Symptom
Even though downloading BTP authentication data aiming to either add or refresh a subaccount certificate from SCC, an authentication error is still perceived from SCC trace (ljs_trace.log / scc_core.trc), as per below.
=====
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-5# #https://connectivitycertsigning.cf.eu10.hana.ondemand.com:443/certificate/management/v1/trusted/ca/account/<subaccount-ID> Returned Http Response with code 200
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc.security#https-jsse-nio2-8443-exec-5# #Executing Http Post request to https://connectivitycertsigning.cf.eu10.hana.ondemand.com:443/certificate/management/v1/sign/account/<subaccount-ID>
com.sap.scc.servlets.RequestFailureExecution$InvalidConfiguration: An error occurred when trying to connect <subaccount-ID>@cf.eu10.hana.ondemand.com. See 'Log And Trace Files' and in particular scc_core.trc for details. Associated entries were logged on or around 20xx-xx-xx xx:xx:xx,xxx +0000.
at com.sap.scc.servlets.ConfigurationServlet.refreshCertificate(ConfigurationServlet.java:1634)
at com.sap.scc.servlets.ConfigurationServlet.uploadSubaccountAuthenticationData(ConfigurationServlet.java:1221)
Caused by: com.sap.scc.servlets.CriticalSccException: Preparation of tunnel certificate for <subaccount-ID>@cf.eu10.hana.ondemand.com account failed. Used subaccount authentication data Token for <subaccount-ID>@cf.eu10.hana.ondemand.com expiring at 20xx-xx-xx xx:xx:xx +0000
at com.sap.scc.ui.SubaccountControl.applyConfig(SubaccountControl.java:271)
Caused by: com.sap.scc.cert.HttpRequestException: SCC handshake failed: 401 — Unauthorized
at com.sap.scc.cert.HttpCertificateManagementService.processRequest(HttpCertificateManagementService.java:154)
=====
Read more...
Environment
- SAP Cloud Connector(SCC);
- SAP Business Technology Platform(BTP).
Product
Keywords
SAP cloud connector, SCC, CC, connector, authentication, authentication data, BTP, download authentication, BTP, subaccount, sub account, sub-account, handshake, HTTP 401, 401, Unauthorized, hana.ondemand.com, cloud.sap, certificate, refresh, renew, add subaccount, , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview