How to Renew UI and System Certificate of the Cloud Connector ?

 There are multiple way to renew Cloud Connector UI and System Certificate. The Option i used multiple that is "Create and import a self-signed certificate" apart from this we can import certificate as shown in below snap.  

To do so from the left panel, choose Configuration. On the tab On Premise, choose System Certificate  Import a certificate to upload a certificate and provide its password: its simple and easy way to renew Cert. 

A second option is to start a certificate signing request procedure as described for the UI certificate in Exchange UI Certificates in the Administration UI and upload the resulting signed certificate.

If having intermediate certificates in place, make sure you import the complete chain (for example, as PKCS#7 file) so that mTLS connections always work properly.

You can verify this in the Certificate Chain area of the System Certificate section:

 

third option is to generate a self-signed certificate. It might be useful if no CA is needed, for example, in a demo setup or if you want to use a dedicated CA. For this option, choose Create and import a self-signed certificate:

If a system certificate has been imported successfully, its distinguished name, the name of the issuer, and the validity dates are displayed:

Regards 

Rupesh Shankar Chavan

Alert of type [Subaccount Certificate] has been triggered by Cloud Connector

We may received the below error while requesting a Subaccount Certificate in Cloud Connector.

Error: 

An error occurred when trying to connect. See 'Log And Trace Files' and in particular ljs_trace.log for details. Associated entries were logged on or around 2024-06-26 14:35:18,160 +0000."

Resolution: 

The error message indicates that there was an issue connecting to the system, and it suggests checking the 'Log And Trace Files' for more details, specifically the ljs_trace.log file around the timestamp provided. Here are the steps to diagnose and resolve this issue:

Steps to Diagnose and Resolve the Connection Error

1. Check the Log Files

• Locate the Log Files: Find the ljs_trace.log file. This is typically located in the log directory of your SAP HANA installation.
• Review the Logs: Open the ljs_trace.log file and look for entries around 2024-06-26 14:35:18,160 +0000. This should give you more specific information about the error

2: User Name and Password / Authorization 

          Please ensure the username and password we are providing have sufficient rights. most of the time S-User ID password will work. 

3. Contact SAP Support

• Support Ticket: If the issue persists and you are unable to resolve it with the above steps, consider opening a support ticket with SAP for further assistance. Provide them with the log details and any other relevant information.