Hana Express Edition: Change SSFS Master Keys error

[MaG]

Hi,

i tried to change the SSF Master Key from the Hana Express Edition. I copied the two lines from the manual (pdf):

RSEC_SSFS_DATAPATH=/usr/sap/HXE/SYS/global/hdb/security/ssfs
RSEC_SSFS_KEYPATH=/usr/sap/HXE/SYS/global/hdb/security/ssfs rsecssfx changekey $(rsecssfx generatekey -getPlainValueToConsole)

The result of the last line is this error:

SSFS-7255: Directory for the file persistence cannot be determined. The
secure storage the file system retrieves this information from a
profile file with which the executable has been called ("pf=<...>";
typically an instance profile; in this file or the underlying default
profile, "rsec/ssfs_datapath" is defined). For executables that do not
use profiles, environment variable RSEC_SSFS_DATAPATH is read to
determine this directory.

Can anyone help?

Thanks!

[former_member78281]

I tried to call the program rsecssfx with a profile with argument pf=<filename> and put all required arguments in this file. Then it works.

file masterkey.pf:

rsec/ssfs_datapath = /usr/sap/HXE/SYS/global/hdb/security/ssfs

rsec/ssfs_keypath = /usr/sap/HXE/SYS/global/hdb/security/ssfs

SAPSYSTEMNAME = HXE

Execute the command

rsecssfx pf=masterkey.pf changekey $(rsecssfx generatekey -getPlainValueToConsole)

The same procedure with the system PKI keys.

Let me know if that solves your issue

[Former Member]

Hi Marcel,

Can you check what's your environment setting for RSEC_SSFS_DATAPATH? The error seems to indicate this environment variable is not set correctly.

Thanks!

[former_member78281]

Hi all,
i have the same problem. The environment variable RSC_SSFS_DATAPATH is set to the correct directory. Any Idea how to set the proper variables ?

Thanks
Arndt

[Former Member]

Hi Marcel,

We are investigating this - we will get back to when we some update to share.

Thanks for you patience,

Kannan