Symptom
You want to change the SSFS master key in a HANA System Replication setup.
Due to a bug in HANA System Replication a changed master key is not shipped correctly to the secondary site which leads to errors on the secondary site.
Due to a bug in HANA System Replication a changed master key is not shipped correctly to the secondary site which leads to errors on the secondary site.
Other Terms
HSR, SAP HANA System Replication, master key change, SSFS
Reason and Prerequisites
- SAP HANA database revisions earlier than 85.05 (for SPS 8), 97.01 (for SPS 9) and 102 (for SPS 10)
- HANA System Replication is enabled
Solution
For a permanent solution, apply SAP HANA database revision 85.05 for
SPS 8, 97.01 for SPS 9 or revision 102 for SPS 10 or any later revision.
The fix will lead to a correct shipment of the master key to the
secondary site.
Workaround
1. Ensure that the new SSFS_<SID>.KEY file is located under /usr/sap/<SID>/SYS/global/hdb/security/ssfs/
2. Manually copy the master key file from primary to secondary to the same directory.
3. Delete the ssfs_key_file_path setting under [cryptography] in global.ini on both sites.
4. Restart the systems to make the changes effective.
Workaround
1. Ensure that the new SSFS_<SID>.KEY file is located under /usr/sap/<SID>/SYS/global/hdb/security/ssfs/
2. Manually copy the master key file from primary to secondary to the same directory.
3. Delete the ssfs_key_file_path setting under [cryptography] in global.ini on both sites.
4. Restart the systems to make the changes effective.
Header Data
| Released On | 17.07.2015 12:56:17 |
| Release Status | Released for Customer |
| Component | HAN-DB-HA SAP HANA High Availability |
| Priority | Correction with high priority |
| Category | Program error |
No comments:
Post a Comment