Hello and welcome to the SAP HANA Academy.
The topic of this video tutorial series is Getting Started with SAP HANA on the Google Cloud Platform
and in this video we will perform the post deployment configuration.
Hi, I am Denys van Kempen.
I am connect here to the Console and in the menu Products & services, I will select Deployment Manager.
Select your the SAP HANA, express edition (server + applications) deployment
and take a look at the Suggested next steps section on the right pane.
The first one mentioned is Post Deployment Configuration.
Before attempting to connect to SAP HANA, express edition,
please run the following command to complete the installation.
This configures security settings for your deployment.
So, let’s proceed.
You can copy the command here, saves a few key strokes, and then select the SSH button
here to open a terminal session to the HANA server.
Connecting…
Transferring SSH keys to the VM.
SSH, secure shell - you can also connect to the VM from the Compute Engine, VM instances page.
If you have installed the Google Cloud client on your computer, you can also use that, of course.
We will address this in another video.
To start SSH in a browser takes a couple of seconds and then we are connected.
You will see the generic SUSE Linux Enterprise Server 12 welcome screen.
64-bit, SP 2.
Let’s paste in the command: control or command V should work, Windows or Mac: sudo su - hxeadm
For those less familiar with Linux, what we are doing here is running the substitute user
command (su) for the user hxeadm.
The dash is needed to load the login shell for this user, to get all the environment variables.
Normally, you would be prompted to provide the password of the user - safety first.
But as we do not know the password at this stage, we will run the command as the super
user (sudo = superuser do).
For this to work, your account needs to be on the superuser-do list, and Google assumes,
as we have created the VM, we should be responsible enough to handle this, so my account,
you can see it in the prompt (d_van_kempen) is on the sudo list.
Yours will be too.
It is your Google Cloud account, in fact.
That’s why it took some time for the SSH keys to be transferred.
OK
Welcome to SAP HANA, express edition 2.0
The system needs to be configured before use.
You are prompted to provide a new HANA database master password.
Now, in fact there is no such thing as a HANA database master password.
Look it up in the HANA documentation and your search will return no hits.
However, this initialisation script will reset a number of passwords for us, both for the
operating system administration account (hxeadm), as for a couple of databases users.
We will see them listed.
8 characters, uppercase, lowercase, digit.
Don’t make it too complicated at this stage; I will show you how you can set the passwords later on.
Then we are prompted if we need to use a proxy server to access the internet.
The same question is asked if you had downloaded SAP HANA express edition using the download
manager to run locally, so not in the cloud.
Your computer might be in the office, behind a proxy and this needs to be configured properly.
Here, however, we are on the Google Cloud Platform and there is no proxy, so the answer is No.
Although, I guess we could have created a proxy server and put express behind it
but this is definitely a more advanced scenario, so I am not really sure why we get this question here.
Then we are informed that XSA configuration will take a while.
What’s a while?
In my case, it took exactly 8 minutes and 10 seconds.
You should have similar mileage.
I’d be surprised if this was very different across zones.
I will select that I wish to wait for XSA configuration to finish with a Yes
so we can see the output and provide some explanation.
If you select No here, that’s perfectly fine as well, of course.
Summary before execution - sounds a bit scary but we see our host name printed here,
the domain name, it is your project ID with internal appended.
So, yes, this is not a public domain name.
To connect, we will have to use the external IP we created in a previous video.
We also the location of the log file.
Should anything go wrong, we could look it up there.
Let’s proceed.
The HANA system is started first.
You get a curious message.
If you want to know what it means, you can watch the video I have recorded about stopping
and starting SAP HANA on the command line in this series, with sapcontrol.
Then the SYSTEM user,, that’s the database super user, password is reset for both the
system database and the HXE (hana express) tenant database.
HANA express is a multi-tenant database container system and we have a system database and a tenant.
In earlier express versions, only the system database was included.
Now, we have both.
Then, a password protected backup of the root keys is made - the password is the one you set, so don’t forget.
You will need it to in case you need to restore the root keys.
Then the master keys are re-encrypted.
There is a video in the Express playlist that explains in some detail what’s happening here.
So, you can watch that if you are interested.
There are two master keys: one for the instance SSFS and one for system PKI.
Then, the root keys for the system database are generated and, after a backup, activated.
There is a key for data volume encryption, for redo log encryption, and one for the encryption service.
So, that’s why we have three keys here.
The same is repeated for the HXE tenant database.
Then - I will pause the output now for a moment -, the passwords for the database users
XSA_ADMIN, XSA_DEV and the telemetry user TEL_ADMIN are reset.
TEL_ADMIN will also be reset on the tenant, in a minute.
We will be using XSA_ADMIN to connect to the XSA Administration tool and also to HANA cockpit, for example.
The XSA_DEV user, we will be using to connect to the SAP Web IDE for SAP HANA,
the development environment.
XSA_ADMIN has no access to that.
The script is waiting for the cockpit app to start.
Then we see the message change TEL_ADMIN user password on “SystemDB” database.
At this stage, the process appears to hang but be patient, eventually it will continue.
It takes about two minutes, or so.
I will fast-forward the video here for you.
The cockpit will be restaged and restarted
The same operation is then executed on the tenant database HXE, change TEL_ADMIN password.
Also takes two minutes.
And then we are done.
Congratulations!
SAP HANA, express edition 2.0 is configured.
In the next video, we will connect to XSA and see what applications we have got.
You can find more video tutorials on our YouTube channel.
If you would like to be informed about new video tutorials, please subscribe to our channel.
You can connect with us on LinkedIn or follow us on Twitter, as well for updates.
And we also have a page on Facebook and Google+.
If you are watching this video on YouTube, do not hesitate to leave your comments to
the video page and, if you like, give us your vote on his video.
Thank you for watching.