Hello and welcome to the SAP HANA Academy.
The topic of this video tutorial series is SAP HANA 2.0 SPS 03, What’s New
and in this video we will discuss the topic area for installation and updates
and cover software authenticity verification.
Hi, I am Denys van Kempen.
Platform Lifecycle Management for SAP HANA 2.0 is a mature and stable technology which
has not changed all that much over the last couple of years.
In my view, that’s a good thing.
This means that for the latest release, there is no need to change any of the automated
processes to install or update SAP HANA components on-premise in your landscape.
Having said that, for SPS 03 we do have some new functionality.
One of them is support for persistent memory but as this technology is not yet available
at the time of recording, I cannot show you much.
Please check my What’s New blog for the latest information on this topic.
What I can show you is the new software authenticity verification which executed by default as
of SPS 03 on all downloaded components.
Now, to be clear, file signature verification is nothing new.
SAP software typically comes in the form of a SAR file, a SAP archive, a proprietary ZIP
file and to extract SAR files, you would use a utility called SAPCAR (or sapcar if you prefer).
This has been around for years.
Nothing to do with SAP HANA specifically.
You can check the signature with the minus uppercase V flag.
T for test, do not extract, v for verbose, in lowercase
and f for file with the name of the archive.
I have also specified the CRL here, a certificate revocation list, which you can download from SAP.
SAP.
If you run the command without -crl, you will be informed.
If you want to know more, check note 2178665, which explains in detail everything you need
to know about verification with SAPCAR.
What’s new in SPS 03, is that the installer now performs this check for us, automatically,
by default when we are using the resident installer.
Here we have the SAP HANA Platform Lifecycle Management tool web interface.
To update a SAP HANA system, for example, you would select the Update System and Components tile
Next, you need to provide the location of the installation kit
an note that we now have a check box “Verify Authenticity of the Installation Kit”.
There is a message informing us that this may take up to 5 minutes.
The whole kit zipped is about 13 GB.
However, on my system this only took about 30 seconds.
Your mileage may vary, of course.
Then, note the gear icon here on the toolbar below for advanced parameters configuration.
Here you enable or disable signature verification for components.
When we proceed and select the components we want to update, the components are checked.
Here we are updating an entire SAP HANA system.
We could also just want to add a new component, for example the AFL or Machine Learning library
and in that case we would like the component to be verified as well, of course.
We could also perform a completely new installation.
In this case, we will be using the non-resident installer, the one on the installation kit.
This time the verification will be switched off, by default, as you would first need to
manually verify that SAP HANA database installation kit has not been tampered with before you
can use it to verify other components.
One way is to use the SAPCAR -V flag I just showed you.
There are other ways as well and this is documented in Note 2577617.
So if you are interested, you might want to take a look at that.
Then, you can proceed with the installation using hdblcm and pass the —verify_signature=on
flag And now when we proceed with the installation,
and select the components to install, the authenticity of the components is verified.
Well, that’s it. So much What’s New - Installation and Update, Software Authenticity Verification.
Thanks for watching.
You can find more video tutorials on our YouTube channel.
If you would like to be informed about new video tutorials, please subscribe to our channel.
You can connect with us on LinkedIn or follow us on Twitter - as well for updates.
If you are watching this video on YouTube, do not hesitate to leave your comments to
the video page and, if you like, give us your vote on his video.
Thank you for watching.