SAP Knowledge Base Article - Public

3803081 - FAQ: SAP Datasphere Action Required: Update HANA Cloud Root Certificate for Remote Table Connections

Symptom

When accessing a Datasphere tenant, the homepage will display the following broadcast.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

SAP Datasphere

Resolution

  1. Will this broadcast affect us? What would be the consequences if we ignored it?
    • Yes, SAP HANA Cloud is migrating its server certificate chain to DigiCert TLS RSA4096 Root G5. So ignore this broadcast will cause connection invalid for Remote Table feature. See KBA 3797531.
  2. If our tenant already has a certificate DigiCert TLS RSA4096 Root G5, do we still need to import it?
    • No, If a valid certificate exists in the tenant's database, there is no need to import it again.
  3. For us tenants, what is the latest timeframe for this certificate migration?
    • The SAP HANA Cloud landscapes will be updated between July 13, 2026 and November 16, 2026. Migration time varies depending on the data center. For more information, see KBA 3399573.
  4. For Datasphere tenants, is it possible to import the corresponding certificates from the UI?
    • Yes. it is the best practice to import certificate via Datasphere UI. 

See Also

DS, DSP, DWC, HANA

Keywords

KBA , DS-DI-CON , Connections , DS-DI-MON , Cross Data Integration Monitor, Data Pipeline Analyzer , Problem

Product

SAP Datasphere all versions