • SAP Cloud Connector(SCC);
  • SAP Business Technology Platform(BTP).

Product

CONNECTOR FRAMEWORK all versions

Keywords

SAP cloud connector, SCC, CC, connector, authentication, authentication data, BTP, download authentication, BTP, subaccount, sub account, sub-account, handshake, HTTP 401, 401, Unauthorized, hana.ondemand.com, cloud.sap, certificate, refresh, renew, add subaccount, , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.