SAP Knowledge Base Article - Public

2482807 - Secure HTTPS Browser configuration using Live Data Connections (CORS) in SAP Analytics Cloud

Symptom

An SAP Analytics Cloud (SAC) live model is configured with a direct connection using CORS by following the steps of the live data connection online help and using guided playlists.

The below errors appear in the browser when verifying the connection using the "GetServerInfo" URLs, for example:

  • HANA: https://<Your_HANA_System>/sap/bc/ina/service/v2/GetServerInfo
  • BW or BW/4HANA: https://<Your_ABAP_System>/sap/bw/ina/GetServerInfo?sap-client=<Your_Client_ID>
  • BPC NW embedded model: https://<Your_ABAP_System>/sap/bw/ina/GetServerInfo?sap-client=<Your_Client_ID>
  • SAP Universehttps://<Your_Live_Universe_Connect_Tomcat:TomcatHttpsPort>/sap/boc/ina/GetServerInfo

Possible error messages:

  • Not secure
  • Your connection is not private
  • Attackers might be trying to steal your information from yourhanaserver.yourdomain.com (for example, passwords, messages, or credit cards).
  • NET::ERR_CERT_AUTHORITY_INVALID
  • "_error": "net::ERR_CERT_AUTHORITY_INVALID"

Other errors captured in Chrome Developer tools (network or console tabs) may include:

  • ERR_TUNNEL_CONNECTION_FAILED
  • Error: "Subject Alternative Name Missing"
  • NET::ERR_CERT_COMMON_NAME_INVALID

Environment

  • SAP Analytics Cloud
  • Live Data Connections:
    • SAP HANA (HANA)
    • SAP Business Warehouse (BW)
    • SAP BW/4HANA (BW4)
    • SAP S/4HANA
    • SAP BusinessObjects Universes (LUC)
    • SAP Business Planning and Consolidation, version for SAP NetWeaver (BPC NW) embedded model

Cause

Browser security requirements need to be configured properly to allow certificates, pop-up windows and cookies from SAP Analytics Cloud.

Resolution

Server Security Settings: Certificates

As a prerequisite, HTTPS (SSL) must be enabled and successfully configured on the backend (server) datasource so that secure connections can be established on the port configured for HTTPS.

Please enable SSL on the HTTPS port by following the articles / SAP Notes below:

  • SAP Business Warehouse (BW) & SAP BW/4HANA - SAP Note 510007 Setting up SSL on AS ABAP and 2445947 - [WEBINAR] SSL setup on NW Application Server for ABAP.
  • SAP HANA2502174 - HANA Basic How-To Series - Securing HANA XS classic via SSL / HTTPS - using Web Dispatcher Administration and PSE container.

Browser Security settings: Certificates

Note:

The certificate installed on the server (back-end) system is not trusted in the browser (message: This page is not secure (broken HTTPS)).

  1. You can verify the certificate if you open the Developer Tools in Chrome: Menu >> More Tools >> Developer Tools (Windows: F12, Ctrl + Shift + I   Mac OS: Cmd + Opt + I).
  2. Once Chrome Developer Tools is opened, click the Security tab.
  3. Click the View certificate button, and observe that the Certificate / certification authority (CA) is not trusted:

    Certificate.png
  4. Install the CA Root certificate authority that signed the certificate by following the below steps:
    1. Download Root certificate.
    2. Browse to https://<certification authority host>/ip/certsrv.
    3. Click "Download a CA Certificate, Certificate Chain, or CRL".
    4. Click "Download CA Certificate".
  5. Load Root Certificate into your Windows browser machine:
    1. Open the Certificates MMC snap-in for a user, computer, or service (run certlm.msc).
    2. In the console tree, click the "Trusted Root Certification Authorities" Store.
    3. From the "Action" menu select "All Tasks > Import..." to start the Certificate Import Wizard.
    4. Select "Local Machine" Store Location and click "Next".
    5. Type the file name containing the certificate to be imported. (You can also click Browse and navigate to the file).
    6. Click "Next".
    7. Select "Place all certificates in the following store".
      • Trusted Root Certification Authorities.
    1. Click "Next".
    2. Click "Finish".

For further details consult with the IT administrator who signed the certificate to install it in your computer.

YourCompanyRootCertificate.png

Note:

See Also

Your feedback is important to help us improve our knowledge base.
Please rate how useful you found this article by using the star rating feature at the beginning of this article.
Thank you.

Keywords

EPM, SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning,Cloud for Planning, EPM-ODS, Cloud for Analytics, C4P, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, HCP, C4A, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJ, BOBJcloud, BOCloud., BICloud, BO Cloud, connecting, conecting, conectando, conexão, modelo, SBOC, SAC, popup, popups, pop-up, self-signed, no es seguro, backend, SAC over SAP Universe, bw, bw4, bw4/hana, dw4core, bw4hana, self-signed, selfsigned , KBA , analytic model creation, url showing not , not secure , LOD-ANA , SAP Analytics Cloud , LOD-ANA-BI , SAP Analytics Cloud - Business Intelligence (BOC) , LOD-ANA-BR , SAP Analytics Cloud - Digital Boardroom , LOD-ANA-PL , SAP Analytics Cloud – Planning (BOC) , LOD-ANA-PR , SAP Analytics Cloud – Predictive (BOC) , Problem

Product

SAP Analytics Cloud 1.0