Skip to Content

HANA Cloud Connector Certificate : HTTPS Confustion

Jan 31 at 10:17 AM


avatar image


With help of SAP online documentation was able to perform below steps in one my servers to install Hana Cloud Connector sapcc-2.10.1-windows-x64

1.) Install the Cloud Connector

2.) Initial Configuration

3.) Initial Configuration (HTTP)

HTTP Connection is working fine to backend ERP system.

Now as next step want to create HTTPS connectivity so that below test should be working.

a.) From Cloud Connector to ERP backend HTTPS with certificate

b.) From SAP Cloud Platform to ERP backend system on premise with certificate.

To achieve I need to perform below , please correct steps and provide information in sequence if any missed or not done in correct way.

a.) I need to generated certificate from on-premise ERP system.

b.) Generate root/CA certificate

c.) Share the certificate to SAP Cloud ops team to get signed certificate.

d.) Import the certificate into Cloud Connector and SAP Cloud Platform

e.) Test HTTPS connection.

So much confusion and not clear on https connectivity



10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

3 Answers

Andrew Evans
Jan 31 at 11:04 AM


The following blog posts clarify the requirements for inbound and out bound connection with SAP Cloud Platform:

1. Cloud Integration – How to Setup Secure HTTP Inbound Connection with Client Certificates

2. Cloud Integration – How to Setup Secure Outbound HTTP Connection using Keystore Monitor

I hope you find them useful.

Kind Regards,


10 |10000 characters needed characters left characters exceeded
Morten Wittrock Jan 31 at 02:22 PM


You don't need to import any certificates into the Cloud Platform subaccount; there is no TLS connection between Cloud Platform and your on-premise ERP system.

All communication between SAP Cloud Platform and Cloud Connector goes through the TLS tunnel, which is established when Cloud Connector connects to your subaccount. In other words, it is already encrypted.



10 |10000 characters needed characters left characters exceeded
scnblog ksk Feb 06 at 08:55 PM

Dear Morten,

Thank you, as per your information , the connectivity with trust certificate is between Cloud Connector and On premise.

I have gone through many blogs and videos on cloud connector configurtion & did below

a.) Certificate generated in ERP system (on premise) in STRUST which SSL Server Standard

b.) Signed certificate generated at DigiCert now i have Root/CA certificate

c.) Imported certificate to cloud connector.

d.) Converting root certificate to .jks

e.) Uploading to Keystore in Cloud Connector.

Have i missed or performed any steps wrong. After reading so many blogs its driving crazy, even i have involved my 2 of other colleagues.

But no luck...still struggling to configure.

Can i get help in defining steps and also information of cert formats on which step which format to be used to rule out any confusion.



10 |10000 characters needed characters left characters exceeded