SAP Fiori Client on Mobile gives a certificate error

[Former Member]

Hi ,

When i try to open the SAP Fiori  Client App on my android mobile it gives a Certificate Error as seen in the below screenshot. To use the app I connect to the VPN so that the app is connected to the appopriate server.My android version is 4.2.2.

What may be the possible solution to the issue being faced?

Thanks and Regards,

Benita

[Former Member]

Hi guys, i'm think about Single Sign-On (SSO) don't work with Fiori Client?

Thanks,

[former_member194367]

Guys we are talking about different things -

1. Private SSL certificates - I think private CA is still not supported by Fiori client. So you need to use a public CA provided certificate in reverse proxy/GW ( depending on where SSL termination take place). Yugesh has provided a how to.

2. User login certificate (X.509) - The problem mentioned by Raj Kishore looks like a user certificate error. Can you check if there is a certificate installed in User section of the 'Trusted Credential'?

[rajkishor10]

Hi Masa,

While we are going to access the SAP FIORI apps through Android we are getting the below certificate issue,

Can you please suggest us to move forward.

Thanks in Advance.

Raj kishor.

[masa_139]

Hi Raj,

I think you have not installed any certificate. Please double check.

Security Configuration

Please also find the description in the help.

"the SAP Fiori Client does not operate in an environment where a self-signed SSL certificate is used to configure the Fiori server."

Regards,

Masa / SAP Technology RIG

[JohnnyKeogh]

Hi Masa,

Will the certificate security configuration for Fiori client ensure the user does not have to insert username and password on app launch logon ?

Thank you

Johnny

[Former Member]

Hello Jonathan,

We do faced the same issue early when exploring fiori initially.

For HTTPS, SSL is required as it should ensure the certificate is approved by a CA.

Simple solution is request for certificate in SAP system and it will generate a csr, you can send this csr to any 3rd party CA and they will generate a Certificate with you can upload it in your server.

Then fiori client will not stop you for certificate.

btw, you need to provide username password to login to fiori even you have certificate generated.

Thanks,

Yugesh

[masa_139]

Hi Johnny,

It is server certificate for https communication.

Regards,

Masa / SAP P&I Technology RIG

[Former Member]

Hi guys, i believe that we haven't solution for this problem, so in this case would be interest create an incident for SAP?

Regards,

[former_member123006]

Refer below thread to solve.

[former_member194367]

Hi,

The methods mentioned in the other thread is not a solution, at best a workaround. It stops the automatic redirect from port 80 to 443 or stop forcing SSL for the authentication page, which is a bad idea. No network admin will allow that.

The problem you are facing is most probably due to self signed certificate used in the GW server for SSL purpose. SAP Fiori Client does not support self-signed certificate.

Please ask the admin to use a certificate from a public CA which should solve the problem.

Cheers,

Subhra

[former_member182645]

i tried method suggested by gopi. but still i am getting same error.

also i use reverse proxy.

my fiori url is HTTP

and for Apache reverse i gave self signed certificate.

so for witch server i will need certificate gateway fiori server or apache server.

[Former Member]

@Masayuki Sekihara : Please can you guide as to how do i solve the above issue?

Thanks and Regards,

Benita

[masa_139]

Hi Benita,

Please double check that you have configured https on Gateway server.

The error message says about server certificate.

Regards, Masa

SAP Customer Experience Group - CEG

[Former Member]

Hi Masa,

Thanks for the prompt reply!

Where can i check these configurations on gateway server?

Thanks and Regards,

Benita

[masa_139]

Hi Benita,

Your network admin or system admin can help you. They know how to get server certificate and how to import.

Regards, Masa

SAP Customer Experience Group - CEG

[Former Member]

Hi Masayuki,

Thanks Masayuki!!

I can access the Fiori launchpad on browser.However when i configure the same URL on SAP Fiori Client App on Android it gives me the certificate error.

Thanks and Regards,

Benita

[masa_139]

Hi Benita,

Please share how do you connect to the server from browser.

+ http

+ https

+ https and ignore warning

Regards, Masa

SAP Customer Experience Group - CEG

[Former Member]

Hi Masayuki,

I connect to the server from browser using Https link and ignore the warning.

Thanks and Regards,

Benita

[masa_139]

Hi Benita,

It means https is not setup correctly.

The error message "Please contact the server administrator" is correct. Please follow the error message.

Regards, Masa

SAP Customer Experience Group - CEG

[Former Member]

Hi Masayuki,

As per the settings of Https I am able to see the following setting as seen in the below screenshot:

Is there something which is missing?

Thanks and Regards,

Benita

[masa_139]

Hi Benita,

It is not server port issue. Only your system/network admin knows how to get certificate.

Regards, Masa

SAP Customer Experience Group - CEG

[former_member123006]

Hi Masa,

Is there any workaround solution for practice and Demo? I have created self sign certificate and installed in phone via iphone configuration utility, but Fiori Client still showing error.

Appreciate your help.

Cheers,

Gopi.