HANA Inconsistent SSFS

[shaji_narayanan]

Hello HANA experts,

We recently upgraded our test HANA system from rel.91 to rel.93.

The upgrade completed successfully, but port-upgrade, database backups are failing.

Error message:

"Could not start backup for system HDU DBC: [447]: backup could not be completed: [1000013] Inconsistent SSFS!"

I have gone through SAP Note 2097613 which deals this with issue.

After necessary verifications, even attempted option B (Hard reset) to recovery from SSFS, but failed. 

By this I mean:

• hdbcons "crypto ssfs resetConsistency" ended without any errors.

• ALTER SYSTEM APPLICATION ENCRYPTION CREATE NEW KEY;

          ended with message

          SAP DBTech JDBC: [7]: feature not supported: Application encryption not possible without secure store

Have you faced this error before?  Highly appreciate your comments towards resolution.

Thanks in advance,

Shaji

Shaji Narayanan

[davidebruno]

We had the same issue with revision 97.01 but we didn't follow the Hard reset option.

We copied from a backup the old key and data SSFS, and after a restart, the issue was solved

[former_member194780]

Hi Davide,

Can you help me with the path from where you copied the Key and data SSFS?.

-Avinash

[davidebruno]

Hi,

I backupped the directory /usr/sap/<SID>/SYS/global/hdb/security/ssfs/

[Former Member]

Are you using the native HANA backups which are resulting in the errors?

do you have an option to trigger a BACKINT backup for the HANA Database and see if that works?

[shaji_narayanan]

Thanks for your assistance, Sunil. 

We user native HANA backups.  Currently BACKINT is not configured and hence the option is not available.

That said, I do not think this is an issue with backup.  It appears from diagnostics logs that the issue is at SSFS level.

RootKeyStore.cpp(00386) : Empty SSFS cache: reading from SSFS (ID=HDB_SERVER/1/DPAPI)

KeyMgmtApi.cpp(00179) : Error when trying to get the DPAPI-Rootkey: RootKeyStoreReader::read(): SSFS-4218: Record with key "HDB_SERVER/1/DPAPI" not found in secure storage <-- SSFS-4215: Data file "/usr/sap/<SID>/SYS/global/hdb/security/ssfs//SSFS_<SID>.DAT" exists, but does not contain the requested entry

Thanks again and best regards,

Shaji

[former_member194780]

Hi Shaji,

I am facing the same issue.. How did you solve this ?

-Avinash