Database Migration Option: Target Database IBM Db2 for Linux, Unix, and Windows

Checking and Adapting SecureStore with Customer-Specific Key

If you have encrypted your SecureStore with a customer-specific key and not with the default key, you have to execute some checks and adaptations.

Context

The procedure depends firstly on the SAP NetWeaver release on which your SAP system is based:

  • SAP NetWeaver release lower than 7.40

  • SAP NetWeaver release 7.40 and higher

Then it depends on the type of the SECSTORE error message, that you see.

Procedure

All SAP NetWeaver releases

  1. Start transaction SECSTORE and choose Check Entries and Execute.
  2. Filter the result by error messages.

SAP NetWeaver release lower than 7.40

  1. SECSTORE 030 (Incorrect global key for entry …): Restore a legacy key-file that was used in the source system, and repeat the check afterwards.

    For more information, see the SAP Help Portal for your SAP NetWeaver release at http://help.sap.com/nw. Choose Start of the navigation pathApplication Help Next navigation step SAP NetWeaver Library: Function-Oriented View Next navigation step Security Next navigation step System Security Next navigation step System Security for SAP NetWeaver Application Server for ABAP Only Next navigation step Secure Storage (ABAP) Next navigation step Importing Keys after a System CopyEnd of the navigation path.

  2. SECSTORE 031 (System-dependent data for entry … changed: …): Perform a record migration.

    For more information, see SAP Note. 816861 Information published on SAP site.

SAP NetWeaver release 7.40 and higher

  1. SECSTORE 089 (Key … for entry … is missing in the secure storage in the file system): Reimport the encryption keys that were used in the source system and stored in the secure storage in the file system. Repeat the check afterwards.

    For more information, see SAP Help Portal for your SAP NetWeaver release at http://help.sap.com/nw. Choose Start of the navigation pathApplication Help Next navigation step SAP NetWeaver Library: Function-Oriented View Next navigation step Security Next navigation step System Security Next navigation step System Security for SAP NetWeaver Application Server for ABAP Only Next navigation step Secure Storage (ABAP) Next navigation step Key Management Next navigation step Using Individual Encryption Keys Next navigation step Importing Missing Encryption KeysEnd of the navigation path.

  2. SECSTORE 030 (Incorrect global key for entry …): Restore a legacy key-file that was used in the source system.

    For more information, see the information on the SAP Help Portal for your SAP NetWeaver release at http://help.sap.com/nw. Choose Start of the navigation pathApplication Help Next navigation step SAP NetWeaver Library: Function-Oriented View Next navigation step Security Next navigation step System Security Next navigation step System Security for SAP NetWeaver Application Server for ABAP Only Next navigation step Secure Storage (ABAP) Next navigation step  Next navigation step Key Management Next navigation step Legacy Method for Using Individual Encryption Keys Next navigation step Importing Keys after a System CopyEnd of the navigation path.

  3. SECSTORE 031 (System-dependent data for entry … changed:…): Perform a record migration.

    For more information, see SAP Note 816861 Information published on SAP site.