How To Fix HRPAYBR_EFD_MSGS000 - The certification string creation up to its root must be trusted.

SAP Error Message - Details

• Message type: E = Error

• Message class: HRPAYBR_EFD_MSGS - Message class for eSocial processing errors

• Message number: 000

• Message text: The certification string creation up to its root must be trusted.

What causes this issue?

There are inconsistencies in the certification chain creation.

System Response

Rejection of batch or event.

How to fix this error?

Review whether the whole certification chain is integrated correctly in
the system according to the document <LS>Digital Certificates: How to
configure the digital certificates to sign eSocial events XML files and
the connection to restricted production environment</>, attached to the
SAP Note 2514483.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message HRPAYBR_EFD_MSGS000 - The certification string creation up to its root must be trusted. ?

  The SAP error message HRPAYBR_EFD_MSGS000 typically relates to issues with the certification string in the context of Brazilian payroll processing. This error indicates that the certification string creation process is not trusted, which can occur due to various reasons, such as configuration issues, missing certificates, or problems with the digital signature.
  Causes:
  
  Missing or Invalid Certificates: The system may not have the required digital certificates installed or they may be invalid.
  Configuration Issues: The configuration settings for the digital signature or certification string may not be set up correctly.
  Trust Relationship: The trust relationship between the SAP system and the certificate authority (CA) may not be established properly.
  Expired Certificates: The certificates used for signing may have expired.
  Incorrect System Time: If the system time is incorrect, it can lead to issues with certificate validation.
  
  Solutions:
  
  
  Check Certificates:
  
  Ensure that the required digital certificates are installed in the SAP system.
  Verify that the certificates are valid and not expired.
  
  
  
  Review Configuration:
  
  Check the configuration settings related to digital signatures and certification strings in the SAP system.
  Ensure that the settings align with the requirements for Brazilian payroll processing.
  
  
  
  Establish Trust:
  
  Make sure that the trust relationship with the certificate authority is properly established.
  Import the root and intermediate certificates into the SAP system if necessary.
  
  
  
  Update Certificates:
  
  If certificates are expired, obtain new certificates from the certificate authority and install them in the system.
  
  
  
  Check System Time:
  
  Verify that the system time is accurate and synchronized with a reliable time source.
  
  
  
  Consult Documentation:
  
  Refer to SAP Notes and documentation related to Brazilian payroll and digital signatures for specific guidance on resolving this error.
  
  
  
  Related Information:
  
  SAP Notes: Check for relevant SAP Notes that may provide additional insights or patches related to this error.
  SAP Community: Engage with the SAP Community forums to see if other users have encountered similar issues and what solutions they found effective.
  Support: If the issue persists, consider reaching out to SAP Support for assistance, providing them with detailed information about the error and the steps you have already taken.
  
  By addressing the above points, you should be able to resolve the error message HRPAYBR_EFD_MSGS000 and ensure that the certification string creation process is trusted.