Dear Customer,
PLEASE DISTRIBUTE THIS MESSAGE TO THE IT / NETWORK / SECURITY DEPARTMENT IN YOUR ORGANIZATION.
SAP Ariba will be replacing the following certificates on December 5, 2026, from 7:00 AM PST to 11:00 AM PST. This is done to ensure continued access to the business network, as the existing web certificates for the following URLs will be expiring.
| Certificate Name |
Could Impact |
| api.sapariba.cn |
API |
| certapi.sapariba.cn |
API |
| certs1.sapariba.cn |
Integration (web services, file channel, etc.) |
| certservice.sapariba.cn |
Integration (web services, file channel, etc.) |
| openapi.sapariba.cn |
API |
| s1.sapariba.cn |
Single Sign-On using this URL
Integration (web services, API, file channel, etc.) using this URL
Punchout Connection using this URL
|
| service.sapariba.cn |
Single Sign-On using this URL
Integration (web services, API, file channel, etc.) using this URL
Punchout Connection using this URL
|
You will need to replace the expiring/existing certificates with the new certificate(s) after the certificate update has completed on the above-mentioned date and time. You will receive a notification when SAP Ariba has completed the certificate update process.
CALL TO ACTION
- Customers should review their current configurations with their IT/Network/Security department to determine if they are impacted by the change.
- Do not remove or replace the existing certificate(s) with the new ones until the certificate update process has been completed.
- After the certificate update process has been completed, you will need to import the new certificate(s) and replace the existing certificate to ensure continued access to SAP Ariba Applications.
- If you do not use the URLs that are specified in this notification, you will not be impacted by this certificate update. You may optionally receive additional notifications specifying other URLs that require certificate updates, depending on your subscriptions.
FAQ
- When can I download the new certificate(s)? We will send another notification once the new certificate(s) are available for download.
- Can the downloaded new certificate(s) be imported right away? Some customers may have the ability to import multiple certificates into the keystore along with the existing certificate(s) before the certificate update is made. Please ensure to keep the current certificate(s) in the keystore until after the certificate update has been completed. Removing or replacing the existing signing/authentication certificate(s) before SAP Ariba makes the certificate changes will break the integration. SAP Ariba will only perform the certificate replacement on the date and time specified in this notice.
- For frequently asked questions regarding impact and the certificate installation process, please refer to the "Commonly Asked Questions" section of the Certificate Update Calendar.
Note: VAN providers will not receive this notice. Customers who utilize a Value-Added Network Provider (VAN) are kindly requested to review this notice and ensure it is shared with your VAN provider.
DigiCert G2 and G3 Upgrade: The RSA and ECC certificates updated by SAP Ariba and SAP Business Network will be supported by DigiCert's G2 & G3 certificate hierarchies. Even if your integration only uses the RSA cert, both the G2 and G3 root certs should be added to the trust store. More details can be reviewed in DigiCert root and intermediate CA certificate updates.
If you have questions or concerns regarding this certificate update, please contact Technical Support – Procurement using SAP for Me to file a case or contact your company's designated support contact.
Thank you,
Technical Support – Procurement
Important: This notice reflects SAP Ariba planning as of the date of this notice. SAP Ariba may change the features and release schedule at any time without notice and assumes no responsibility for errors or omissions. Nothing in this notice should be construed to represent any commitment by SAP Ariba to include any specific new features in any version of the SAP Ariba solutions. All dates in this communication are based on US Pacific Time GMT-7.
Notice Date: October 22, 2026
