Power BI service dataset refresh failure: SAP HANA invalid credentials

[Daniil]

One of my datasets uses SAP HANA as one of the data sources, and I can't refresh the dataset online (Power BI service) since yesterday.

Neither manual nor scheduled refresh works.

Before anyone tells me I may have a problem with installed credentials, I'd like to say that the same SAP HANA query does work in a dataflow, which uses the same gateway. It also works in Power BI Desktop on the same machine.

Therefore, it appears to be an issue with Power BI service dataset. Full error message below:

Last refresh failed: Wed Dec 19 2018 10:00:31 GMT+1100 (Australian Eastern Daylight Time) 
Invalid connection credentials.

Underlying error code:	-2147467259 Table: ***********.
Underlying error message:	[SAP AG][LIBODBCHDB DLL][HDBODBC] Communication link failure;-10709 Connection failed (RTE:[300012] Cannot create SSL engine: The certificate chain was issued by an authority that is not trusted. (*************************))
DM_ErrorDetailNameCode_UnderlyingHResult:	-2147467259
Microsoft.Data.Mashup.CredentialError.DataSourceKind:	SapHana
Microsoft.Data.Mashup.CredentialError.DataSourcePath:	*************************
Microsoft.Data.Mashup.CredentialError.Reason:	EncryptedConnectionFailed
Microsoft.Data.Mashup.MashupSecurityException.DataSources:	[{"kind":"SapHana","path":"*************************"}]
Microsoft.Data.Mashup.MashupSecurityException.Reason:	EncryptedConnectionFailed
Cluster URI:	WABI-EUROPE-NORTH-B-redirect.analysis.windows.net
Activity ID:	edd698a5-53c9-491e-85cb-51109f3cc192
Request ID:	a53f5eb3-bfde-47ed-be0c-6fb894aa34e6
Time:	2018-12-18 23:00:31Z

[Daniil]

Just to clarify -- we are not using any encryption when connecting to SAP HANA.

The "Encrypt connections" check box is unticked:

Even if I tick it, later I am told that Power BI was unable to connect by using an encrypted connection, and it goes back to unencrypted.

[Daniil]

We've fixed the problem. In the gateway settings, when you select the data source, there is an option called "Validate Server Certificate". I don't remember it before -- maybe it's new. It keeps being defaulted to "Select an Option" even after you make a selection and save.

[v-yuezhe-msft]

@Daniil,

Glad to hear the issue is solved. Can I close this thread?

Regards,
Lydia

[Daniil]

@v-yuezhe-msft while I resolved the issue, I don't think that the "Validate Server Certificate" option works correctly -- its behavior should be fixed, because it keeps defaulting to "Select an Option" like in the screenshot.

[v-yuezhe-msft]

@Daniil,

I am unable to reproduce this issue. On my side, the "select an option" is disabled.


Regards,
Lydia

[Daniil]

Yes, please try to pick "Yes" or "No", save your settings, then refresh the page (I tried Ctrl + F5) -- after this, it defaults to "Select an Option" for us.

[v-yuezhe-msft]

@Daniil,

Could you please share a video or gif about the issue here? 


Regards,
Lydia

[Daniil]

@v-yuezhe-msft unfortunately not -- it would contain sensitive information.

If you are saying the Validate Server Certificate option persists as "Yes" or "No" even after hard refresh, then maybe it's a bug that is unique to us.

Again, for this you'd need to actually save the connection first, then refresh the page.

[v-yuezhe-msft]

@Daniil,

Is there any possiblity that you share the video or gif through Private Message? I will consult this issue internally with your video.

Regards,
Lydia

[Daniil]

@v-yuezhe-msft Lydia, I've recorded a GIF without any sensitive information.

Notice how the Validate Server Certificate drop-down list goes back to "Select an Option" after I choose "No" and click Apply.

(If you don't see GIF above, please click on the broken image icon.)