Skip to Content

SSO 2.0 with spnego + SNC client (sbus) - Error : A2210220 Own certificate expired.

Jan 16, 2017 at 12:37 PM


avatar image
Former Member


i have recently installed a new infipendant SSO server (2.0) using SPNEGO for windows domain authentication via x.509 certificates. my server environment is AIX 7.1 and end user environment is windows 7.

The SSO server has all the servers registered successfully under certificate management.

1) fid

2) fiq

3) fip

i have exported their PSEs and the same have been imported into the abap servers respectively.

upon enabling the SNC connction from the sap GUI, 2 server (fid & fiq) are able to connect seamlessly but fip throws an error

GSS-API(maj): Miscellaneous failure

GSS-API(min): A2210220: Own certificate is expired

target="p:CN=fip, OU=XXX:

i have reregistered this server twice in cert management and imported the PSEs again everytime without any error apparently but still im gettingt he same "own certificate is expired" error.

how do i trace & fix this

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Best Answer
avatar image
Former Member Jan 17, 2017 at 02:03 PM

found out what the issue was.

the timezone on OS of the abap server was different than the SSO server. corrected that and the system logged in perfectly.

10 |10000 characters needed characters left characters exceeded