SCC Certificate Status Test

The SAP Cloud Connector is an application that creates a secure connection between an on-premises system and the SAP Business Technology Platform (SAP BTP). It allows SAP Cloud products to communicate securely with systems in a customer's on-premises/private cloud landscape. For connecting to on-premises system, a back-end system must be defined in SAP Cloud Connector by mapping the virtual system to internal system. SCC makes the use of certificates to securely connect to the systems. As a security measure, all certificates have a short lifespan and expire in few weeks. If the certificate expires, SCC may lose connectivity with corresponding system. That's the reason it is absolutely important to monitor the certificates for expiry date and inform administrator for the certificates which have already been expired or are soon expiring.

This test monitors the certificates and reports the key metrics like number of expired and expiring certificates, and details of which certificates are expiring. With these details administrators will always have a chance to replace the certificates before expiry date and keep the system running.

Target of the test : SAP Cloud Connector.

Agent deploying the test : An external/internal agent

Outputs of the test : One set of results for SAP Cloud Connector.

Configurable parameters for the test

Parameter

Description

Test period

How often should the test be executed.

Host

Specify the host for which the test is to be configured.

Port

Specify the port at which the specified host listens to. Default port is 8443.

SSL

By default, the SAP Cloud Connector is SSL-enabled. Accordingly, the SSL flag is set to Yes by default. This indicates that the eG agent will communicate with the SAP Cloud Connector via HTTPS by default.

Username

User ID should have login access, read applications, read spaces and read organization. So, create new User ID and set user role as Administrator or Monitoring. For details on user authentication and roles refer to How does eG Enterprise Monitor SAP Cloud Connector?

Password

The password of the specified user ID.

Confirm Password

Confirm the password by retyping it here.

DD Frequency

The DD FREQUENCY refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against this parameter.

Detailed Diagnoses

To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability
  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.
Measurements made by the test

Measurement

Description

Measurement Unit

Interpretation

Expired Certificates

Indicates the total number of certificates which have already expired and need to replaced.

Number

SCC would have lost access to the backend systems for which the certificates have already been expired.

Detailed Diagnoses will provide the details about certificates.

Expiring Certificates

Indicates the total number of certificates which are due to expire.

Number

SCC would soon lose the access to systems or which the certificates are due to expire soon, administrators need to replace the certificate immediately.

Detailed Diagnoses will provide the details about certificates.

Valid Certificates

Indicates the total number of certificates which are currently valid.

Number

SCC can access the backend system.