---
sourceDocument: Asset Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-asset-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Asset Management

ft:clusterId :

    - itam

bundleId :

    - itam

workflow :

    - Technology


---

# Establish a trusted HTTPS connection for SAP S/4HANA Cloud, Private Edition

# Establish a trusted HTTPS connection for SAP S/4HANA Cloud, Private Edition {#ariaid-title1}

Release version: Brazil  
Updated June 29, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Export the Root CA certificate from your SAP system and import it into the MID Server's cacerts keystore to establish a trusted HTTPS connection between SAP S/4HANA Cloud, Private Edition and your ServiceNow instance.

## Before you begin

* You must have the SAP Basis administrator role with authorization to access transaction STRUST.
* You must have administrator access to your ServiceNow instance to upload the certificate.

{#export-root-ca-cert-sap-private-cloud__ul_zb2_ggm_pkc}

Role required: sam_admin, SAP Basis administrator

## About this task

Important:  
This task is required for all SAP S/4HANA Cloud, Private Edition integrations, regardless of whether you use Basic Auth or OAuth 2.0 as the connection type.

The Root CA certificate establishes trust between your SAP system and the ServiceNow OAuth endpoint over HTTPS. Without this certificate, the SAP system can't verify the identity of the ServiceNow server during data collection.

## Procedure

1. Export the certificate from SAP.
   1. Log in to your SAP S/4HANA Private Cloud system using your SAP credentials.
   2. In the command field, enter transaction code <kbd class="ph userinput">STRUST</kbd> and press Enter.
   3. In the Trust Manager, expand SSL Client (Standard) in the left navigation panel.  
   4. Under Issuer Certificates, locate and select the respective Root CA certificate for the ServiceNow domain.
   5. In the certificate details panel, select Export certificate.  
   6. In the Export Certificate dialog box, select Base64 as the file format.  
   7. Enter a file path and file name for the exported certificate, then select Save.  
      Save the file in a secure location. You will need it to import the certificate into the MID Server's cacerts keystore.
   {#export-root-ca-cert-sap-private-cloud__substeps_sfx_nvh_hjc}
2. Import the certificate into the MID Server's cacerts keystore.  
   For steps to import, refer to [Add SSL certificates for the MID Server](https://www.servicenow.com/docs/r/servicenow-platform/mid-server/add-ssl-certificates.html).
{#export-root-ca-cert-sap-private-cloud__steps_v5z_24p_5jc}

## Result

The Root CA certificate is stored in your ServiceNow instance. The SAP S/4HANA Private Cloud system can now establish a trusted HTTPS connection to your ServiceNow instance during data collection.

## What to do next

After uploading the certificate, select SAP clients to import data. For more information, see [Select SAP clients to import data](https://www.servicenow.com/docs/Z7rrEh_ZFCmz43lsp6N3fw "Select the Remote Function Call (RFC) connections that the SAP ABAP program uses to import data from your SAP clients into the central system and then into your ServiceNow instance.").