Skip to content

Commit 28fc72f

Browse files
JCurrie27JCurrie27
committed
Adding HANA express edition tutorials
1 parent 9d55cea commit 28fc72f

22 files changed

Lines changed: 638 additions & 0 deletions

‎tutorials/hxe-ua-configure-security/hxe-ua-configure-security.md‎

Lines changed: 133 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,133 @@
1+
---
2+
title: Configure SAP HANA, express edition Security
3+
description: Your SAP HANA, express edition installation has several preconfigured security settings. Before using SAP HANA, express edition, complete these security tasks.
4+
tags: [ tutorial>beginner, topic>HXE, products>sap-hana,-express-edition ]
5+
---
6+
## Prerequisites
7+
- **Proficiency:** Beginner
8+
- **Tutorials:** [Start Using SAP HANA, express edition](http://go.sap.com/developer/tutorials/hxe-ua-getting-started-vm.html)
9+
10+
## Next Steps
11+
- Select a tutorial from the [Tutorial Navigator](http://go.sap.com/developer/tutorial-navigator.html) or the [Tutorial Catalog](http://go.sap.com/developer/tutorials.html)
12+
13+
## Details
14+
### You will learn
15+
How to perform security tasks to ensure that your security settings are not known outside your organization. You will learn how to apply the HXE license to ensure your installation keeps working after the default grace period expires.
16+
17+
### Time to Complete
18+
**15 Min**.
19+
20+
---
21+
22+
### Apply the HANA, express-edition license key
23+
If you don’t apply the license, your SAP HANA, express edition will stop working after the default grace period of 60-90 days. If you have SAP HANA Studio or the HANA Studio eclipse plugin then begin at **Using Studio**. Otherwise proceed to **Using HDBSQL**.
24+
25+
### Applying the License Key with HANA Studio
26+
27+
#### Obtain your hardware key
28+
If you are using the SAP HANA Studio eclipse plugin, you can do the following.
29+
1. Start SAP HANA studio.
30+
2. On the Systems tab, select SYSTEMDB@HXE (SYSTEM).
31+
3. View properties for SYSTEMDB@HXE (SYSTEM).
32+
4. Select License properties. Open the System License tab.
33+
5. Make a note of the Hardware Key value.
34+
35+
#### Order your license key
36+
1. Go to [sap.com/minisap](http://sap.com/minisap) and fill out all required information.
37+
2. For System ID, select HXE.
38+
3. For Hardware Key, enter the hardware key value you recorded earlier.
39+
4. Submit the form. The license key is emailed to you.
40+
5. Save the license key file to your hard disk under the name `HXE.txt`.
41+
42+
#### Apply the license key
43+
1. In SAP HANA studio, view properties for SYSTEMDB@HXE (SYSTEM).
44+
2. Select License properties. Open the System License tab.
45+
3. Click Delete License Key to delete any existing licenses.
46+
4. Click Install License Key.
47+
5. Navigate to your license file and select it.
48+
After confirmation, the properties page refreshes with your new license information.
49+
6. Proceed to **Change the SSFS Master Keys**
50+
51+
### Applying the License Key with HDBSQL
52+
53+
#### Obtain your hardware key
54+
1. Login in to your HANA, express edition as `hxeadm`.
55+
2. Enter the following command:
56+
57+
`hdbsql -u system -p <your password> -d SystemDB "SELECT HARDWARE_KEY FROM M_LICENSE"`
58+
59+
3. Copy or otherwise record the value returned for `HARDWARE_KEY`
60+
61+
#### Order your license key
62+
1. Go to [sap.com/minisap](http://sap.com/minisap) and fill out all required information.
63+
2. For System ID, select HXE.
64+
3. For Hardware Key, enter the hardware key value you recorded earlier.
65+
4. Submit the form. The license key is emailed to you.
66+
5. Save the license key file to your hard disk under the name `HXE.txt`.
67+
68+
#### Apply the license key
69+
70+
1. Make a directory on your HXE machine to store the license.
71+
72+
`mkdir ~/license`
73+
74+
This command will make the directory `/usr/sap/HXE/home/license`
75+
2. If you do not have an SCP client, please download and install one. There are several very good open source `scp` clients available for Windows, Mac and Linux. Copy the file from your hard disk to the `/usr/sap/HXE/home/license` directory.
76+
3. Issue the following command to install the license key.
77+
78+
`hdbsql -u system -p HANAhxe2 -d SystemDB -I '/usr/sap/HXE/home/license/HXE_License.txt'`
79+
80+
4. Confirm that the license key was installed by issuing the following command.
81+
82+
`hdbsql -u system -p HANAhxe2 -d SystemDB "select hardware_key, expiration_date from m_licenses"`
83+
84+
The expiration date should be one year from today.
85+
5. Proceed to **Change the SSFS Master Keys**.
86+
87+
88+
### Change the SSFS Master Keys
89+
1. Log on to the HANA system as **`hxeadm`** and shut the system down using the `sapcontrol` program:
90+
**/`usr/sap/hostctrl/exe/sapcontrol` -nr 00 –function Stop**
91+
2. Re-encrypt the master key of the instance SSFS:
92+
**`RSEC_SSFS_DATAPATH`=/`usr`/sap/`HXE`/`SYS`/`global`/`hdb`/security/`ssfs`
93+
export `RSEC_SSFS_DATAPATH`
94+
`RSEC_SSFS_KEYPATH=/usr/sap/HXE/SYS/global/hdb/security/ssfs rsecssfx changekey` $(`rsecssfx generatekey -getPlainValueToConsole`)**
95+
3. Add following to the end of /`usr`/sap/`HXE`/`SYS`/`global`/`hdb`/custom/`config`/`global.ini`:
96+
**[cryptography]
97+
`ssfs_key_file_path = /usr/sap/HXE/SYS/global/hdb/security/ssfs`**
98+
4. Re-encrypt the system PKI SSFS with a new key - HDB start:
99+
**`RSEC_SSFS_DATAPATH=/usr/sap/HXE/SYS/global/security/rsecssfs/data`
100+
`export RSEC_SSFS_DATAPATH RSEC_SSFS_KEYPATH=/usr/sap/HXE/SYS/global/security/rsecssfs/key rsecssfx changekey $(rsecssfx generatekey -getPlainValueToConsole)`**
101+
5. Restart the system:
102+
**/`usr/sap/hostctrl/exe/sapcontrol` -nr 00 -function Start**
103+
104+
For more information, see the [Change the SSFS Master Keys](https://help.sap.com/saphelp_hanaplatform/helpdata/en/58/1593c48739431caaccc3d2ef55c23f/frameset.htm) topic in the *SAP HANA Administration Guide*.
105+
106+
### Change the Root Key
107+
Change the root key of your installation.
108+
1. Log on to the HANA system as **`hxeadm`** and shut the system down using the `sapcontrol` program:
109+
**/`usr/sap/hostctrl/exe/sapcontrol` –nr 00 –function Stop**
110+
2. Generate a new root encryption key using the **`hdbnsutil`** program:
111+
**cd /`usr/sap/HXE/HDB00/exe`
112+
./`hdbnsutil` -`generateRootKeys` --type=`DPAPI`**
113+
3. Restart the system:
114+
**/`usr/sap/hostctrl/exe/sapcontrol` -nr 00 -function Start**
115+
4. Reset the consistency information in the SSFS using the `hdbcons` program:
116+
**cd /`usr/sap/HXE/HDB00/exe`
117+
./`hdbcons "crypto ssfs resetConsistency`" -e `hdbnameserver`**
118+
5. You have 20 seconds to rerun the command again to completely rewrite `ssfs` consistency information:
119+
**./`hdbcons` -e `hdbnameserver` "crypto `ssfs resetConsistency`"**
120+
6. Change all application keys so that they are encrypted with the new root key by using SAP HANA studio or SAP HANA HDBSQL:
121+
**ALTER SYSTEM APPLICATION ENCRYPTION CREATE NEW KEY**
122+
123+
For more information, see the [Change the Root Key of the Internal Data Encryption Service](https://help.sap.com/saphelp_hanaplatform/helpdata/en/8f/bb69c47c224b3292ba078684f176e3/frameset.htm) topic in the *SAP HANA Server Installation and Update Guide*.
124+
125+
### Deactivate the SYSTEM user
126+
1. Log in as SYSTEM user to create a user with the USER ADMIN system privilege:
127+
**/`usr`/sap/HXE/HDB00/`exe/hdbsql -d SystemDB` -u SYSTEM -p <SYSTEM_PWD> "CREATE USER `MyAdminUser` PASSWORD <`MyAdminUserPwd`> NO `FORCE_FIRST_PASSWORD_CHANGE`;"
128+
/`usr`/sap/HXE/HDB00/`exe/hdbsql` -d `SystemDB` -u SYSTEM -p <SYSTEM_PWD> "GRANT USER ADMIN to `MyAdminUser` WITH ADMIN OPTION ;" **
129+
2. Log in as **`MyAdminUser`** to deactivate SYSTEM:
130+
**/`usr`/sap/HXE/HDB00/`exe`/`hdbsql` -d `SystemDB` -u `MyAdminUser` -p <`MyAdminUserPwd`> "ALTER USER SYSTEM DEACTIVATE USER NOW;"**
131+
132+
## Next Steps
133+
- Select a tutorial from the [Tutorial Navigator](http://go.sap.com/developer/tutorial-navigator.html) or the [Tutorial Catalog](http://go.sap.com/developer/tutorials.html)

‎tutorials/hxe-ua-getting-started-binary/hxe-ua-getting-started-binary.md‎

Lines changed: 101 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,101 @@
1+
---
2+
title: Getting Started with SAP HANA, express edition (Binary Installer Method)
3+
description: Explore how to connect to the SAP Web IDE for SAP HANA, Express Edition to start developing your project.
4+
tags: [ tutorial>beginner, products>sap-hana ]
5+
---
6+
## Prerequisites
7+
- Install SAP HANA, express edition. See [Installing Binary](http://go.sap.com/developer/tutorials/hxe-ua-installing-binary.html).
8+
9+
## Next Steps
10+
- Select a tutorial from the [Tutorial Navigator](http://go.sap.com/developer/tutorial-navigator.html) or the [Tutorial Catalog](http://go.sap.com/developer/tutorials.html)
11+
12+
## Details
13+
### You will learn
14+
How to configure the binary install of SAP HANA, express edition.
15+
16+
For troubleshooting information, see [SAP HANA, express edition Troubleshooting](http://go.sap.com/developer/how-tos/hxe-ua-troubleshooting.html).
17+
### Time to Complete
18+
**20 Min.**
19+
---
20+
### Record Your System's IP address
21+
22+
1. In a terminal, enter: `/sbin/ifconfig`.
23+
2. The IP address is listed under the `eth0 interface` as `inet addr`. In the following example, the IP address is 10.172.90.53:
24+
25+
`etho Link encap:Ethernet HWaddr 00:0C:29:06:1F:93 inet addr:10.172.90.53`
26+
27+
### Test Your Server installation
28+
29+
1. In a terminal, enter: `HDB info`. The following services must be running:
30+
* `hdbnameserver`
31+
* `hdbcompileserver`
32+
* `hdbpreprocessor`
33+
* `hdbwebdispatcher`
34+
* `hdbdiserver` (if XSA is installed)
35+
* `XS services` (if XSA is installed)
36+
2. If any services are not running, enter `HDB start`. When the prompt returns, the system is started.
37+
38+
### Test XSC, XSA, and Web IDE
39+
40+
1. Check if XSC is working by going to the following URL:
41+
`http://<ip-address-of-VM>:8000`
42+
2. Check if XSA is working:
43+
a. In a terminal, use the following command to log into XSA services:
44+
`xs login -u XSA_ADMIN -p <password>`
45+
b. View a list of XSA applications using: `xs apps`
46+
c. Confirm that `webide` shows in the list of XSA applications. Note the URL for it.
47+
3. Open the URL for Web IDE in a browser to confirm that it loads.
48+
49+
### Install Eclipse and SAP HANA Tools
50+
51+
#### Prerequisites
52+
* Confirm that your machine meets the system requirements for SAP HANA Tools, listed at [https://tools.hana.ondemand.com/#hanatools](https://tools.hana.ondemand.com/#hanatools)
53+
54+
55+
1. Download and install Eclipse Mars from [https://eclipse.org/downloads/](https://eclipse.org/downloads/), selecting one of the following packages:
56+
* Eclipse IDE for Java EE Developers
57+
* Eclipse IDE for Java Developers
58+
2. Open Eclipse and select a workspace.
59+
3. Install SAP HANA Tools:
60+
a. Select _Help > Install New Software_
61+
b. In the **Work with** field, enter https://tools.hana.ondemand.com/mars and click Add.
62+
c. In the **Name** field, enter SAP HANA, express edition.
63+
d. Expand the **SAP HANA Tools** node.
64+
e. Select **SAP HANA Administrator (Developer Edition)**.
65+
f. Accept the installation wizard prompts and restart Eclipse.
66+
g. Select _Window > Perspective > Open Perspective > Other_.
67+
h. Select the **SAP HANA Administration Console** perspective.
68+
4. Add the SAP HANA, express edition system:
69+
a. On the **Systems** view, right-click and select **Add System**, or click the **Add System** button.
70+
b. Enter the following information and click **Next**:
71+
* Host Name: the IP address for your system
72+
* Instance Number: 00
73+
* Mode: Multiple containers, System database
74+
c. Select Authentication by database user and enter the credentials for your SYSTEM user. Click **Finish** to connect.
75+
76+
### Obtain and Apply a License Key
77+
78+
1. Obtain your hardware key:
79+
a. In Eclipse, connect to your system.
80+
b. In the **Systems** view, right-click on your system and select **Properties**
81+
c. Select **License**, then the **System License** tab.
82+
d. Make a note of your hardware key.
83+
2. Order your license key:
84+
a. In a browser, go to [http://www.sap.com/minisap](http://www.sap.com/minisap) and complete the form.
85+
b. For **System ID**, select **HXE - SAP HANA, express edition (32 GB)**.
86+
c. For **Hardware Key**, enter the hardware key for your system.
87+
d. Submit the form. The license key is emailed to you.
88+
3. Apply the license key:
89+
a. In Eclipse, click **Delete License Key** to remove existing licenses.
90+
b. Click **Install License Key** and select the license key file.
91+
92+
### Deactivate the SYSTEM user
93+
94+
1. In a terminal, create a new admin user with the USER ADMIN system privilege:
95+
`/usr/sap/HXE/HDB00/exe/hdbsql -d SystemDB -u SYSTEM -p <SYSTEM-password> "CREATE USER <admin-username> PASSWORD <admin-password> NO FORCE_FIRST_PASSWORD_CHANGE;"
96+
/usr/sap/HXE/HDB00/exe/hdbsql -d SystemDB -u SYSTEM -p <SYSTEM-password> "GRANT USER ADMIN TO <admin-username> WITH ADMIN OPTION;"`
97+
2. Use the new admin user to deactivate the SYSTEM user:
98+
`/usr/sap/HXE/HDB00/exe/hdbsql -d SystemDB -u <admin-username> -p <admin-password> "ALTER USER SYSTEM DEACTIVATE USER NOW;"`
99+
100+
## Next Steps
101+
- Select a tutorial from the [Tutorial Navigator](http://go.sap.com/developer/tutorial-navigator.html) or the [Tutorial Catalog](http://go.sap.com/developer/tutorials.html)

‎tutorials/hxe-ua-getting-started-vm/HXE_hdb_info.PNG‎

16.5 KB
Loading

0 commit comments

Comments
 (0)