> Essential > Databases > SAP HANA > SAP HANA Configuration

Enable SSL Communication with the SAP HANA System

Updated

If the SAP HANA system is configured to use an SSL (Secure Sockets Layer) connection, you must enable the Commvault software to authenticate access to the SAP HANA system.

Before You Begin

If the SAP HANA environment uses a Secure Sockets Layer (SSL) connection, obtain the name of the SSL provider and the SSL trust store file that stores the CA-signed certificates.

Procedure

  1. From the navigation pane, go to Protect > Databases.

    The Instances page appears.

  2. Click the SAP HANA instance.

    The instance page appears.

  3. In the General section, click Edit.

    The Edit SAP HANA instance dialog box appears.

  4. Move the Enable SSL toggle key to the right, and then enter the following:

    • In the Service provider box, enter the service provider that is used for the SSL connection.

      For example, enter commoncrpto.

    • In the SSL trust store box, enter the trust store name for the SSL connection.

      For example, enter sapcli.pse.

  5. Click Save.

SAP HANA Multinode SSL Configuration

If you have two node SAP HANA setup (For example, sdehana01 and sdehana02), perform the following steps:

  1. Make sure that you have already completed SSL configuration as per SAP guideline.

    mnoadm@sdehana01:/usr/sap/MNO/HDB02> ls -ltr

    drwxr-x--- 10 mnoadm sapsys 216 Sep 26 14:54 sdehana01

    drwxr-x--- 9 mnoadm sapsys 191 Sep 26 14:54 sdehana02

  2. On other nodes, copy sapcli.pse.

    For example, mnoadm@sdehana01:/usr/sap/MNO/HDB02> cp sdehana01/sec/sapcli.pse sdehana02/sec/sapcli.pse

  3. On both the nodes, run the following commands and verify:

    1. sdehana01

      mnoadm@sdehana01:/usr/sap/MNO/HDB02> hdbsql -i 02 -U BACKUP -e -sslprovider commoncrypto -ssltruststore sapcli.pse -sslkeystore sapcli.pse

      Welcome to the SAP HANA Database interactive terminal.

      Enter command h for help with command q to quit

      hdbsql SYSTEMDB=>

    2. sdehana02

      mnoadm@sdehana02:/usr/sap/MNO/HDB02> hdbsql -i 02 -U BACKUP -e -sslprovider commoncrypto -ssltruststore sapcli.pse -sslkeystore sapcli.pse

      Welcome to the SAP HANA Database interactive terminal.

      Enter command h for help with command q to quit

      hdbsql SYSTEMDB=>

This is only for reference purpose. You must follow SAP HANA guidelines for SSL configuration.