SAP Knowledge Base Article - Public

2482807 - Secure HTTPS Browser configuration using Live Data Connections (CORS) in SAP Analytics Cloud

Symptom

You configured SAP Analytics Cloud (SAC) using Direct Connectivity (using CORS) by following the appropriate part of the Live Data Connections online help page.

The below errors appear when verifying the connection using the browser "GetServerInfo" test urls, for example:

  • HANA: https://<Your_HANA_System>/sap/bc/ina/service/v2/GetServerInfo
  • BW: https://<Your_ABAP_System>/sap/bw/ina/GetServerInfo?sap-client=<Your_Client_ID>

Possible error messages:

  • Not secure
  • Your connection is not private
  • Attackers might be trying to steal your information from yourhanaserver.yourdomain.com (for example, passwords, messages, or credit cards).
  • NET::ERR_CERT_AUTHORITY_INVALID
  • "_error": "net::ERR_CERT_AUTHORITY_INVALID"

Other errors captured in Chrome Developer tools may include:

  • ERR_TUNNEL_CONNECTION_FAILED
  • Error: "Subject Alternative Name Missing"
  • NET::ERR_CERT_COMMON_NAME_INVALID

Environment

  • SAP Analytics Cloud
  • Live Data Connections:
    • SAP HANA
    • SAP Business Warehouse
    • SAP S/4HANA
    • SAP BusinessObjects Universes (LUC)
    • SAP Business Planning and Consolidation (BPC) Embedded model

Cause

Browser security requirements need to be configured properly to allow certificates, pop-up windows and cookies from SAP Analytics Cloud.

Resolution

Backend Security Settings: Certificates

As a prerequisite, HTTPS (SSL) must be enabled and successfully configured on the backend datasource so that a secure connection can be established on the port configured for HTTPS.

Please enable SSL on the HTTPS port by following the KBAs below;

Browser Security settings: Certificates

Note:

The certificate installed on the back-end system is not trusted in the browser (message: This page is not secure (broken HTTPS).)

  1. You can verify the certificate if you open the Developer Tools in Chrome: Menu >> More Tools >> Developer Tools (Windows: F12, Ctrl + Shift + I   Mac OS: Cmd + Opt + I).
  2. Once Chrome Developer Tools is opened, click the Security tab.
  3. Click the View certificate button, and observe that the Certificate / certification authority (CA) is not trusted:

    Certificate.png
  4. Install the CA Root certificate authority that signed the certificate by following the below steps:
    1. Download Root certificate.
    2. Browse to https://<certification authority host>/ip/certsrv.
    3. Click "Download a CA Certificate, Certificate Chain, or CRL".
    4. Click "Download CA Certificate".
  5. Load Root Certificate into your Windows browser machine:
    1. Open the Certificates MMC snap-in for a user, computer, or service (run certlm.msc).
    2. In the console tree, click the "Trusted Root Certification Authorities" Store.
    3. From the "Action" menu select "All Tasks > Import..." to start the Certificate Import Wizard.
    4. Select "Local Machine" Store Location and click "Next".
    5. Type the file name containing the certificate to be imported. (You can also click Browse and navigate to the file).
    6. Click "Next".
    7. Select "Place all certificates in the following store".
      • Trusted Root Certification Authorities.
    1. Click "Next".
    2. Click "Finish".

For further details consult with the IT administrator who signed the certificate to install it in your computer.

YourCompanyRootCertificate.png

Note:

See Also

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.

Keywords

EPM, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning,Cloud for Planning, EPM-ODS, Cloud for Analytics, C4P, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, HCP, C4A, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJ, BOBJcloud, BOCloud., BICloud, BO Cloud, connecting, conecting, conectando, conexão, modelo, SBOC, SAC, popup, popups, pop-up, self-signed, no es seguro, backend, SAC over SAP Universe , KBA , analytic model creation, url showing not , not secure , LOD-ANA , SAP Analytics Cloud , LOD-ANA-BI , SAP Analytics Cloud - Business Intelligence (BOC) , LOD-ANA-BR , SAP Analytics Cloud - Digital Boardroom , LOD-ANA-PL , SAP Analytics Cloud – Planning (BOC) , LOD-ANA-PR , SAP Analytics Cloud – Predictive (BOC) , Problem

Product

SAP Analytics Cloud 1.0