HCM Brasil eSocial: Certificado Digital

(Scroll down for the English version, which is proudly presented by the SAP Leonardo machine translation service.)

Olá pessoal,

O objetivo desse blog post é divulgar a solução encontrada para corrigir o problema de atualização do certificado digital do eSocial. Portanto, nesse blog post abordarei os seguintes tópicos:

• Descrição do problema encontrado
• Solução encontrada
• Procedimento a ser feito para correção do problema.

Descrição do problema:

Durante o go-live do eSocial, que ocorreu entre 2017 e 2018, para possibilitar a vocês a utilização do produto, foi recomendado na época a criação de conexões SSL usando o certificado digital do site, conforme imagem abaixo. Entretanto, sempre que esse certificado vence, o que normalmente ocorre uma vez ao ano, é necessário atualizar os sistemas com um novo certificado.

Solução:

Para solucionar esse problema e ter um prazo de validade maior até a próxima atualização, você pode atualizar apenas o certificado raiz da cadeia e a conexão funcionará da mesma forma, conforme vocês podem ver na imagem abaixo:

Nota:

Por pertencer à autoridade certificadora, o certificado raiz tem um prazo de validade maior, conforme exemplo abaixo:

Procedimento:

Como o eSocial possui dois ambientes de conexão, foram atualizadas as duas notas de consultoria com as devidas instruções, conforme abaixo:

• Ambiente de produção restrita
• Ambiente de produção

Ambiente de produção restrita:

Foram atualizados os arquivos anexados na SAP Note 2514483 – eSocial – SOA Manager – configuration of web service for communication to eSocial restricted production environment – web service delivery phase, com novas versões que contém as seguintes mudanças:

Digital_certificates_v4.pdf

Foram modificados os capítulos abaixo:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 8 modificado.
• TEST THE CONNECTION WITH ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 9 criado.

Digital_certificate_HTTP_connection_v2.pdf

Foram modificados os capítulos abaixo:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 8 modificado.
• CREATE THE CONNECTIONS TO RESTRICTED PRODUCTION ENVIRONMENT → novo item criado – Connections are failing (Status da resposta HTTP different from 200).

Ambiente de produção:

Foram atualizados os arquivos anexados na SAP Note 2585709 – eSocial – SOA Manager – configuration of web service for communication to eSocial production environment, com novas versões que contém as seguintes mudanças:

Digital_certificates_v2.pdf

Foram modificados os capítulos abaixo:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL PRODUCTION ENVIRONMENT IN PRODUCTION SYSTEM → step 8 modificado.
• TEST THE CONNECTION WITH ESOCIAL PRODUCTION ENVIRONMENT → step 9 criado.

Digital_certificate_HTTP_connection_v2.pdf

Foram modificados os capítulos abaixo:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 8 modificado.
• CREATE THE CONNECTIONS TO RESTRICTED PRODUCTION ENVIRONMENT → novo item criado – Connections are failing (Status da resposta HTTP different from 200).

Mais informações:

Para mais informações, veja as SAP Notes abaixo:

• SAP Note 2514483 – eSocial – SOA Manager – configuration of web service for communication to eSocial restricted production environment.
• SAP Note 2585709 – eSocial – SOA Manager – configuration of web service for communication to eSocial production environment.

Gostou desse post? Dê um Like e compartilhe o conteúdo com seus colegas.

Fiquem à vontade para deixar um feedback, comentário ou pergunta no espaço abaixo. E não esqueçam de seguir a tag HCM Payroll Brazil na SAP Community para ficarem ligados nas últimas notícias sobre o eSocial.

Um abraço,

Janaína Ferreira

—-

Hi everyone,

The purpose of this blog post is to promote the solution found to correct the update of the eSocial’s digital certificate. Therefore, in this blog post I will address the following topics:

• Problem description found
• Solution found
• Procedure to be performed to correct the problem.

Problem Description:

During the eSocial go-live, which occurred between 2017 and 2018, to enable you to use the product, we recommend that you create SSL connections using the digital certificate of the website, according to image below. However, whenever this certificate expires, which usually occurs once a year, the systems must be maintained with a new certificate.

Solution:

To solve this issue and have a bigger validity period until the next update, you can only update the root certificate of the chain and the connection will work in the same way, as you can see in the image below:

Note:

As part of the certificate authority, the root certificate has a higher expiring date, as follows:

Procedure:

As eSocial has two connection environments, the two consulting notes were maintained with the following instructions, as below:

• Restricted production environment
• Production environment

Restricted Production Environment:

Attached files were updated in SAP Note 2514483 – eSocial – SOA Manager – configuration of web service for communication to eSocial restricted production environment – web service delivery phase, with new versions that contain the following changes:

Digital_certificates_v4.pdf

The following chapters were changed:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 8 modified.
• TEST THE CONNECTION WITH ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 9 created.

Digital_certificate_HTTP_connection_v2.pdf

The following chapters were changed:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 8 modified.
• CREATE THE CONNECTIONS TO RESTRICTED PRODUCTION ENVIRONMENT → new item created – Connections are failing (Status da resposta HTTP different from 200).

Production Environment:

Attached files were updated in SAP Note 2585709 – eSocial – SOA Manager – configuration of web service for communication to eSocial production environment, with new versions that contain the following changes:

Digital_certificates_v2.pdf

The following chapters were changed:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL PRODUCTION ENVIRONMENT IN PRODUCTION SYSTEM → step 8 modified.
• TEST THE CONNECTION WITH ESOCIAL PRODUCTION ENVIRONMENT → step 9 created.

Digital_certificate_HTTP_connection_v2.pdf

The following chapters were changed:

• ENTER DIGITAL CERTIFICATE FOR CONNECTING THE ESOCIAL RESTRICTED PRODUCTION ENVIRONMENT → step 8 modified.
• CREATE THE CONNECTIONS TO RESTRICTED PRODUCTION ENVIRONMENT → new item created – Connections are failing (Status da resposta HTTP different from 200).

Mais informações:

For more information, see the following SAP Notes:

• SAP Note 2514483 – eSocial – SOA Manager – configuration of web service for communication to eSocial restricted production environment.
• SAP Note 2585709 – eSocial – SOA Manager – configuration of web service for communication to eSocial production environment.

Did you like this post? Give up a like and share the content with your colleagues.

Please feel comfortable to leave feedback, comment, or question in the space below. And do not forget the HCM Payroll Brazil tag in SAP Community to be linked to the latest news on the eSocial.

All the best,

Janaína Ferreira