Server certificates for the domains of SAP Master Data Governance, cloud edition are issued by DigiCert. In order to comply with changes to the Mozilla Root Store Policy, DigiCert started issuing certificates under a new “DigiCert Global Root G2” certificate authority (CA). Due to this change, new or updated server certificates of SAP Master Data Governance, cloud edition will be issued by this new CA, and no longer by the current “DigiCert Global Root” CA. In addition, new or updated server certificates of other SAP services, for example, SAP BTP, will also be issued by this new CA. For example, the certificates of SAP BTP Cloud Foundry environment are planned to be switched by the end of Q4 2023.

More details about the DigiCert Global Root G2 CA, the background, and test possibilities can be found in this blog post of related changes in the SAP BTP Cloud Foundry environment.

Action is required to ensure that applications/services trust the new DigiCert Global Root G2 CA.

Inbound Connections

If you manage trust stores of client applications/services, which connect to your tenant of SAP Master Data Governance, cloud edition by yourself, then add the DigiCert Global Root G2 CA to these trust stores to ensure that your applications/services still can connect when the new server certificates are used. This also applies to connections to the API URLs that you can see the app Communication Arrangements.

Outbound Connections

For outbound connections please see the blog post SAP BTP ABAP Environment – New Root Certificate Authority.