1751736 - After HANA SP4 installation SUM can't connect to UI

Symptom

After HANA SP4 installation SUM cannot connect to the UI.

Other Terms

SUM for SAP HANA

Reason and Prerequisites

This note should be applied only if all prerequisites exist:
1. Your HANA SP4 installation DVD is taken between 14.05.2012 and 06.06.2012.
2. The following file exists: /usr/sap/<SID>/SUM/jvm/jre/lib/security/jssecacerts.
3. SUM cannot connect to UI and in lmtp.log there is the following error:
com.sap.lm.lmtp.selfupdate.VersionLoadException:
com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport
error: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
at com.sap.lm.lmtp.selfupdate.impl.SelfUpdateImpl.checkSmpConnection(S
elfUpdateImpl.java:144)
at com.sap.lm.hana.validation.UpdateDataValidatorImpl.checkSMPCredenti
als(UpdateDataValidatorImpl.java:231)
at com.sap.lm.hana.web.servlet.CheckUpdateDataServlet.processRequest(C
heckUpdateDataServlet.java:54)
at com.sap.lm.hana.web.servlet.LCMUpdateServlet.processRequestInternal
(LCMUpdateServlet.java:94)
at com.sap.lm.hana.web.servlet.LCMUpdateServlet.doPost(LCMUpdateServle
t.java:106)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at sun.reflect.GeneratedMethodAccessor43.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcc
essorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)

Solution

HANA SP4 DVD was re-delivered on 06.06.2012 with release number 51043469. All DVD releases with this or higher number contain the fix and workaround is not required.

How to solve the issue:

If you are sure that all prerequisites exist, execute the following steps:

1. Stop the SUM and the HANA Studio.
2. As <sid>adm user execute the following commands:

>cd /usr/sap/<SID>/SUM/jvm/jre/lib/security

>../../bin/keytool -exportcert -keystore jssecacerts -alias saphostagent -file test.cer

>../../bin/keytool -importcert -keystore cacerts -alias saphostagent -trustcacerts -file test.cer

>mv jssecacerts backup_jssecacerts

Header Data

Released On	17.08.2012 14:04:20
Release Status	Released for Customer
Component	HAN-LM-PLT SAP HANA Platform Lifecycle Management
Priority	Recommendations / Additional Info
Category	Installation information