How To Fix HRPAYBR_EFD_MSGS001 - The string root must belong to the Brazilian root certificate authority

SAP Error Message - Details

• Message type: E = Error

• Message class: HRPAYBR_EFD_MSGS - Message class for eSocial processing errors

• Message number: 001

• Message text: The string root must belong to the Brazilian root certificate authority

What causes this issue?

The certificate that you integrated in the system does not correspond to
the standard ICP Brazil (Brazilian Public Keys Infrastructure).

System Response

Rejection of batch or event.

How to fix this error?

Integrate a new certificate corresponding to the standard ICP Brazil.
Follow the steps described in the document <LS>Digital Certificates: How
to configure the digital certificates to sign eSocial events XML files
and the connection to restricted production environment</>, attached to
the SAP Note 2514483.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message HRPAYBR_EFD_MSGS001 - The string root must belong to the Brazilian root certificate authority ?

  The SAP error message HRPAYBR_EFD_MSGS001 indicates that there is an issue with the digital certificate being used in the Brazilian payroll processing system. Specifically, the error states that "The string root must belong to the Brazilian root certificate authority." This typically occurs when the system is unable to validate the digital certificate against the expected Brazilian root certificate authority (CA).
  Cause:
  
  Invalid Certificate: The digital certificate being used may not be issued by a recognized Brazilian root CA.
  Expired Certificate: The certificate may have expired, making it invalid for use.
  Incorrect Configuration: The system may not be configured correctly to recognize the Brazilian root CA.
  Missing Root CA: The root CA certificate may not be installed or configured in the system.
  
  Solution:
  
  
  Check the Certificate:
  
  Verify that the digital certificate being used is indeed issued by a recognized Brazilian root CA.
  Ensure that the certificate is not expired.
  
  
  
  Install the Correct Root CA:
  
  If the root CA certificate is missing, obtain the correct Brazilian root CA certificate and install it in the system.
  You can usually find the necessary root CA certificates from the official Brazilian government or financial regulatory websites.
  
  
  
  Update Configuration:
  
  Ensure that the SAP system is configured to trust the Brazilian root CA. This may involve updating the trust store or configuration settings in the SAP system.
  
  
  
  Test the Certificate:
  
  After making the necessary changes, test the certificate to ensure that it is recognized and validated correctly by the system.
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation or support resources for specific instructions on managing digital certificates in the context of Brazilian payroll.
  
  
  
  Contact Support:
  
  If the issue persists after following the above steps, consider reaching out to SAP support or your system administrator for further assistance.
  
  
  
  Related Information:
  
  Digital Certificates: These are used to secure communications and verify identities in electronic transactions. In Brazil, specific certificates are required for payroll and tax reporting.
  Brazilian Tax Compliance: Ensure that your SAP system is compliant with Brazilian tax regulations, as this can affect payroll processing and reporting.
  SAP Notes: Check for any relevant SAP Notes that may address this specific error or provide updates related to Brazilian payroll processing.
  
  By following these steps, you should be able to resolve the HRPAYBR_EFD_MSGS001 error and ensure that your SAP system is properly configured for Brazilian payroll processing.