HANA Cloud Connector Certificate : HTTPS Confustion

[Former Member]

Dear,

With help of SAP online documentation was able to perform below steps in one my servers to install Hana Cloud Connector sapcc-2.10.1-windows-x64

https://help.sap.com/viewer/cca91383641e40ffbe03bdc78f00f681/Cloud/en-US/e6c7616abb5710148cfcf3e75d9...

1.) Install the Cloud Connector

2.) Initial Configuration

3.) Initial Configuration (HTTP)

HTTP Connection is working fine to backend ERP system.

Now as next step want to create HTTPS connectivity so that below test should be working.

a.) From Cloud Connector to ERP backend HTTPS with certificate

b.) From SAP Cloud Platform to ERP backend system on premise with certificate.

To achieve I need to perform below , please correct steps and provide information in sequence if any missed or not done in correct way.

a.) I need to generated certificate from on-premise ERP system.

b.) Generate root/CA certificate

c.) Share the certificate to SAP Cloud ops team to get signed certificate.

d.) Import the certificate into Cloud Connector and SAP Cloud Platform

e.) Test HTTPS connection.

So much confusion and not clear on https connectivity

Regards

KSK

[Former Member]

Dear Morten,

Thank you, as per your information , the connectivity with trust certificate is between Cloud Connector and On premise.

I have gone through many blogs and videos on cloud connector configurtion & did below

a.) Certificate generated in ERP system (on premise) in STRUST which SSL Server Standard

b.) Signed certificate generated at DigiCert now i have Root/CA certificate

c.) Imported certificate to cloud connector.

d.) Converting root certificate to .jks

e.) Uploading to Keystore in Cloud Connector.

Have i missed or performed any steps wrong. After reading so many blogs its driving crazy, even i have involved my 2 of other colleagues.

But no luck...still struggling to configure.

Can i get help in defining steps and also information of cert formats on which step which format to be used to rule out any confusion.

Regards

KSK

[MortenWittrock]

Hi KSK

You don't need to import any certificates into the Cloud Platform subaccount; there is no TLS connection between Cloud Platform and your on-premise ERP system.

All communication between SAP Cloud Platform and Cloud Connector goes through the TLS tunnel, which is established when Cloud Connector connects to your subaccount. In other words, it is already encrypted.

Regards,

Morten

[former_member95328]

Hi,

The following blog posts clarify the requirements for inbound and out bound connection with SAP Cloud Platform:

1. Cloud Integration – How to Setup Secure HTTP Inbound Connection with Client Certificates

https://blogs.sap.com/2017/06/05/cloud-integration-how-to-setup-secure-http-inbound-connection-with-...

2. Cloud Integration – How to Setup Secure Outbound HTTP Connection using Keystore Monitor

https://blogs.sap.com/2017/06/19/cloud-integration-how-to-setup-secure-outbound-http-connection-usin...

I hope you find them useful.

Kind Regards,

Andy