Configure SAP HANA, express edition Security causes xs login problems

[former_member183462]

Hi,

I've tried to set up SAP HANA Express Edition using the VM image method. I was able to have everything set up, including the XS engine and Web IDE running on my browser. However, I followed the tutorial: http://go.sap.com/developer/tutorials/hxe-ua-configure-security.html, which is listed as the next step after starting to use HXE. I got stuck at the point where I change the SSFS master keys. I am denied permission to edit the global.ini file. I proceed to the next steps after that step and I am even able to change the root key. However, I am now locked out of the XS login. In my VM terminal, when I try xs login, it says the UAA authentication has failed. On my browser where the Web IDE login screen was formerly present, it now says "A login is required but the uaa configuration is broken or missing". I am now unable to proceed with using Web IDE. How do I go back to the previous working state that my system was in, before I started configuring the HXE security? Is there a way to reverse this current locked-out state?

Thanks,

Annie (Suantak)

[dvankempen]

Hi Suantak,

It sounds like returning to a previous working state would be the quickest option.

For your information, you can safely skip step 3 in section Change the SSFS Master Keys from http://go.sap.com/developer/tutorials/hxe-ua-configure-security.html It describes how to set the default path to the key file, which, as it is the default, is not required. You only need to set it when you change the path (use HANA studio, not vi).

When you are just learning and not exposing the VM to the outside world (run the VM in host-only mode) there is no need to change the SSFS keys at all (see my blog / videohis might help, https://blogs.sap.com/2016/10/21/managing-encryption-keys-sap-hana-express-sap-hana-academy/)

Works?

Thanks

Denys

[philip_jackson]

I have the same issue but have already changed the SSFS keys. I have also built some work spaces and do not want to start over. Is there a way to fix the problem without returning to a previous state?

Thank you.

[dvankempen]

Hi Philip,

See http://answers.sap.com/answers/46981/view.html

There is no solution provided in the referenced documentation and SAP Notes (contact SAP support).

In a future release of SAP HANA, the tool used to generate a new key, hdbnsutil, will include the feature to export and restore root keys.

[craigcmehil]

This might help, https://blogs.sap.com/2016/10/21/managing-encryption-keys-sap-hana-express-sap-hana-academy/