3688721 - Read time out while adding a subaccount to SAP Cloud Connector(SCC)

Upon adding a new subaccount to SCC, following time out error is raised from SCC trace (ljs_trace.log / scc_core.trc).

====
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.core.connectivity.tunnel.client.sso.TrustConfigurationServiceImpl#https-jsse-nio2-8443-exec-4#          #Successfully deleted IDP configuration for tunnel id 'account:///<subaccount-ID>'
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc#https-jsse-nio2-8443-exec-4#          #Failed to sign the Cloud Connector certificate for subaccount <subaccount-ID>@cf.btp.uk-cre.scs.sap. Verify configuration and proxy settings. See 'Log and Trace Files' and in particular scc_core.trc for details. Associated entries were logged on or around 20xx-xx-xx xx:xx:xx,xxx +0000. Consult SAP note 2460641 for possible remedies.
com.sap.scc.servlets.RequestFailureExecution$InvalidConfiguration: Failed to sign the Cloud Connector certificate for subaccount <subaccount-ID>@cf.btp.uk-cre.scs.sap. Verify configuration and proxy settings. See 'Log and Trace Files' and in particular scc_core.trc for details. Associated entries were logged on or around 20xx-xx-xx xx:xx:xx,xxx +0000. Consult SAP note 2460641 for possible remedies.
    at com.sap.scc.ui.SubaccountControl.createSubaccount(SubaccountControl.java:168)
    at com.sap.scc.servlets.ConfigurationServlet.addAccount(ConfigurationServlet.java:1624)
    at com.sap.scc.servlets.ConfigurationServlet.dispatch(ConfigurationServlet.java:257)
    at com.sap.scc.servlets.ServletUtilities.service(ServletUtilities.java:66)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)

Caused by: com.sap.scc.servlets.FatalSccException: Preparation of tunnel certificate for <subaccount-ID>@cf.btp.uk-cre.scs.sap account failed.
    at com.sap.scc.ui.SubaccountControl.connectSubaccountToCloud(SubaccountControl.java:272)
    at com.sap.scc.ui.SubaccountControl.createSubaccount(SubaccountControl.java:144)
    ... 40 common frames omitted
Caused by: org.apache.http.conn.ConnectTimeoutException: Connect to connectivitycertsigning.cf.btp.uk-cre.scs.sap:443 [connectivitycertsigning.cf.btp.uk-cre.scs.sap/35.176.27.130, connectivitycertsigning.cf.btp.uk-cre.scs.sap/18.169.235.79, connectivitycertsigning.cf.btp.uk-cre.scs.sap/18.130.23.114] failed: Read timed out (local port xxxxxx to address <local-IP>, remote port 443 to address 18.130.23.114 (ec2-18-130-23-114.eu-west-2.compute.amazonaws.com))
    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:151)
    at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
    at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)

Caused by: java.net.SocketTimeoutException: Read timed out (local port xxxxx to address <local-IP>, remote port 443 to address 18.130.23.114 (ec2-18-130-23-114.eu-west-2.compute.amazonaws.com))
    at java.net.SocketInputStream.socketRead0(Native Method)
====

• SAP Cloud Connector(SCC) release independent;
• SAP Busness Technology Platform(BTP).

sap cloud connector, connector, cloud connector, scc, CC, jvm, subaccount, host, region, region host, sub-account, sub account, tenant, adding, add, new subaccount, BTP, 35.176.27.130, 18.169.235.79, 18.130.23.114, ip, ip address, ip-address, ipaddress, uk-cre.scs.sap, ondemand.com, 443 , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BC-CP-CON , Cloud to On-premise Connectivity service , Problem