How To Fix HRPAYBR_EFD_MSGS001 - The string root must belong to the Brazilian root certificate authority

HRPAYBR_EFD_MSGS001 - Overview

• Message type: E = Error

• Message class: HRPAYBR_EFD_MSGS - Message class for eSocial processing errors

• Message number: 001

• Message text: The string root must belong to the Brazilian root certificate authority

What causes this issue?

The certificate that you integrated in the system does not correspond to
the standard ICP Brazil (Brazilian Public Keys Infrastructure).

System Response

Rejection of batch or event.

How to fix this error?

Integrate a new certificate corresponding to the standard ICP Brazil.
Follow the steps described in the document <LS>Digital Certificates: How
to configure the digital certificates to sign eSocial events XML files
and the connection to restricted production environment</>, attached to
the SAP Note 2514483.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message HRPAYBR_EFD_MSGS001 - The string root must belong to the Brazilian root certificate authority ?

  The SAP error message HRPAYBR_EFD_MSGS001 indicates that there is an issue with the digital certificate being used in the Brazilian payroll processing system. Specifically, the error states that "The string root must belong to the Brazilian root certificate authority." This typically occurs when the system is unable to validate the digital certificate against the expected Brazilian root certificate authority (CA).
  
  Cause:
  
  Invalid Certificate: The digital certificate being used may not be issued by a recognized Brazilian root CA.
  Expired Certificate: The certificate may have expired, making it invalid for use.
  Incorrect Configuration: The system may not be configured correctly to recognize the Brazilian root CA.
  Missing Root CA: The root CA certificate may not be installed or configured in the system.
  
  
  Solution:
  
  
  Check the Certificate:
  
  Verify that the digital certificate being used is indeed issued by a recognized Brazilian root CA.
  Ensure that the certificate is not expired.
  
  
  
  Install the Correct Root CA:
  
  If the root CA certificate is missing, obtain