We recently received advisory to change the default master key as part of security measure.
I have a quick question on this.
The command listed for the change is as below
RSEC_SSFS_DATAPATH=/usr/sap/<SID>/SYS/global/hdb/security/ssfs RSEC_SSFS_KEYPATH=<path to key file> rsecssfx changekey <paste the new key from step 2 here>
Does the value to this path(RSEC_SSFS_KEYPATH) come from hdbuserstore key location, which is a file SSFS_HDB.DAT
Also RSEC_SSFS_DATAPATH seem to imply the file SSFS_SID.DAT(SID = HANA DB SID) residing in /usr/sap/<SID>/SYS/global/hdb/security/ssfs. Is my understanding correct ?
Regards
Kalyan