SAP Knowledge Base Article - Preview

2446327 - SNC Error Code A221021D Server refuses offered key exchange algorithm


The error may happen in different scenarios:

1. Using SAP Single Sign-On or SNC Client Encryption to authenticate in the NetWeaver ABAP using SAPGUI.
2. Testing a RFC connection between two different systems in SM59 when SNC is enabled for this RFC.

On both cases, the error messaged raised is:

GSS-API(maj): Miscellaneous failure
GSS-API(min): A221021D:Server refuses offered key exchange algorithms target="SNC Name"



  • SAP Single Sign-On 2.0
  • SAP Single Sign-On 3.0
  • SNC Client Encryption 2.0
  • SAP NetWeaver ABAP


SAP NetWeaver Application Server for ABAP all versions ; SAP Single Sign-On 2.0 ; SAP Single Sign-On 3.0


keytab, strust, sapgenpse Client hello parameters: no algorithm fits server preferences , KBA , BC-IAM-SSO-SL , Secure Login , BC-SEC-SNC , Secure Network Communications , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.