Guide - SUSE Linux Enterprise Server For SAP Applications .
GuideSUSE Linux Enterprise Server for SAPApplications 12 SP3
GuideSUSE Linux Enterprise Server for SAP Applications 12 SP3Publication Date: March 26, 2021SUSE LLC1800 South Novell PlaceProvo, UT 84606USAhttps://documentation.suse.comCopyright 2021 SUSE LLC and contributors. All rights reserved.Permission is granted to copy, distribute and/or modify this document under the terms of the GNU FreeDocumentation License, Version 1.2 or (at your option) version 1.3; with the Invariant Section being thiscopyright notice and license. A copy of the license version 1.2 is included in the section entitled “GNUFree Documentation License”.For SUSE trademarks, see http://www.suse.com/company/legal/ . All other third-party trademarks are theproperty of their respective owners. Trademark symbols ( , etc.) denote trademarks of SUSE and itsaffiliates. Asterisks (*) denote third-party trademarks.All information found in this book has been compiled with utmost attention to detail. However, this doesnot guarantee complete accuracy. Neither SUSE LLC, the authors, nor the translators shall be held liablefor possible errors or the consequences thereof.
ContentsAbout This Guide viii11.1What Is SUSE Linux Enterprise Server for SAPApplications? 1Software Components 2SUSE Linux Enterprise Server 2 SUSE Linux EnterpriseHigh Availability Extension 2 Simplified SAP HANA SystemReplication Setup 3 Installation Workflow 5 Page-CacheLimit 5 Malware Protection with ClamSAP 5 SAP HANASecurity 5 Simplified Operations Management 61.2Software Repository Setup 81.3Included Services 102Planning the Installation 132.1Hardware Requirements 132.2Downloading the Installation Image 142.3Installation Methods 142.4Overview of the Installation Workflow 152.5Required Data for Installing 162.6Partitioning 17Partitioning for the Operating System (stage 1) 17 Partitioning for the SAPSystem (stage 2) 173iiiInstalling the Operating System 193.1Using the Installation Workflow 193.2Using SLES for SAP Media from the Network 273.3Using an External AutoYaST Profile 28Guide
3.44Converting a SLES Installation to a SLES for SAP Installation 28Installing SAP Applications 294.1Products That Can Be Installed Using SAP Installation Wizard 294.2First Steps 304.3Using the SAP Installation Wizard 314.4Continuing an Installation Using an Installation Profile 414.5Partitioning for an SAP Application Without the SAP InstallationWizard 424.6Automated Installation of SAP Applications with AutoYaST 42SAP HANA Installation 42 SAP NetWeaver Installation 435Setting Up an Installation Server for SAP MediaSets 476Setting Up an SAP HANA Cluster 486.1Prerequisites 486.2Setup 496.3Using Hawk 567Tuning 577.1Kernel: Page-Cache Limit 577.2Tuning Systems with sapconf4 58Enabling and Disabling sapconf and Viewing Its Status 59 Configuringsapconf4 61 Removing sapconf 63 For More Information 637.3Tuning Systems with sapconf 5 64Enabling and Disabling sapconf and Viewing It's Status 64 Configuringsapconf5 66 Removing sapconf 67 For MoreInformation 68 Using tuned Together with sapconf 68ivGuide
7.4Tuning Systems with saptune 68Enabling saptune to Tune for an SAP Application 69 Customizinga SAP Note 70 Creating a new SAP Note 70 Deletinga SAP Note 70 Renaming a SAP Note 71 Showing theConfiguration of a SAP Note 71 Verifying a SAP Note or aSAP Solution 71 Simulating the Apply of a SAP Note or a SAPSolution 72 Disabling saptune 72 Tuning Kernel ParametersManually Using sysctl 72 For More Information 727.58Firewalling 748.1Configuring SuSEFirewall2 748.2Configuring HANA-Firewall 748.3SAProuter Integration 779vTuning Kernel Parameters Manually Using sysctl 73Encrypting Directories Using cryptctl 789.1Setting Up a cryptctl Server 799.2Setting Up a cryptctl Client 819.3Checking Partition Unlock Status Using Server-side Commands 849.4Unlocking Encrypted Partitions Manually 849.5Maintenance Downtime Procedure 859.6For More Information 8510Protecting Against Malware With ClamSAP 8610.1Installing ClamSAP 8610.2Creating a Virus Scanner Group in SAP NetWeaver 8610.3Setting Up the ClamSAP Library in SAP NetWeaver 8710.4Engaging ClamSAP 8810.5For More Information 90Guide
11Connecting via RDP 9112Creating Operating System Images 9312.1Creating Images with KIWI 9312.2Cleaning Up an Instance Before Using It as a Master Image 94Configuring clone-master-clean-up 95 Using clone-master-cleanup 95 For More Information 9513AA.1Important Log Files 96Additional Software for SLES for SAP 97Identifying a Base Product for SUSE Linux Enterprise Server for SAPApplications 97A.2SUSE Connect Program 98A.3SUSE Package Hub 99BPartitioning for the SAP System Using AutoYaST 100CSupplementary Media 102C.1product.xml 102C.2Own AutoYaST Ask Dialogs 103C.3Installing Additional Packages 104C.4Example Directory for Supplementary Media 104DviDocumentation Updates 105D.1April 25, 2018—SLES for SAP 12 SP3 Documentation Update 105D.2November 1, 2017—SLES for SAP 12 SP3 Documentation Update 106D.3September 7, 2017—SLES for SAP 12 SP3 FCS 106D.4May 10, 2017—SLES for SAP 12 SP2 Documentation Update 107D.5December 07, 2016—SLES for SAP 12 SP2 Documentation Update 107D.6November 07, 2016—SLES for SAP 12 SP2 FCS 108Guide
viiD.7March 23, 2016 109D.8February 29, 2016 109D.9February 15, 2016 109D.10May 29, 2015 111D.11April 29, 2015 111D.12October 28, 2013 112Guide
About This GuideSUSE Linux Enterprise Server for SAP Applications is the reference platform for the softwaredevelopment of SAP. It is optimized for SAP applications. This guide provides detailed information about installing and customizing SUSE Linux Enterprise Server for SAP Applications.SUSE Linux Enterprise High Availability Extension is also part of SUSE Linux Enterprise Serverfor SAP Applications.1 OverviewThe SUSE Linux Enterprise Server for SAP Applications Guide is divided into the followingchapters:What Is SUSE Linux Enterprise Server for SAP Applications?An overview of SUSE Linux Enterprise Server for SAP Applications.Planning the InstallationInformation on hardware requirements, the installation workflow, partitioning, and otherinstallation planning aspects.Installing the Operating SystemInstalling the SUSE Linux Enterprise Server operating system that forms the basis of SUSELinux Enterprise Server for SAP Applications.Installing SAP ApplicationsInstalling SAP applications on SUSE Linux Enterprise Server for SAP Applications, eitherdirectly after the installation of the operating system or in a running system.Setting Up an Installation Server for SAP Media SetsSetting up a server for all Installation Media used within your organization.Software ComponentsDescription of tools to configure SUSE Linux Enterprise Server for SAP Applications.2 Additional Documentation and ResourcesChapters in this manual contain links to additional documentation resources that are eitheravailable on the system or on the Internet.viiiOverviewSLES for SAP 12 SP3
For the latest updates to this guide, see https://documentation.suse.com/sles-sap/12-SP3 .You can nd numerous whitepapers, a best-practices guide, and other resources at theSUSE Linux Enterprise Server for SAP Applications resource library: r documentation on SUSE Linux Enterprise High Availability Extension, see https://documentation.suse.com/sle-ha-12.3 FeedbackSeveral feedback channels are available:Bugs and Enhancement RequestsFor services and support options available for your product, refer to http://www.suse.com/support/.To report bugs for a product component, go to https://scc.suse.com/support/requests ,log in, and select Submit New SR.MailFor feedback on the documentation of this product, you can also send a mail to doc-team@suse.de . Make sure to include the document title, the product version and the pub-lication date of the documentation. To report errors or suggest enhancements, provide aconcise description of the problem and refer to the respective section number and page(or URL).4 Documentation ConventionsThe following typographical conventions are used in this manual:/etc/passwd : directory names and le namesplaceholder : replace placeholder with the actual valuePATH : the environment variable PATHixFeedbackSLES for SAP 12 SP3
ls , --help : commands, options, and parametersuser : users or groupsAlt,Alt– F1 : a key to press or a key combination; keys are shown in uppercase as ona keyboardFile, File Save As: menu items, buttonsamd64, em64t, ipfThis paragraph is only relevant for the architectures amd64 , em64t ,and ipf . The arrows mark the beginning and the end of the text block.IBM Z, ipseriesThis paragraph is only relevant for the architectures z Systems andipseries . The arrows mark the beginning and the end of the text block.Dancing Penguins (Chapter Penguins, Another Manual): This is a reference to a chapter inanother manual.xDocumentation ConventionsSLES for SAP 12 SP3
1 What Is SUSE Linux Enterprise Server for SAP Applications?SUSE Linux Enterprise Server for SAP Applications is a bundle of software andservices that addresses the specific needs of SAP users. It is the only operating system that is optimized for all SAP software solutions.Target use cases include:Unix to Linux migrations and replatformingSAP appliancesSAP cloud deploymentsSUSE Linux Enterprise Server for SAP Applications consists of software components and serviceofferings which are described in the following sections. The figure Offerings of SUSE Linux EnterpriseServer for SAP Applications shows an overview of which software components and services are alsoavailable with other products from SUSE (green) and which are exclusively available with SUSELinux Enterprise Server for SAP Applications (blue).24 7 Priority Support for SAPExtended Service Pack Overlap Support18 Month Grace PeriodPage CacheManagementAntivirusClamSAPHigh Availability forSAP NetWeaver & SAP HANASUSE Linux EnterpriseHigh Availability ExtensionSAP HANASecuritySAP HANAHA rInstallationInstallationWorkflowReliable, Scalable and Secure Operating SystemSUSE Linux Enterprise Server24 7 Priority Support for SAPFIGURE 1.1: OFFERINGS OF SUSE LINUX ENTERPRISE SERVER FOR SAP APPLICATIONS1SLES for SAP 12 SP3
1.1 Software ComponentsAs depicted in Figure 1.1, “Offerings of SUSE Linux Enterprise Server for SAP Applications”, SUSE LinuxEnterprise Server for SAP Applications is based on SUSE Linux Enterprise Server but containsseveral additional software components such as SUSE Linux Enterprise High Availability Exten-sion, the kernel page-cache limit feature, and the installation workflow. These software components are brie y explained in the following sections.1.1.1SUSE Linux Enterprise ServerThe current release is based on SUSE Linux Enterprise Server 12 SP3. SUSE Linux EnterpriseServer is the most interoperable platform for mission-critical computing, both physical and virtual.1.1.2SUSE Linux Enterprise High Availability ExtensionThis component consists of:Flexible, policy-driven clusteringCluster-aware le system and volume managementContinuous data replicationSetup and installationManagement and administration toolsResource agents, also for SAPVirtualization-awareSUSE Linux Enterprise High Availability Extension provides two resource agents specifically forworking with SAP applications:SAPInstance which allows starting and stopping instances of SAP products.SAPDatabase which allows starting and stopping all databases supported by SAP appli-cations (SAP HANA, SAP MaxDB, SAP ASE, Oracle, Sybase, IBM DB2).2Software ComponentsSLES for SAP 12 SP3
For more information about SUSE Linux Enterprise High Availability Extension, see the HighAvailability Guide (https://documentation.suse.com/sle-ha-12 ) and the White Papers and BestPractice Guides in the SUSE Linux Enterprise Server for SAP Applications Resource /resource-library/ ).1.1.3Simplified SAP HANA System Replication SetupSUSE Linux Enterprise Server for SAP Applications supports SAP HANA System Replication usingcomponents of SUSE Linux Enterprise High Availability Extension and two additional resourceagents (RA). Additionally, SUSE Linux Enterprise Server for SAP Applications ships with a YaSTwizard that simplifies the cluster setup.1.1.3.1SAPHana Resource AgentThis resource agent from SUSE supports scale-up scenarios by checking the SAP HANA databaseinstances for whether a takeover needs to happen. Unlike with the pure SAP solution, takeoverscan be automated.It is configured as a master/slave resource: The master assumes responsibility for the SAP HANAdatabases running in primary mode, whereas the slave is responsible for instances that are operated in synchronous (secondary) status. In case of a takeover, the secondary (slave resourceinstance) can automatically be promoted to become the new primary (master resource instance).This resource agent supports system replication for the following in scale-up scenarios:Performance-Optimized Scenario. Two servers (A and B) in the same SUSE Linux Enter-prise High Availability Extension cluster, one primary (A) and one secondary (B). The SAPHANA instance from the primary server (A) is replicated synchronously to the secondaryserver (B).Cost-Optimized Scenario. The basic setup of A and B is the same as in the Performance-Op-timized Scenario. However, the secondary server (B) is also used for non-productive pur-poses, such as for an additional SAP HANA database for development or QA. The production database is only kept on permanent memory, such as a hard disk. If a takeover needs3Simplified SAP HANA System Replication SetupSLES for SAP 12 SP3
to occur, the non-productive server will be stopped before the takeover is processed. Thesystem resources for the productive database are then increased as quickly as possible viaan SAP hook call-out script.Chain/Multi-Tier Scenario. Three servers (A, B, and C), of which two are located in thesame SUSE Linux Enterprise High Availability Extension cluster (A and B). The third server(C) is located externally. The SAP HANA system on the primary server (A) is replicatedsynchronously to the secondary server (B). The secondary server (B) is replicated asynchronously to the external server (C).If a takeover from A to B occurs, the connection between B and C remains untouched.However, B is not allowed to be the source for two servers (A and C), as this would be a“star” topology which is not supported with current SAP HANA versions (such as SPS11).Using SAP HANA commands, you can then manually decide what to do:The connection between B and C can be broken, so that B can connect to A.If replication to the external site (C) is more important than local system replication,the connection between B and C can be kept.For all of the scenarios, SUSE Linux Enterprise Server for SAP Applications supports both sin-gle-tenant and multi-tenant (MDC) SAP HANA databases. That is, you can use SAP HANA databases that serve multiple SAP applications.1.1.3.2SAPHanaTopology Resource AgentTo make configuring the cluster as simple as possible, SUSE has developed the SAPHanaTopol-ogy resource agent. This agent runs on all nodes of a SUSE Linux Enterprise High AvailabilityExtension cluster and gathers information about the status and configurations of SAP HANAsystem replications. It is designed as a normal (stateless) clone.1.1.3.3YaST Wizard to Set Up SAP HANA ClustersSUSE Linux Enterprise Server for SAP Applications now additionally ships a YaST wizard thatmanages the initial setup of such clusters according to best practices. The wizard is part of thepackage yast2-sap-ha and can be started using YaST, via HA Setup for SAP Products.For more information, see Chapter 6, Setting Up an SAP HANA Cluster.4Simplified SAP HANA System Replication SetupSLES for SAP 12 SP3
1.1.3.4For More InformationFor more information, see:The High Availability Guide at https://documentation.suse.com/sles-12 .The Best Practices in the Resource Library at e-library/. In particular, see Setting up a SAP HANA SR performance optimized in-frastructure and Setting up a SAP HANA SR cost optimized infrastructure.1.1.4Installation WorkflowThe installation workflow offers a guided installation path for both the SUSE Linux EnterpriseServer operating system and the SAP application. For more information, see Section 2.4, “Overviewof the Installation Workflow”.Additionally, the installation workflow can be extended by third-party vendors or customersusing Supplementary Media. For more information about creating Supplementary Media, seeAppendix C, Supplementary Media.1.1.5Page-Cache LimitYou can limit the kernel le system cache size to influence swapping behavior. With this feature,you can often gain better performance by allocating memory to an application.For more information, see Section 7.1, “Kernel: Page-Cache Limit”.1.1.6Malware Protection with ClamSAPClamSAP integrates the ClamAV anti-malware toolkit into SAP NetWeaver and SAP Mobile Plat-form applications to enable cross-platform threat detection. For example, you can use ClamSAPto allow an SAP application to scan for malicious uploads in HTTP uploads.For more information, see Chapter 10, Protecting Against Malware With ClamSAP.1.1.7SAP HANA SecuritySUSE Linux Enterprise Server for SAP Applications contains additional features to help set upwell-secured SAP HANA installations.5Installation WorkflowSLES for SAP 12 SP3
1.1.7.1Firewall for SAP HANASecuring SAP HANA can require many additional firewall rules. To simplify firewall setups forSAP HANA, SUSE Linux Enterprise Server for SAP Applications contains the package HANAFirewall which provides preconfigured rules and integrates with SuSEFirewall2.For more information, see Section 8.2, “Configuring HANA-Firewall”.1.1.7.2Hardening Guide for SAP HANAFor information on hardening the underlying operating system, see the SUSE Linux Enterprise Server for SAP Applications resource library: e-library/1.1.8. There, nd the document OS Security Hardening for SAP HANA.Simplified Operations ManagementSUSE Linux Enterprise Server for SAP Applications combines several features that enable simplified operations management.1.1.8.1System Tuning with saptuneThe system tuning application saptune allows you to automatically and comprehensively tuneyour system as recommended by SAP for use with SAP S/4HANA, SAP NetWeaver, or SAPHANA/SAP BusinessOne. To do this, saptune activates tuned profiles. These allow tuningseveral kernel parameters, depending on the hardware components you are using, such as theamount of available RAM.For more information, see Section 7.2, “Tuning Systems with sapconf4”.1.1.8.2Storage Encryption for Hosted Applications with cryptctlToday, databases and similar applications are often hosted on external servers that are servicedby third-party sta . Certain data center maintenance tasks require third-party sta to directlyaccess affected systems. In such cases, privacy requirements necessitate disk encryption.6Simplified Operations ManagementSLES for SAP 12 SP3
cryptctl allows encrypting sensitive directories using LUKS and offers the following additionalfeatures:Encryption keys are located on a central server which can be located on customer premises.Encrypted partitions are automatically remounted after an unplanned reboot.For more information, see Chapter 9, Encrypting Directories Using cryptctl.1.1.8.3Patterns Providing Dependencies of SAP ApplicationsTo simplify working with software dependencies of SAP applications, SUSE has created patternsthat combine relevant dependency RPM packages for specific applications:SAP BusinessOne Server BaseSAP HANA Server BaseSAP NetWeaver Serve
D.1 April 25, 2018—SLES for SAP 12 SP3 Documentation Update105 D.2 November 1, 2017—SLES for SAP 12 SP3 Documentation Update106 D.3 September 7, 2017—SLES for SAP 12 SP3 FCS106 D.4 May 10, 2017—SLES for SAP 12 SP2 Documentation Update107 D.5 December 07, 2016—SLES for SAP 12 SP2 Documentation Update107
Hardening Guide SUSE Linux Enterprise Server 12 SP5 Deals with the particulars of installing and setting up a secure SUSE Linux Enter-prise Server, and additional post-installation processes required to further secure . The SUSE Linux Enterprise Server Security and Hardening Guide deals with the particulars of in-
Sep 25, 2009 · Oracle Enterprise Linux 5 Update 2 (Kernel 2.6.18 or later) Red Hat Enterprise Linux 4 Update 7 (Kernel 2.6.9 or later) Red Hat Enterprise Linux 5 Update 2 (Kernel 2.6.18 or later) SUSE Linux Enterprise Server 10 SP2 (Kernel 2.6.16.21 or later) SUSE Linux Enterprise Server 11 (2.6.27.19 or later)!! ACFS and ADVM are ONLY supported on RHEL 5 and .
Linux in a Nutshell Linux Network Administrator’s Guide Linux Pocket Guide Linux Security Cookbook Linux Server Hacks Linux Server Security Running Linux SELinux Understanding Linux Network Internals Linux Books Resource Center linux.oreilly.comis a complete catalog of O’Reilly’s books on Linux and Unix and related technologies .
Operating System SUSE Linux Enterprise Server 12 with service pack 4 or SUSE Linux Enterprise Server 15 with service pack 1, Red Hat Enterprise Linux 6.x or 7.x (7.2 or higher) or 8.x, CentOS 6.x or 7.x (7.2 or higher) or 8.x, Debian GNU/Linux 9.x, 10.x and Ubuntu Server 16.04 LTS or 18.04 L
OpenStack Juno Big Data service SUSE Storage integration SUSE Linux Enterprise Server 12 Compute Node GA GA GA SUSE Cloud 5 High Availability Guests Docker support (tech preview) SUSE Cloud 6 OpenStack Kilo Install
Red Hat Enterprise Linux 7 - IBM Power System PPC64LE (Little Endian) Red Hat Enterprise Linux 7 for IBM Power LE Supplementary (RPMs) Red Hat Enterprise Linux 7 for IBM Power LE Optional (RPMs) Red Hat Enterprise Linux 7 for IBM Power LE (RPMs) RHN Tools for Red Hat Enterprise Linux 7 for IBM Power LE (RPMs) Patch for Red Hat Enterprise Linux - User's Guide 1 - Overview 4 .
Microsoft Agent Operating Systems Windows Server (of course) Amazon Linux 2012.09 -- 2017 CentOS Linux 5,6, and 7 Oracle Linux 5,6, and 7 Red Hat Enterprise Linux Server 5,6 and 7 Debian GNU/Linux 6, 7, 8, and 9 Ubuntu 12.04, 14.04, 16.04 LTS SUSE Linux Enterprise Server 11/ 12 Partner Solutions
the way your SUSE LINUX system operates. This manual introduces you to Linux system administration basics, such as file systems, kernels, boot processes, and the configuration of the Apache Web server. The SUSE LINUX Administration Guide has five major categories: Installation System installation and configuration with YaST, special .
