SAP Ariba certificate expiration, October 2024

Overview

SAP Ariba is replacing the web server certificates for servers that are scheduled to expire on Saturday, Oct. 26. 

Details

The existing web certificates for the following URLs will be expiring. To ensure continued access to SAP Ariba Applications, SAP Ariba will be replacing the following expiring certificates on Saturday, October 26th, 2024 from 5:00pm to 9:00pm PDT:

WHAT IS CHANGING?             

SAP Ariba is replacing the web server certificates for servers with the host names specified in this notice (see list above). Note: If you do not use integrations, and/or Single Sign-On (SSO), or use URLs that are not specified in this notification for this functionality, you will not be impacted by this certificate update.               

CALL TO ACTION:        

• Customers should review their current configurations for integrations, APIs, or Single Sign-On (SSO) with their IT department to determine if they are impacted by the change.
• You will receive a reminder notice when the new certificate(s) are available for download. Note: Do not remove or replace the existing certificate(s) with the new ones until the certificate update process is complete on the date and time specified in this notification.
• After the certificate update process has been completed on above mentioned date and time, you will need to import the new certificate(s) and replace the existing certificate to ensure connectivity to SAP Ariba is maintained for the following:                
  • Connection to SAP Ariba via integrations (web services, file channel, APIs, etc.)
  • Connection to SAP Ariba via Single Sign-On
  • Punchout Connection using the specified URLs
  • Legacy EDI Suppliers using the specified URLs            
• For frequently asked questions regarding impact and certificate installation process, please refer to the “Commonly Asked Questions” section of the Certificate Update Calendar.              

Frequently Asked Questions     

• When can I download the new certificate(s)?
  • ​​​​​​​Certificates are now avilable for download here.
• Can the downloaded new certificate(s) be imported right away?
  • Some customers may have the ability to import multiple certificates into the keystore along with the existing certificate(s) before the certificate update is made. Please ensure to keep the current certificate(s) in the keystore until after the certificate update has been completed. Removing or replacing the existing signing/authentication certificate(s) before SAP Ariba makes the certificate changes will break the integration. SAP Ariba will only perform the certificate replacement on the date and time specified in this notice.             

IMPORTANT – DigiCert G2 and G3 Upgrade:

The RSA and ECC certificates updated by SAP Ariba and SAP Business Network will be supported by DigiCert’s G2 & G3 root and intermediate CA certificates. Even if your integration only uses the RSA cert, both the G2 and G3 root certs should be added to the trust store.      

SAP provides the full certificate chain (root, intermediate and leaf/client) certificates of G2/G3 in all certificate files. While installing the full certificate chain would suffice in almost all cases, customers are requested to review DigiCert's guidelines to ensure compliance specific to your system landscape. Details on DigiCert G2 and G3 upgrade has been communicated via multiple notifications with the latest notification titled “UPDATE - DigiCert root and intermediate CA certificate update”.              

If you have questions or concerns regarding this certificate update, please contact Technical Support – Procurement using the SAP Ariba Help Center.                                   * 

* Important: This notice reflects SAP Ariba planning as of the date this article was created. 
 

Still need help?  Click the 'Purdue IT Request' button to start a ticket.