2482807 - Browser configuration using HANA Direct Live Data Connections (CORS) in SAP Analytics Cloud

SAP Knowledge Base Article - Public

2482807 - Browser configuration using HANA Direct Live Data Connections (CORS) in SAP Analytics Cloud

Symptom

You configured SAP Analytics Cloud using Direct Connectivity to HANA (cors) using the Product Documentation Guide but experience issues such as:

Failedtoconnecttosystem.png

  • Failed to connect to system;

If you try to connect directly to a HANA database directly to verify the connectivity (for example, https://yourHANAserver.yourdomain.com:43XX/sap/bc/ina/service/v2/GetServerInfo) you get the error:

  • Your connection is not private
  • Attackers might be trying to steal your information from yourhanaserver.yourdomain.com (for example, passwords, messages, or credit cards).
  • NET::ERR_CERT_AUTHORITY_INVALID

YourConnectionIsNotPrivate.png

Other errors captured in Chrome Developer tools may include:

  • ERR_TUNNEL_CONNECTION_FAILED

Environment

  • SAP Analytics Cloud 2017.8 onwards
  • HANA dabasase

Cause

Browsers security requirements need to be configured properly to allow for pop-up windows and cookies from SAP Analytics Cloud.

Resolution

Chrome

Network settings

Verifying your connectivity to both systems:

SAP Analytics cloud: verify that your client computer can connect directly to your tenant. Even if you plan to configure Reverse Proxy, it is a good idea to test first with a client computer that can connect directly.

HANA: your Chrome client should have direct access to HANA as it will be sending the queries directly and authenticate. Same recommendation about your Reverse Proxy applies for HANA.

You must verify that you can access directly this URL using Chrome:

https://yourHANAserver.yourdomain.com:43XX/sap/bc/ina/service/v2/GetServerInfo

Where:

yourHANAserver is the HANA server name that you plan to connect to.

yourdomain.com: part of the FQDN for the HANA server. It is important as the certificate is issued usually to the FQDN.

43XX: default HTTPS ports for HANA's web dispatcher. Your server may be 4300. If your server doesn't respond to the HTTPS port, verify that you completed the SSL configuration correctly as indicated in KBA 2502174.

Security settings: certificates

This is the most common configuration error. The certificate installed in HANA is not trusted in your Chrome browser. It has been signed by an internal certificate authority that is not trusted.

You can verify your certificate if you open the Developer Tools in Chrome: Menu More Tools > Developer Tools ( Windows: F12, Ctrl + Shift + I   Mac OS: Cmd + Opt + I)

Once you have the Developer Tools opened, you need to click on the Security tab:

If you click on the View Certificate button, you can see that the Certification authority is not trusted:

Certificate.png

You need to install the CA Root certificate authority that signed your certificate.

Download root certificate

  1. Browse to https://<certification authority host>/ip/certsrv
  2. Click "Download a CA Certificate, Certificate Chain, or CRL"
  3. Click "Download CA Certificate" 

Load the Root Certificate into your Windows browser machine

  1. Open the Certificates snap-in for a user, computer, or service (run certlm.msc)
  2. In the console tree, click the ""Trusted Root Certification Authorities" Store
  3. From the "Action" menu select "All Tasks > Import..." to start the Certificate Import Wizard.
  4. Select "Local Machine" Store Location and click "Next >
  5. Type the file name containing the certificate to be imported. (You can also click Browse and navigate to the file.)
  6. Click "Next >"
  7. Select "Place all certificates in the following store"
    • Trusted Root Certification Authorities
  8. Click "Next >"
  9. Click "Finish"

For further details consult with the person who signed that certificate to install it in your computer.

YourCompanyRootCertificate.png

See Also

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.

Keywords

EPM, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning,Cloud for Planning, EPM-ODS, Cloud for Analytics, C4P, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, HCP, C4A, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJ, BOBJcloud, BOCloud., BICloud, BO Cloud, connecting, conecting, conectando, conexão, modelo, SBOC, SAC, popup, popups, pop-up , KBA , LOD-ANA , SAP Analytics Cloud , LOD-ANA-BI , SAP Analytics Cloud - Business Intelligence (BOC) , Problem

Product

SAP Analytics Cloud 1.0