Skip to content

Troubleshooting note on HANA root cert change #2429

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chgeo merged 2 commits into from
Mar 3, 2026
Merged

Troubleshooting note on HANA root cert change #2429

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ef3552f
Troubleshooting note on root cert change
chgeo Mar 3, 2026
2639ca8
Merge branch 'main' into hana-cert-note
chgeo Mar 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions get-started/get-help.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -449,6 +449,16 @@ On trial, your SAP HANA Cloud instance will be automatically stopped overnight,
| _Root Cause_ | An error like `Version incompatibility for the ... build plugin: "2.0.x" (installed) is incompatible with "2.0.y" (requested)` indicates that your project demands a higher version of SAP HANA than what is available in your org/space on SAP BTP, Cloud Foundry environment. The error might not occur on other landscapes for the same project. |
| _Solution_ | Lower the version in file `db/src/.hdiconfig` to the one given in the error message. If you're the owner of the SAP HANA installation, ask for an upgrade of the SAP HANA instance. |

#### Deployment fails - _unable to get local issuer certificate_ {#root-cert-change}
+ _Could not connect to any host... - unable to get local issuer certificate_
+ MTX sidecar crashes with HTTP error _429 (Too Many Requests)_

| | Explanation |
|--------------|--------------------------------|
| _Root Cause_ | A change of SAP's root certificate from _DigiCert Global Root CA_ to _DigiCert TLS RSA4096 Root G5_ leads to deployment failures because older certificates get rejected by too old SAP HANA driver versions and/or older service bindings in SAP HANA Cloud. |
| _Solution_ | For Node.js applications, update the `hdb` driver to the latest version. [See SAP note 3397584](https://me.sap.com/notes/3397584) for details. See the [SAP HANA blog post](https://community.sap.com/t5/technology-blog-posts-by-sap/action-required-update-your-certificate-trust-stores-for-enhanced-sap-hana/ba-p/14332703) for the broader context. |


#### Deployment fails — _Cannot create certificate store_ {#cannot-create-certificate-store}

| | Explanation |
Expand Down