3696095 - Connection between SAP ByDesign and SAP Analytics Cloud not Working When Using Client Certificate Credentials

When trying to perform the integration between the SAP Products Business ByDesign and Analytics Cloud via Client Certificate the following error appears:
"Unable to connect to datasource. Check the connection details and user credentials, and then try again."

SAP Business ByDesign.
SAP Analytics Cloud.

1. Access the SAC system.
2. From the side navigation, choose Connections > Add Connection (+). 
3. Then “Select a data source” dialog appears.
4. Expand Acquire Data and select SAP Business ByDesign Analytics.
5. In the New Connection dialog, enter the required details.
6. Provide name and description.
7. Error appears.

"Unable to connect to datasource. Check the connection details and user credentials, and then try again."

As provided in the SAC documentation, the certificate uploaded must be .pem. However, by default the SAP Business ByDesign extracts the certificate as .p12.
You must perform the conversion of the Certificate accordingly.

In order to proceed with the Client Certificate Integration, the certificate must be converted from .p12 to .pem via OpenSSL.
Here are the steps to extract the certificate from the Communication Arrangement at the SAP Business ByDesign:

1. Go to the Application and User Management - Communication Arrangements.
2. Select "Analytics DataSources OData" and click Edit.
3. Go to the Technical Data tab and Click Edit Credentials.
4. Go to the Certificate tab and click Remove Certificate if there is any.
5. Click Create and Download Key Pair.
6. Maintain the password.
7. A file with the extension .p12 will be extracted. Don't close this screen yet.

Here are the commands to perform the certificate conversion from .p12 to .pem via OpenSSL:

openssl pkcs12 -legacy -in Certificate.p12 -nocerts -nodes -out privatekey.pem
openssl pkcs12 -legacy -in Certificate.p12 -clcerts -nodes -out certificate.pem
cat privatekey.pem certificate.pem > sac-client.pem 

openssl x509 -in sac-client.pem -noout -subject -issuer
openssl pkey -in sac-client.pem -check

Note: Certificate.p12 refers to the name of the certificate extracted from the SAP Business ByDesign.

Once executed the commands above the file "sac-client.pem" will be created. Please upload the new certificate into the SAP Business ByDesign following the steps below:

8- Click Upload Certificate button.
9- And select the file sac-client.pem.
10- Click Ok and then Save and Reactivate button.

Afterwards, follow the steps at the SAC system and upload the file named as "sac-client.pem".

Import Data Connection to SAP Business ByDesign Analytics

2284574 - How to convert PFX file to unencrypted PEM format? - SAP Data Services 4.x

Integration, SAP Business ByDesign, ByD, SAC, SAP Analytics Cloud, Error, Unable to connect to datasource, Check the connection details and user credentials, certificate, pem, x.509, p.12, PKCS#12. , KBA , SRD-CC-SEC , Security , LOD-ANA-AQU , Import Data Connections (Acquiring Data) , How To

SAP Analytics Cloud all versions ; SAP Business ByDesign all versions