3703686 - ADS reports are not working after BTP root certificate replacement

Starting from January 2026, customers observe ADS exceptions when executing ADS test reports and other applications consuming Forms Service by Adobe on BTP Cloud Foundry.

Both of the following two scenarios can be affected:

1. ABAP system -> Forms Service by Adobe (ADS) on BTP Cloud Foundry
   • In this scenario the abap system is connecting to Forms Service by Adobe (ADS) directly via RFC or logical port.
   • ADS test report FP_TEST_00, FP_PDF_TEST_00, and FP_CHECK_DESTINATION_SERVICE without destination service will return ads exceptions
   • In icm trace in the abap system, the following error are logged:
     [xxxx] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=7f90e80044c0)==SSSLERR_PEER_CERT_UNTRUSTED
     [xxxx] *** ERROR => SSL handshake with xxx.authentication.<region>.hana.ondemand.com:443 failed: SSSLERR_PEER_CERT_UNTRUSTED (-102)
     [xxxx]              Peer's X.509 certificate (chain) validation failed (missing trust?)
     
     
2. Forms Service by Adobe (ADS) on BTP Cloud Foundry -> Cloud Connector -> ABAP system
   • In this scenario ADS is fetching form templates from ABAP system via Cloud Connector. 
   • Report FP_TEST_00 and FP_CHECK_DESTINATION_SERVICE with destination service can return the following error:
     com.adobe.ProcessingException: com.adobe.ProcessingException: com.adobe.ads.destination.DestinationException: HTTP-503 Error.(200,101).
   • The following error messages can be found in scc_core.trc/ljs_trace.log traces on Cloud Connector:
     • "Unexpected exception while establishing tunnel connection for tunnel: account:///xxxxxx javax.net.ssl.SSLException: SSLEngine closed already".
     • "java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".

Forms Service by Adobe
SAP BTP, multi-cloud foundation/Cloud Foundry

Adobe Document Services, ADS, Forms Service by Adobe, multi-cloud foundation, com.adobe.ads.destination.DestinationException, HTTP-503, SSL handshake failure, SAP Cloud Connector, BTP subaccount, SAP BTP, G5 root certificate, DigiCert TLS RSA4096 Root G5, SAPJVM, connectivity error, tunnel connection failure, Cloud Foundry, outdated JDK version, PKIX path building failed, unable to find valid certification path to requested target.  , KBA , BC-SRV-FP-CF , Adobe-Interactive-Forms-Cloud-Wartung, Cloud Foundry , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem