Welcome to the new Integration Nation!

How to Connect to a SAP HANA Database Hosted on hanacloud.ondemand.com

Thorsten H.

·Jul 16, 2026 11:47 AM·

How to connect to a hana db which is hosted in the cloud (hanacloud.ondemand.com)

4 comments

· Sorted by Oldest

Thorsten H.
·
·
I configured the account as described but when validationg it I get an error: Received fatal alert: protocol_version
SnapGPT_App
APP
·
(edited)·
Error: Received fatal alert: protocol_version This error occurs during account validation and is a TLS/SSL protocol mismatch — your Groundplex's Java Runtime Environment (JRE) is attempting to connect to an endpoint using a TLS version that the endpoint no longer supports (or vice versa). --- 🔍 Root Cause The most common cause is that your Groundplex is running a JRE version that has disabled older TLS protocols (TLS 1.0 / 1.1) by default (JRE 11.0.10+), while the target endpoint only supports those older versions. Alternatively, the endpoint may require a newer TLS version that the JRE doesn't support well. --- ✅ Recommended Solutions Option 1: Update the Endpoint (Preferred) Update the target endpoint/service to support TLS 1.2 or later. This is the most secure and recommended approach. --- Option 2: Upgrade Your JRE If you're on an older JRE (prior to 11.0.8), upgrade to a newer version. JRE versions prior to 11.0.8 have known issues connecting to TLS 1.3 endpoints. Refer to the [Configure the JRE Version](https://docs.snaplogic.com/snaplexes/groundplex-install-on-linux.html) guide for steps to upgrade. --- Option 3: Re-enable Older TLS Versions on the Groundplex (Workaround) If updating the endpoint is not possible, you can re-enable TLS 1.0/1.1 support on your Groundplex: 1. Open the Java security configuration file on your JCC node:
/opt/snaplogic/pkgs/<jre-version>/conf/security/java.security
2. Find the jdk.tls.disabledAlgorithms property and remove TLSv1 and TLSv1.1 from the list. 3. Restart the Snaplex to apply the changes:
bash sudo /opt/snaplogic/bin/jcc.sh restart
--- 💡 Additional Tips - Make sure this change is applied to all JCC nodes in your Groundplex. - If you're using a Cloudplex, you won't have direct access to the JRE configuration — in that case, the endpoint must be updated to support TLS 1.2+. - If the issue is related to a missing or untrusted certificate, you may also need to import the endpoint's certificate into the Groundplex truststore. --- Could you share more details about which account type you're configuring (e.g., Email, JDBC, REST, etc.) and whether you're using a Groundplex or Cloudplex? That would help narrow down the exact fix for your situation.
Thorsten H.
·
·
account type is SAP HANA Account and I’m on a Cloudplex
SnapGPT_App
APP
·
(edited)·
I'd be happy to help you with your SAP HANA Account on a Cloudplex! Let me look that up for you. Configuring a SAP HANA Account on a Cloudplex Great news — the SAP HANA Account is fully compatible with a Cloudplex environment! Here's what you need to know to set it up: --- 📋 Required Fields | Field | Description | Default | |---|---|---| | Label | A unique, meaningful name for the account | — | | Hostname | The database server hostname (e.g., localhost) | None | | Port Number | Port for SAP HANA | 30015 | | Database Name | Name of the database to connect to | None | | Username | Database username | None | | Password | Database password | None | --- ⚙️ Advanced Properties | Field | Default | |---|---| | Auto Commit | Selected | | Fetch Size | 100 | | Batch Size | 1000 | | Min Pool Size | 1 | | Max Pool Size | 10 | | Max Lifetime (minutes) | 30 | | Idle Timeout (minutes) | 5 | | Checkout Timeout (ms) | 10000 | --- 🔒 Enabling SSL (Optional) If you need SSL, add the following URL Properties: | URL Property Name | URL Property Value | |---|---| | encrypt | true | | validateCertificate | true | | keyStore | Path to your keystore | | keyStorePassword | Your keystore password |
💡 SSL is especially required if connecting to SAP Data Warehouse Cloud (DWC).
--- 🛠️ How to Create the Account Via Designer: 1. Drag any SAP HANA Snap onto the canvas and open its settings. 2. Go to the Account tab → click Add Account. 3. Select the location, choose SAP HANA Account, and click Continue. 4. Fill in the required fields and click Validate → Apply. Via Manager: 1. Navigate to your project folder. 2. Click Create → SAP HANA → SAP HANA Account. 3. Fill in the properties and click Apply. --- ✅ Compatible Snaps The SAP HANA Account works with all SAP HANA Snaps: - SAP HANA Select, Insert, Update, Delete, Upsert, Execute, Stored Procedure, Table List ---
⚠️ Tip: Avoid changing account credentials while pipelines using them are actively running, as this may cause unexpected behavior or account lockouts.
Let me know if you need help configuring any specific field or setting up a pipeline with SAP HANA! 🚀

Thorsten H.
·
·
I configured the account as described but when validationg it I get an error: Received fatal alert: protocol_version
SnapGPT_App
APP
·
(edited)·
Error: Received fatal alert: protocol_version This error occurs during account validation and is a TLS/SSL protocol mismatch — your Groundplex's Java Runtime Environment (JRE) is attempting to connect to an endpoint using a TLS version that the endpoint no longer supports (or vice versa). --- 🔍 Root Cause The most common cause is that your Groundplex is running a JRE version that has disabled older TLS protocols (TLS 1.0 / 1.1) by default (JRE 11.0.10+), while the target endpoint only supports those older versions. Alternatively, the endpoint may require a newer TLS version that the JRE doesn't support well. --- ✅ Recommended Solutions Option 1: Update the Endpoint (Preferred) Update the target endpoint/service to support TLS 1.2 or later. This is the most secure and recommended approach. --- Option 2: Upgrade Your JRE If you're on an older JRE (prior to 11.0.8), upgrade to a newer version. JRE versions prior to 11.0.8 have known issues connecting to TLS 1.3 endpoints. Refer to the [Configure the JRE Version](https://docs.snaplogic.com/snaplexes/groundplex-install-on-linux.html) guide for steps to upgrade. --- Option 3: Re-enable Older TLS Versions on the Groundplex (Workaround) If updating the endpoint is not possible, you can re-enable TLS 1.0/1.1 support on your Groundplex: 1. Open the Java security configuration file on your JCC node:
/opt/snaplogic/pkgs/<jre-version>/conf/security/java.security
2. Find the jdk.tls.disabledAlgorithms property and remove TLSv1 and TLSv1.1 from the list. 3. Restart the Snaplex to apply the changes:
bash sudo /opt/snaplogic/bin/jcc.sh restart
--- 💡 Additional Tips - Make sure this change is applied to all JCC nodes in your Groundplex. - If you're using a Cloudplex, you won't have direct access to the JRE configuration — in that case, the endpoint must be updated to support TLS 1.2+. - If the issue is related to a missing or untrusted certificate, you may also need to import the endpoint's certificate into the Groundplex truststore. --- Could you share more details about which account type you're configuring (e.g., Email, JDBC, REST, etc.) and whether you're using a Groundplex or Cloudplex? That would help narrow down the exact fix for your situation.
Thorsten H.
·
·
account type is SAP HANA Account and I’m on a Cloudplex
SnapGPT_App
APP
·
(edited)·
I'd be happy to help you with your SAP HANA Account on a Cloudplex! Let me look that up for you. Configuring a SAP HANA Account on a Cloudplex Great news — the SAP HANA Account is fully compatible with a Cloudplex environment! Here's what you need to know to set it up: --- 📋 Required Fields | Field | Description | Default | |---|---|---| | Label | A unique, meaningful name for the account | — | | Hostname | The database server hostname (e.g., localhost) | None | | Port Number | Port for SAP HANA | 30015 | | Database Name | Name of the database to connect to | None | | Username | Database username | None | | Password | Database password | None | --- ⚙️ Advanced Properties | Field | Default | |---|---| | Auto Commit | Selected | | Fetch Size | 100 | | Batch Size | 1000 | | Min Pool Size | 1 | | Max Pool Size | 10 | | Max Lifetime (minutes) | 30 | | Idle Timeout (minutes) | 5 | | Checkout Timeout (ms) | 10000 | --- 🔒 Enabling SSL (Optional) If you need SSL, add the following URL Properties: | URL Property Name | URL Property Value | |---|---| | encrypt | true | | validateCertificate | true | | keyStore | Path to your keystore | | keyStorePassword | Your keystore password |
💡 SSL is especially required if connecting to SAP Data Warehouse Cloud (DWC).
--- 🛠️ How to Create the Account Via Designer: 1. Drag any SAP HANA Snap onto the canvas and open its settings. 2. Go to the Account tab → click Add Account. 3. Select the location, choose SAP HANA Account, and click Continue. 4. Fill in the required fields and click Validate → Apply. Via Manager: 1. Navigate to your project folder. 2. Click Create → SAP HANA → SAP HANA Account. 3. Fill in the properties and click Apply. --- ✅ Compatible Snaps The SAP HANA Account works with all SAP HANA Snaps: - SAP HANA Select, Insert, Update, Delete, Upsert, Execute, Stored Procedure, Table List ---
⚠️ Tip: Avoid changing account credentials while pipelines using them are actively running, as this may cause unexpected behavior or account lockouts.
Let me know if you need help configuring any specific field or setting up a pipeline with SAP HANA! 🚀