Public Certificate Downloads

In order for the SAP Ariba Applications and Ariba Network to accept connections from system interfaces (APIs, integrations and single sign-on (SSO)), you may need to import certificate(s).  Periodically, SAP Ariba updates these certificates.

Notifications

Customers will receive a notification 60 days in advance of the scheduled update date from SAP Ariba to inform them of upcoming certificate updates for impacted URLs.  The customers will receive a subsequent notification 30 days in advance of the certificate update to inform them that the new certificates are available for download.  Customers will receive a notification 5 days in advance of the scheduled update date as a reminder.  On the day of the certificate updates, Buyers will receive notifications to inform them that the certificate update has started and that the certificate update has been completed.  Suppliers will receive only the notification that the certificate update has been completed.  To receive these notifications:

• If you are a Buyer Customer and a Designated Support Contact, ensure that you are subscribed to the Maintenance subscription option.
• If you are a Supplier Customer, ensure you have a Network Service subscription

Please note: Depending on the certificate update, you may receive more than one notification depending on the URLs that are included in the certificate update.  You may receive separate notifications if there are specific URLs that impact SAP Ariba Buying and Sourcing Solutions and if there are specific URLs that impact the Ariba Network.

Cloud Integration Gateway (CIG) is renamed as SAP Integration Suite, managed gateway for spend management and SAP Business Network, and is commonly referred to as Managed Gateway.

* Renewals of managed gateway server certificates ending with cloud.sap or sapcloud.cn will not be proactively communicated to customers.To ensure uninterrupted connectivity, we recommend trusting the root and intermediate certificates, which will prevent disruptions caused by routine leaf certificate renewals. However, any changes to client certificates or updates to root and intermediate Certificate Authorities (CAs) will be notified in advance.

Commonly Asked Questions:

• Impact Questions
• Certificate Update Process Questions
• Installing Certificates for Integrations
• Installing Certificates for Single Sign-On
• Installing Certificates for APIs
• General Certificate/ Security FAQ
• Certificate Repository – a complete listing of all current URLs and their certificates by data center

DigiCert G2 and G3 Upgrade: The RSA and ECC certificates updated by SAP Ariba and SAP Business Network will be supported by DigiCert’s G2 & G3 root and intermediate CA certificates. Even if your integration only uses the RSA cert, both the G2 and G3 root certs should be added to the trust store.

SAP provides the full certificate chain (root, intermediate and leaf/client) certificates of G2/G3 in all certificate files. While installing the full certificate chain would suffice in almost all cases, customers are requested to review DigiCert's guidelines to ensure compliance specific to your system landscape. Details on DigiCert G2 and G3 upgrade has been communicated via multiple notifications, relevant information in DigiCert root and intermediate CA certificate updates

Next Scheduled Certificate Update Information