How To Fix SCLNT_HTTP420 - SSL Server Certificate has expired (ICM_HTTP_SSL_PEER_CERT_EXPIRED)

SAP Error Message - Details

• Message type: E = Error

• Message class: SCLNT_HTTP - Messages for HTTP Client for Respective Error Code

• Message number: 420

• Message text: SSL Server Certificate has expired (ICM_HTTP_SSL_PEER_CERT_EXPIRED)

What causes this issue?

The SSL certificate for the server has expired or is not yet valid.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

The problem can only be solved by the server administrator. A new SSL
certificate needs to be imported into the server.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SCLNT_HTTP420 - SSL Server Certificate has expired (ICM_HTTP_SSL_PEER_CERT_EXPIRED) ?

  The SAP error message SCLNT_HTTP420 with the description "SSL Server Certificate has expired (ICM_HTTP_SSL_PEER_CERT_EXPIRED)" indicates that the SSL certificate used by the server for secure communications has expired. This can prevent secure connections from being established, leading to issues with accessing SAP services over HTTPS.
  Cause:
  
  Expired SSL Certificate: The primary cause of this error is that the SSL certificate used by the server has reached its expiration date and is no longer valid.
  Incorrect System Time: If the system time on the server is incorrect, it may incorrectly interpret the certificate as expired.
  Certificate Chain Issues: Sometimes, the entire certificate chain may not be valid, which can also lead to similar errors.
  
  Solution:
  
  
  Renew the SSL Certificate:
  
  Obtain a new SSL certificate from a trusted Certificate Authority (CA).
  Install the new certificate on the server where the SAP system is running.
  Ensure that the new certificate is properly configured in the SAP system.
  
  
  
  Check System Time:
  
  Verify that the system time and timezone settings on the server are correct. If the time is incorrect, adjust it accordingly.
  
  
  
  Update Certificate Chain:
  
  If the SSL certificate is part of a chain, ensure that all intermediate certificates are also valid and installed correctly.
  
  
  
  Restart ICM:
  
  After updating the certificate, restart the Internet Communication Manager (ICM) to apply the changes. This can usually be done through transaction SMICM in the SAP GUI.
  
  
  
  Test the Connection:
  
  After renewing the certificate and restarting the ICM, test the connection to ensure that the error is resolved.
  
  
  
  Related Information:
  
  Monitoring SSL Certificates: Implement monitoring for SSL certificates to receive alerts before they expire. This can help prevent downtime due to expired certificates.
  Documentation: Refer to SAP documentation for specific instructions on managing SSL certificates in your version of SAP.
  Transaction Codes: Use transaction STRUST to manage SSL certificates in the SAP system.
  Logs: Check the ICM logs for additional details about the error. You can find logs in transaction SMICM under the "Trace" or "Log" options.
  
  By following these steps, you should be able to resolve the SSL certificate expiration issue and restore secure communications in your SAP environment.