SSFS (Secure Storage in File System) configuration BRTOOLS

[former_member245319]

Hi All,

Having an issue with the SSFS configuration. This is in preparation for EHP7 Upgrade.

I Set the Folder permissions, environmental variables. etc.

As described in:

1639578 - SSFS as password store for primary database connect

1622837 - Secure connection of AS ABAP to Oracle via SSFS

Restarted Server, checked settings everything OK!

However after making all the changes i want to setup BRTOOLS.

As described in:

1764043 - Support for secure storage in BR*Tools

Getting the following:

===================================================================

BR0801I BRCONNECT 7.20 (42)

BR0280I BRCONNECT time stamp: 2015-08-22 12.37.23

BR0828I Changing password for database user BRT$ADM ...

BR0280I BRCONNECT time stamp: 2015-08-22 12.37.23

BR0829I Password changed successfully in database for user BRT$ADM

BR0282E Directory 'E:\oracle\CND\security\rsecssfs\data' not found

BR1527E Setting password for user BRT$ADM in secure storage failed

BR0832E Changing password for user BRT$ADM failed

BR0280I BRCONNECT time stamp: 2015-08-22 12.37.23

BR0804I BRCONNECT terminated with errors

===================================================================

Its pointing to the incorrect Directory:

Directory set on ENV is: E:\usr\sap\CND\SYS\global\security\rsecssfs\data

I can even see the SSFS_CND.DAT file that was created as part of the SSFS configuration.

There is no physical security folder or any sub folder under the path provided during the BRTOOLS output: E:\oracle\CND\security\rsecssfs\data

Not sure where BRTOOLS is getting this location from and how to resolve.

My personal opinion is to move/copy folder  "E:\usr\sap\CND\SYS\global\security" to "E:\oracle\CND\security"

and reset/redo the SSFS config and attempt the BRTOOLS SSFS setup again.

Current ENV Variables:

ORACLE_HOME:    E:\oracle\CND\11203

SAPDATA_HOME:  E:\oracle\CND

RSEC_SSFS_DATAPATH:  E:\usr\sap\CND\SYS\global\security\rsecssfs\data

RSEC_SSFS_KEYPATH:     E:\usr\sap\CND\SYS\global\security\rsecssfs\key

Any assistance will be appreciated.

Thank you

Regards,

Johann

[Reagan · Accepted solution]

>>BR0282E Directory 'E:\oracle\CND\security\rsecssfs\data' not found<<

The SAP note 1764043 - Support for secure storage in BR*Tools is the answer to your issue.

You need to manually create the directories $SAPDATA_HOME/security/rsecssfs/data and $SAPDATA_HOME/security/rsecssfs/key as suggested in the note.

After that you need to create the brt$adm user at the Oracle level and change the password.

BR*Tools is not pointing to the incorrect directory. The one under SAPDATA_HOME is the one used by BR*Tools.

[Former Member · Accepted solution]

Hi Reagan,

Thank you so much, it works for me.

Rgds/Swalay

[former_member245319 · Accepted solution]

Hi Reagan,

Sorry for the delay in responding to  your post. I have been extremely busy with other clients.

I did look at Note "1764043 - Support for secure storage in BR*Tools ". However it was not very clear about the directories or i might have misunderstood the note slightly or i might have been looking at my eyelids.

Problem resolved after i created the directories and rerun BRTOOLS Setup.

So key thing to remember here is that there is two set of security directories.

Thank you for showing a blind man how to read. i will read a bit slower next time

Regards,

Johann

[former_member185239]

Hi Johann ,

Follow the step 3 of the sapnote http://service.sap.com/sap/support/notes/1764043

With Regards

Ashutosh Chaturvedi

[Former Member]

Hi Johann,

I have solve the issue by considering SAP note 1764043 - Support for secure storage in BR*Tools

provided by Reagan, Hope it will help you too if need steps then please confirm i will paste them too.

Thanks.

Rgds/Swalay

[Former Member]

Hi Johann,

I am also facing the same issue after upgrading Oracle Database 10 to 12C, even i set the parameter and all values to BRTOOLS output but still SSFS didn't work.

Rgds/Swalay

[former_member182657]

Hi Swalay,

Suggest you to re-check with SAP Note 1622837 - Secure connection of AS ABAP to Oracle via SSFS

even i set the parameter and all values to BRTOOLS output but still SSFS didn't work.

Could you share the exact error which you're facing right now ? Also i would suggest you to follow SCN doc at to re-verify the steps done for SSFS database connection.

Hope this will help you.

Regards,

[Former Member]

Hi Gaurav,

I have already configured SSFS according to Note 1622837, there is no specific/detailed error but while running the brconnect -u // -c -f check its output say that Key & Data files not found, which already created at the global directory suggested by Oracle upgrade guide and even i can see the data on key and data directories.

I have set the following :

ORACLE_HOME:    E:\oracle\SID\DBversion

SAPDATA_HOME:  E:\oracle\SID

RSEC_SSFS_DATAPATH:  E:\usr\sap\SID\SYS\global\security\rsecssfs\data

RSEC_SSFS_KEYPATH:     E:\usr\sap\SID\SYS\global\security\rsecssfs\key

Rgds/Swalay

[former_member182657]

Hi Swalay,

Thanks for the information,here could you confirm for the below

These directories must be created manually before the first BRCONNECT call and must have restrictive authorizations (in accordance with SAP Note 1639578). They belong to the OS user ora<sid> (or Oracle),

from SAP Note 1764043 - Support for secure storage in BR*Tools 

point no.3 .

Regards,

[Former Member]

Hi Gaurav,

Yes i have created them manually with limited autho as per the note and considering all settings as per the note 1764043 provided by Reagan Benjamin and you,

Thanks for the all help, i will check and update you accordingly.

Rgds/Swalay

[Former Member]

Hi Gaurav,

SSFS issue is resolved by SAP note 1764043, user brt$adm was missing in my configuration.

Thanks a lot.

Rgds/Swalay