SAP Knowledge Base Article - Public

2482807 - Browser configuration using HANA Direct Live Data Connections (CORS) in SAP Analytics Cloud

Symptom

You configured SAP Analytics Cloud (SAC) using Direct Connectivity to HANA (using CORS) by following the Product Documentation Guide or guided playlist but experience issues such as:

  • Failed to connect to system;

If you try to connect to a HANA database directly to verify connectivity (for example, https://yourHANAserver.yourdomain.com:43XX/sap/bc/ina/service/v2/GetServerInfo) you get the errors:

  • Not secure
  • Your connection is not private
  • Attackers might be trying to steal your information from yourhanaserver.yourdomain.com (for example, passwords, messages, or credit cards).
  • NET::ERR_CERT_AUTHORITY_INVALID

YourConnectionIsNotPrivate.png

Other errors captured in Chrome Developer tools may include:

  • ERR_TUNNEL_CONNECTION_FAILED

Environment

  • SAP Analytics Cloud
  • HANA database

Cause

Browser security requirements need to be configured properly to allow certificates, pop-up windows and cookies from SAP Analytics Cloud.

Resolution

Chrome

Network settings

Verify your connectivity to both systems:

SAP Analytics Cloud: verify that your client computer can connect directly to your tenant. Even if you plan to configure Reverse Proxy, it is a good idea to test first with a client computer that can connect directly.

HANA: your Chrome client should have direct access to HANA as it will be sending the queries directly and authenticate. Same recommendation about your Reverse Proxy applies for HANA.

You must verify that you can access directly this URL using Chrome:

https://yourHANAserver.yourdomain.com:43XX/sap/bc/ina/service/v2/GetServerInfo

Where:

yourHANAserver is the HANA server name that you plan to connect to.

yourdomain.com: part of the FQDN for the HANA server. It is important as the certificate is issued usually to the FQDN.

43XX: default HTTPS ports for HANA's web dispatcher. Your server may be 4300. If your server doesn't respond to the HTTPS port, verify that you completed the SSL configuration correctly as indicated in KBA 2502174.

Security settings: certificates

This is the most common configuration error. The certificate installed in HANA is not trusted in the Chrome browser. It has been signed by an internal certificate authority that is not trusted.

  1. You can verify the certificate if you open the Developer Tools in Chrome: Menu >> More Tools >> Developer Tools (Windows: F12, Ctrl + Shift + I   Mac OS: Cmd + Opt + I).
  2. Once Chrome Developer Tools is opened, click the Security tab.
  3. Click the View certificate button, and observe that the Certificate / certification authority (CA) is not trusted:

Certificate.png

  1. Install the CA Root certificate authority that signed the certificate by following the below steps:

Download Root certificate

  1. Browse to https://<certification authority host>/ip/certsrv
  2. Click "Download a CA Certificate, Certificate Chain, or CRL"
  3. Click "Download CA Certificate" 

Load Root Certificate into your Windows browser machine

  1. Open the Certificates snap-in for a user, computer, or service (run certlm.msc).
  2. In the console tree, click the ""Trusted Root Certification Authorities" Store.
  3. From the "Action" menu select "All Tasks > Import..." to start the Certificate Import Wizard.
  4. Select "Local Machine" Store Location and click "Next >.
  5. Type the file name containing the certificate to be imported. (You can also click Browse and navigate to the file).
  6. Click "Next >".
  7. Select "Place all certificates in the following store".
    • Trusted Root Certification Authorities.
  8. Click "Next >".
  9. Click "Finish".

For further details consult with the IT adminstrator who signed the certificate to install it in your computer.

YourCompanyRootCertificate.png

See Also

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.

Keywords

EPM, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning,Cloud for Planning, EPM-ODS, Cloud for Analytics, C4P, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, HCP, C4A, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJ, BOBJcloud, BOCloud., BICloud, BO Cloud, connecting, conecting, conectando, conexão, modelo, SBOC, SAC, popup, popups, pop-up , KBA , analytic model creation, url showing not , not secure , LOD-ANA , SAP Analytics Cloud , LOD-ANA-BI , SAP Analytics Cloud - Business Intelligence (BOC) , Problem

Product

SAP Analytics Cloud 1.0