Issue with secure store key phrase during system copy export

[sudheer_koppireddy5]

Hi,

We recently upgraded our all production portals to SAP NW 7.31 SP7

(Migrated them from windows to Linux).

While taking the export in production portals, we are stuck at a stage

while defining parameters.

We did not move further if we tried the all the passwords at this stage.

We ran the key phrase check tool and found the key phrase we are

supplying is correct with the below command that tells us on the

sapinst screen

'<global directory>/sltools/checkKeyPhrase(.sh) -f <global

directory>/security/data/SecStore.properties'.

so the problem is not with the key phrase

We are stuck with system copy export as our refresh is halted because

of this issue.Screenshot is attached.

sapinst.log

****************************************

'/usr/sap/put/usages_data_P0P.1.xml'.

INFO 2014-03-21 12:29:01.742

Copied file '/usr/sap/put/usages_data_P0P.xml' to '/usr/sap/put/usages_data_P0P.2.xml'.

INFO 2014-03-21 12:29:04.919

Working directory changed to /usr/sap/put.

INFO 2014-03-21 12:29:05.10

Execute step getUsageTypes of component |NW_Export|ind|ind|ind|ind|0|0|NW_Java_Export_Dialog|ind|ind|ind|ind|javaUnload|0|NW_JAVA_Export_PREPARE|ind|ind|ind|ind|prep|0

INFO 2014-03-21 12:29:05.757

Working directory changed to /usr/sap/put.

INFO 2014-03-21 12:29:05.777

Execute step dss_checkForPI of component |NW_Export|ind|ind|ind|ind|0|0|NW_Java_Export_Dialog|ind|ind|ind|ind|javaUnload|0|NW_JAVA_Export_PREPARE|ind|ind|ind|ind|prep|0

INFO 2014-03-21 12:29:05.887

Working directory changed to /usr/sap/put.

INFO 2014-03-21 12:29:05.907

Execute step checkKeyPhrase of component |NW_Export|ind|ind|ind|ind|0|0|NW_Java_Export_Dialog|ind|ind|ind|ind|javaUnload|0|NW_JAVA_Export_PREPARE|ind|ind|ind|ind|prep|0

INFO 2014-03-21 12:29:26.291

Effective group id set to 202.

WARNING 2014-03-21 12:29:26.310

Execution of the command "/bin/csh -c "source /home/p0padm/.cshrc; env"" finished with return code 100. Output:

INFO      2014-03-21 12:29:26.291 [syuxccuren.cpp:285]

          CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)

          lib=syslib module=syslib

Effective group id set to 202.

INFO 2014-03-21 12:29:26.318

Creating file /usr/sap/put/checkKeyPhrase.log.

INFO 2014-03-21 12:29:26.409

Output of /usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask is written to the logfile /usr/sap/put/checkKeyPhrase.log.

INFO 2014-03-21 12:29:26.414

Effective group id set to 202.

WARNING 2014-03-21 12:29:26.434

Execution of the command "/usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask" finished with return code 100. Output:

INFO      2014-03-21 12:29:26.414 [syuxccuren.cpp:285]

          CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)

          lib=syslib module=syslib

Effective group id set to 202.

INFO 2014-03-21 12:38:17.491

Effective group id set to 202.

WARNING 2014-03-21 12:38:17.512

Execution of the command "/bin/csh -c "source /home/p0padm/.cshrc; env"" finished with return code 100. Output:

INFO      2014-03-21 12:38:17.491 [syuxccuren.cpp:285]

          CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)

          lib=syslib module=syslib

Effective group id set to 202.

INFO 2014-03-21 12:38:17.527

Creating file /usr/sap/put/checkKeyPhrase.log.

INFO 2014-03-21 12:38:17.618

Output of /usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask is written to the logfile /usr/sap/put/checkKeyPhrase.log.

INFO 2014-03-21 12:38:17.626

Effective group id set to 202.

WARNING 2014-03-21 12:38:17.647

Execution of the command "/usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask" finished with return code 100. Output:

INFO      2014-03-21 12:38:17.626 [syuxccuren.cpp:285]

          CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)

          lib=syslib module=syslib

Effective group id set to 202.

INFO 2014-03-21 12:43:38.969

Effective group id set to 202.

WARNING 2014-03-21 12:43:38.992

Execution of the command "/bin/csh -c "source /home/p0padm/.cshrc; env"" finished with return code 100. Output:

INFO      2014-03-21 12:43:38.969 [syuxccuren.cpp:285]

          CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)

          lib=syslib module=syslib

Effective group id set to 202.

INFO 2014-03-21 12:43:39.6

Creating file /usr/sap/put/checkKeyPhrase.log.

INFO 2014-03-21 12:43:39.101

Output of /usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask is written to the logfile /usr/sap/put/checkKeyPhrase.log.

INFO 2014-03-21 12:43:39.113

Effective group id set to 202.

WARNING 2014-03-21 12:43:39.140

Execution of the command "/usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask" finished with return code 100. Output:

INFO      2014-03-21 12:43:39.113 [syuxccuren.cpp:285]

          CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)

          lib=syslib module=syslib

Effective group id set to 202.

**************************************

sapinst_dev.log

**************************************

TRACE	2014-03-21 12:43:39.67 [syuxcuser.cpp:643]
	PSyGroupImpl CSyUserImpl::getPrimaryGroup()const
	lib=syslib module=syslib

account user="p0padm" uid="390" exists with parameter gid="301"

TRACE	2014-03-21 12:43:39.87 [syuxcuser.cpp:643]
	PSyGroupImpl CSyUserImpl::getPrimaryGroup()const
	lib=syslib module=syslib

account user="p0padm" uid="390" exists with parameter gid="301"

TRACE	2014-03-21 12:43:39.97 [syuxctask.cpp:270]
	CChildApplicationImpl::doStart() lib=syslib module=syslib

A child process has been started. Pid = 20950

INFO	2014-03-21 12:43:39.101
	CJSlibModule::writeInfo_impl()

Output of /usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask is written to the logfile /usr/sap/put/checkKeyPhrase.log.

INFO	2014-03-21 12:43:39.113 [syuxccuren.cpp:285]
	CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)
	lib=syslib module=syslib

Effective group id set to 202.

TRACE	2014-03-21 12:43:39.137 [syuxctask.cpp:880]
	CUnixProcessManager::sap_waitpid(pid_t pid, int * pStatus, int options)
	lib=syslib module=syslib

Child process 20950 returned 100

WARNING	2014-03-21 12:43:39.140
	CJSlibModule::writeWarning_impl()

Execution of the command "/usr/sap/P0P/J00/exe/sapjvm_6/bin/java -classpath /usr/sap/P0P/SYS/global/sltools/sharedlib/sap.com~tc~bl~offline_launcher~impl.jar com.sap.engine.offline.OfflineToolStart com.sap.inst.checkKeyPhrase.CheckKeyPhrase /usr/sap/P0P/SYS/global/sltools/sharedlib:/usr/sap/P0P/SYS/global/security/lib/tools -f /usr/sap/P0P/SYS/global/security/data/SecStore.properties -nomask" finished with return code 100. Output:

INFO	2014-03-21 12:43:39.113 [syuxccuren.cpp:285]
	CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)
	lib=syslib module=syslib

Effective group id set to 202.

TRACE

2014-03-21 12:43:39.140

check key phrase returns: 100

TRACE

2014-03-21 12:43:39.141

NWException thrown: nw.syscopy.java.secStoreFSException:

Error checking key phrase, see output of log file '/usr/sap/put/checkKeyPhrase.log'.

TRACE

2014-03-21 12:43:39.142

Function setMessageIdOfExceptionMessage: nw.syscopy.java.secStoreFSException but already set to nw.syscopy.java.secStoreFSException

TRACE	2014-03-21 12:43:39.269 [iaxxgenimp.cpp:660]
	CGuiEngineImp::showMessageBox

Error checking key phrase, see output of log file '/usr/sap/put/checkKeyPhrase.log'.

TRACE	2014-03-21 12:43:39.270 [iaxxgenimp.cpp:1137]
	CGuiEngineImp::acceptAnswerForBlockingRequest

Waiting for an answer from GUI

TRACE	2014-03-21 12:43:42.489 [iaxxdlghnd.cpp:165]
	CDialogHandler::doHandleDoc()

CDialogHandler: ACTION_ERROR received

TRACE	2014-03-21 12:43:42.490 [iaxxcnclhd.cpp:158]
	CCancelHandler::doHandleDoc(IDialogDocument * pDoc  )

CCancelHandler: ACTION_ERROR received

TRACE	2014-03-21 12:43:42.490 [iaxxgenimp.cpp:1137]
	CGuiEngineImp::acceptAnswerForBlockingRequest

Waiting for an answer from GUI

**********************************************

CheckKeyPhrase.log

INFO	2014-03-21 12:43:39.113 [syuxccuren.cpp:285]
	CSyCurrentProcessEnvironmentImpl::setEffectiveGroup(PSyGroupInt)
	lib=syslib module=syslib

Effective group id set to 202.

**********************************************

Logs are attached.Request you to please have a look on this with priority.

Regards,

Sudheer.

[teengh_hergh]

We faced the same problem and could not add Key Phrase key in configtool either.

Here is our work around. When the Key Phrase screen pops up, enter the Java administrator's password and it should pass the Key Phrase phase. The Java Admin user account is created during the installation of the source system. It might be something like this - j2ee_adm or Administrator. If you don't know what users exist, go to the User Manager in SAP NetWeaver Application Server Java and search for that user.

Hope this help everyone who is doing SAP System Copy.

[former_member185239]

Hi Sudheer,

You need to provide the keyphrase correctly.

<global directory>/sltools/checkKeyPhrase(.sh) -f <global

directory>/security/data/SecStore.properties'.

If you don't know the keyphrase...ten change it in configtool and take a restart of the system since you have the downtime with you.

Activating Secure Storage in the File System (SAP Library - System Security)

With Regards

Ashutosh Chaturvedi

[sudheer_koppireddy5]

Hi Ashutosh,

Here the export we have to take is from production and the downtime is difficult.Moreover when we ran the check tool and found the key phrase we were  supplying was correct with the below command that tells us on the sapinst screen

'<global directory>/sltools/checkKeyPhrase(.sh) -f <global directory>/security/data/SecStore.properties'.

so the problem is not with the key phrase

Regards,

Sudheer.