Recently, searching the developer traces I found these messages, right at the beginning of the log:
RSecSSFs: Configuration value "rsec/ssfs_datapath" from profile explicitly overwritten by different value in environment variable RSEC_SSFS_DATAPATH [rsecssfs.c 4677] RSecSSFs: Configuration value "rsec/ssfs_keypath" from profile explicitly overwritten by different value in environment variable RSEC_SSFS_KEYPATH [rsecssfs.c 4686] RSecSSFs: Reverting overwriting of profile by different environment (disabled in dw) [rsecssfs.c 4696]
I checked the SSFS configuration, more precisely the instance parameters:
rsec/ssfs_keypath = $(DIR_GLOBAL)$(DIR_SEP)security$(DIR_SEP)rsecssfs$(DIR_SEP)key = /usr/sap/SID/SYS/global/security/rsecssfs/key
rsec/ssfs_datapath = $(DIR_GLOBAL)$(DIR_SEP)security$(DIR_SEP)rsecssfs$(DIR_SEP)data = /usr/sap/SID/SYS/global/security/rsecssfs/key
And also the environment variables on the central instance:
RSEC_SSFS_KEYPATH=/usr/sap/SID/SYS/global/security/rsecssfs/key
RSEC_SSFS_DATAPATH=/usr/sap/SID/SYS/global/security/rsecssfs/data
on the application servers:
RSEC_SSFS_KEYPATH=/sapmnt/SID/global/security/rsecssfs/key
RSEC_SSFS_DATAPATH=/sapmnt/SID/global/security/rsecssfs/data
Even if the two paths /usr/sap/SID/SYS/global/security/rsecssfs and /sapmnt/SID/global/security/rsecssfs point in the same location, it looks like the systems sees them differently that is why in also the environment variables on the application servers need to be changes to the same name path name /usr/sap/SID/SYS/global/security/rsecssfs/key and /usr/sap/SID/SYS/global/security/rsecssfs/data.