Register Login

'No certificate found' error for Fiori client on Android device

Updated May 18, 2018

Hello SAP Experts,

When starting the Fiori Client Application on my Android device a dialog box is popping up with a text 'No certificates found'.

Please follow the steps below in order to regenerate this issue:

  • First, on your Android device install SAP Fiori client
  • Now configure the SAP Fiori backend server in order to give a challenge to X.509
  • Now start the Fiori client application on your Android device 
  • Then please type the URL of the Fiori Server Launchpad
  • You will notice that the popup dialog is shown by Fiori client asking for a certificate.

Please help me to resolve this issue.


Comments

  • 29 Aug 2017 3:56 pm Chandan Singh Parihar Helpful Answer

    1) The dialog box poping up is not a warning dialog it is a featue to handle x509 challenges

    2) If your server gives an x509 challenge and AuthProxy, Kapsel plug-in intercept the requests then the AuthProxy will first try to get a certificate from the Logon plugin.

    3) Now if it can't get the ertificate from the Logon plugin then it try to get a certificate from the Android system keychain and this results into the dialog you are getting as it need yout permission to get the system certificate.

     

  • 29 Aug 2017 4:00 pm Sugandh Helpful Answer

    This issue can be resolved by three methods:

    1) Fiori Client Solution:

    • Cancel that dialog box which implies that the request will not have a client certificate
    • Now after that, the server will fall back to the basic authentication that is your user id and password

    Note: The request might fail or pass depending on how the server is set up  (in your case it doesn’t fail, it just redirects to the login page). If the login page is how the users are expected to use the application, then it should be possible to configure the server to not give the x509 challenge (and so get rid of the dialog)

    • Re-launch Fiori Client and certificate popup no longer occurs

    2) Gateway Solution:

    • Gateway system should be configured in such a way that it does not give the X.509 challenge.
    • In order to do that please set the profile parameter "icm/HTTPS/verify_client" to 0 On Gateway and then reboot Gateway System.
    • No re-launch the Fiori Client Application and you will that the certificate popup will not occur anymore.

    Installing Certificate:

    Please ensure that on your Android device you install Root CA certificate and Intermediate certificate of the server you wish to access. Fiori client will throw the above error if the Root CA and Intermediate are not installed on the device


     


×