1977221 - How to handle HANA Alert 57: 'Secure store file system (SSFS) availability'

Symptom

The following SAP HANA alert is issued: “Your database is currently running without the secure storage file system (SSFS)"

Cause

During HANA system start up, file SSFS_<SID>.DAT cannot be found.

The file may have been deleted, moved or its name has been changed. Be aware that the file is part of the SAP backup procedure of SAP HANA databases. In a distributed system every host must be able to access this file.

Resolution

Procedure

1. Check that a correct path to the file SSFS_<SID>.DAT is maintained in parameter ssfs_key_file_path of file global.ini.
2. Check if the file is actually available at the configured location. Copy the file from its backup location if it is not available. If no backup on the file system is available, the SSFS_<SID>.DAT file can be recovered from the SAP HANA Data backup.
3. Check file permissions on OS level.
4. Check the network configuration if the file is accessible from host.

Path

1. SAP HANA Studio - SAP HANA Administration Console - Configuration - global.ini - cryptography.
2. OS Access with <SID>adm user.

How to

Check out the attached document for more details. If you need further assistance, open an SAP incident on component HAN-DB and attach the information on performed analysis steps and your findings.

See Also

SAP HANA Administration Guide - 3.3 Managing Encryption of Data Volumes in the SAP HANA Database and 3.4 Changing Encryption Keys for Secure Storage of Logon Information
SAP HANA Security Guide - 10 Data Storage Security in SAP HANA
SAP Note 2078117 - CREATE REMOTE SOURCE fails with error "Storing credential to the persistency failed" aes_decrypt_end: wrong or inconsistent padding decrypted

Keywords

HANA Alert
SSFS
Operations Recommendation
#OpsRec-HANA