How To Fix 00786 - This certificate has explicitly not been authorized for logon

SAP Error Message - Details

• Message type: E = Error

• Message class: 00 -

• Message number: 786

• Message text: This certificate has explicitly not been authorized for logon

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message 00786 - This certificate has explicitly not been authorized for logon ?

  The SAP error message "00786 This certificate has explicitly not been authorized for logon" typically occurs in scenarios where a user is attempting to log on to an SAP system using a digital certificate that has not been authorized for that purpose. This can happen in environments where Secure Network Communications (SNC) is used, and the system is configured to require specific certificates for authentication.
  Cause:
  
  Certificate Not Authorized: The certificate being used for the logon is not included in the list of authorized certificates in the SAP system.
  Configuration Issues: There may be misconfigurations in the SNC settings or the trust relationship between the client and the SAP server.
  Expired or Invalid Certificate: The certificate may have expired or is otherwise invalid.
  User Profile Settings: The user profile may not be set up to allow logon with the specified certificate.
  
  Solution:
  
  
  Check Certificate Authorization:
  
  Ensure that the certificate being used is properly authorized in the SAP system. This can be done by checking the SNC configuration in transaction STRUST (Trust Manager).
  Navigate to the "PSE" (Personal Security Environment) and verify that the certificate is listed and marked as authorized.
  
  
  
  Update User Profile:
  
  Ensure that the user profile is configured to allow logon with the specified certificate. This can be checked in transaction SU01 (User Maintenance) under the "Logon Data" tab.
  
  
  
  Certificate Validity:
  
  Check the validity of the certificate. If it has expired, you will need to renew it or replace it with a valid certificate.
  
  
  
  SNC Configuration:
  
  Review the SNC configuration settings in the SAP system. Ensure that the SNC parameters are correctly set in the instance profile (e.g., snc/enable, snc/identity/as, snc/identity/accept, etc.).
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation or notes related to SNC and certificate management for specific guidance on configuration and troubleshooting.
  
  
  
  Contact Security Administrator:
  
  If you do not have the necessary permissions to make changes, contact your SAP security administrator or the team responsible for managing certificates and SNC settings.
  
  
  
  Related Information:
  
  SNC Overview: Secure Network Communications (SNC) is a security protocol that provides encryption and authentication for SAP systems.
  Transaction Codes:
  
  STRUST: Trust Manager for managing certificates and PSEs.
  SU01: User Maintenance for managing user profiles.
  
  
  SAP Notes: Check for relevant SAP Notes that may provide additional insights or updates related to this error message.
  
  By following these steps, you should be able to resolve the error and successfully log on to the SAP system using the appropriate certificate.