SAP Knowledge Base Article - Preview

3808351 - Updating the DPAgent does not update the cacerts file - SAP HANA Smart Data Integration

Symptom

  • After the change in SAP HANA Cloud instances from "DigiCert Global Root CA" to "DigiCert TLS RSA4096 Root G5", the DPAgent connection to HANA is disrupted.
  • framework.trc shows the following error:
    Failed to connect to SAP HANA server via JDBC.
    Context: SAP DBTech JDBC: Cannot connect to jdbc:sap://*.hana.*-haas-hc-dev.dev-aws.hanacloud.ondemand.com:443[Cannot connect to host *.hana.*-haas-hc-dev.dev-aws.hanacloud.ondemand.com:443. PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target -813: *:* -> f*.hana.*-haas-hc-dev.dev-aws.hanacloud.ondemand.com:443 ConnectionID:0 SessionID:0].
  • Updating the agent does not help, even though agent versions above 2.7.4.x include the new DigiCert TLS RSA4096 Root G5 certificate by default.


Read more...

Product

SAP HANA smart data integration 2.0

Keywords

cacerts, DigiCert TLS RSA4096 Root G5, certificate , KBA , HAN-DP-SDI , SAP HANA smart data integration (SDI) , HAN-DP-SDI-DS , SAP Datasphere specific SDI issues , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.