Question Re: SAP Encryption Key - Database - SSFS in Technology Q&A

SAP Encryption Key - Database - SSFS

ily83 — Fri, 13 Sep 2024 15:10:55 GMT

Hi all,

In the command line:

rsecssfx generatekey -getPlainValueToConsole

What is the format of the key generated? (AES 256 bits)?

Can this command

rsecssfx changekey <new key>

be used with a key generated externally? with openssl or other? In this case what would be the format.

Kind regards,
ily83

Re: SAP Encryption Key - Database - SSFS

Maciej__Galica — Fri, 25 Apr 2025 20:41:01 GMT

When you run:

rsecssfx generatekey -getPlainValueToConsole
It generates a random symmetric key used for internal encryption purposes in SAP (example: for credentials, connection passwords).

generated key is 256-bit AES key (32 bytes, hex-encoded).

Typically printed as a 64-character hexadecimal string (each byte = 2 hex digits).

Thanks