Issue with Workload Automation Agent using SAP Cloud ERP Plugin Extension for SAP IBP jobs

Products

• Workload Automation Agent
• Autosys Workload Automation
• ESP dSeries Workload Automation
• ESP dSeries Workload Automation - Business Agents (dSeries)
• ESP dSeries Workload Automation - Scheduler (dSeries)
• ESP dSeries Workload Automation - System Agent (dSeries)
• ESP Workload Automation

Issue/Introduction

Users reported production critical jobs are failing with exit 1 as of this morning, while reviewing the spool logs, we see this exception;

Failed to access the WSDL at: https://hcids.us3.hana.ondemand.com/DSoD/webservices?wsdl. It failed with: 
@com.ibm.jsse2.util.h: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target.

Caused by: javax.xml.ws.WebServiceException: Failed to access the WSDL at: https://hcids.us3.hana.ondemand.com/DSoD/webservices?wsdl. It failed with: 
@com.ibm.jsse2.util.h: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target.

Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target

Caused by: com.ibm.jsse2.util.h: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target

Caused by: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target

Environment

Workload Automation Agent

Cause

SAP Cloud Integration for data services root certificate switching to "DigiCert TLS RSA4096 Root G5". As a result, the root certificate is missing from the Agent's Java truststore.

3619753 - SAP Cloud Integration for data services root certificate switching to "DigiCertTLS RSA4096 Root G5" from "DigiCert Global Root G2"

Resolution

Import the SAP root certificate to the Agent’s Java truststore.

Additional Information

3619753 - SAP Cloud Integration for data services root certificate switching to "DigiCert TLS RSA4096 Root G5" from "DigiCert Global Root G2"