Installation Guide

Document Version: 1.12.0 2016-09-19

Getting Started with SAP HANA, express edition

(Virtual Machine Method)

PUBLIC

Installing SAP HANA, express edition (Virtual Machine)

The SAP HANA, express edition VM image is platform-independent; you can install it to a Windows, OS X, or Linux machine, provided your host machine meets
the storage and memory prerequisites. Choose this installation method if you want the simplest setup.
Installing the OVA installs:
A VM running SUSE Linux Enterprise Server (SLES) for SAP Applications 12 SP1.
An SAP HANA, express edition instance on the VM, preconfigured and ready to start.

Machine Requirements
Check if your machine has the recommended hardware to successfully install and run the express edition VM image.
JRE 8 - The Download Manager requires JRE 8 or higher.
RAM - 16 GB RAM recommended.
HDD - 120 GB recommended.
Cores - 2 cores (4 recommended).
Hardware Virtualization - (Intel processors only) For Intel processors, virtualization is a BIOS setting known as either Intel Virtualization Technology or Intel VT.
Go to http://www.intel.com/content/www/us/en/support/processors/000005486.html to determine if your processor is capable of supporting virtualization. If
virtualization is turned off on your virtualization-capable machine, consult documentation from your machine vendor on how to enable virtualization
technology (or Intel VT) in the BIOS.

Install a Hyper visor

Install a supported hypervisor on your machine if you don't have one already. Hypervisors are software products used for creating and running virtual machines.
SAP HANA, express edition has been tested on these hypervisors:
VMware Player 7.1 (https://www.vmware.com/)
VMware Workstation Pro 12.1 (https://www.vmware.com/)
VMware Fusion or VMWare Fusion Pro 8.x (https://www.vmware.com/)
For the purposes of this tutorial, we're using VMware Player.

Install VMWare Player

VMware Player 7.1 is a hypervisor compatible with SAP HANA express edition. You can install any supported hypervisor, but examples in this tutorial use VMWare
Player 7.1.
1. Download VMware Player from http://www.vmware.com and run the installer.
2. Ensure you're downloading the correct version for your machine.
3. Register when prompted and follow the setup instructions.

Download the OVA using the Download Manager

Register and then use the Download Manager to download a server-only OVA, or a server-plus-applications OVA. Applications include XS Advanced (XSA) and
Web IDE.
1. Go to the registration page at http://sap.com/sap-hana-express
(Alternately, you can go to the SAP HANA, express edition launch page at http://go.sap.com/developer/topics/sap-hana-express.html and click the Register
and download SAP HANA, express edition download manager link.)
The registration page opens.
2. Complete the registration form and click the Register button.
Note: If you have an SAP login, click the Login icon at the top of the page to populate the registration form automatically.

2016 SAP SE or an SAP affiliate company. All rights reserved.

The Registration Success page displays. (You will also receive an email indicating successful registration.)
3. At the bottom of the Registration Success page, click the download manager that matches your system: Linux or Windows. If you have a Mac, or another
type of machine, click other for a platform-independent download manager.

4. Save the download manager installation file to your laptop and open it.
5. If Windows prevents the download manager installation file from running, click More info on the warning message and select Run anyway.

2016 SAP SE or an SAP affiliate company. All rights reserved.

6. In Download Manager, in the Image pull-down, select virtual machine.

7. Click Browse and select a directory where your downloads will be saved.
8. Select one or more of the following packages:
Server only - Downloads hxe.ova ; a basic server-only package.
Server + applications - Downloads hxexsa.ova ; the server plus XSA and Web IDE.
Text analysis files for additional languages - For languages other than English and German, files required for the HANA Text Analysis function. (The text
analysis files for English and German are already included in the Server only and Server + applications packages.)
9. Click the Download button.

Import the OVA into VMWare Player

Import the downloaded OVA file into your hypervisor to begin using SAP HANA, express edition.
1. Start VMware Player 7.1 and select Open a Virtual Machine.

2016 SAP SE or an SAP affiliate company. All rights reserved.

2. Browse to the OVA file you downloaded and click Open. The Import Virtual Machine dialog box displays.
3. Accept the defaults and click Import. The VM imports. The import process takes approximately 5 minutes.
4. Power on your VM.

Getting Started with SAP HANA, express edition

Start SAP HANA, express edition
1. Start the hypervisor and power on (or click Play on) your express edition VM.
2. At the hxehost login prompt, enter hxeadm
3. For Password enter the temporary password HXEHana1

2016 SAP SE or an SAP affiliate company. All rights reserved.

4. When prompted for current (UNIX) password, enter the temporary password again: HXEHana1
5. When prompted for New password, enter a strong password with at least 8 characters. If your password is not strong enough, the system logs you off and
you must log in again.
Tip: Your strong password should contain numbers, upper and lower case letters, and special characters. It cannot contain systematic values, like strings in
ascending or descending numerical or alphabetical order.
Strong password example: 5342_E#1_GcbaFd!
Note: Do not use this password example, since it is public and not secure. This example is for illustrative purposes only and must not be used on your
system. Define your own strong password.
6. When prompted to Retype new password, enter your strong password again.
SAP HANA, express edition is now running.

Test your Server Installation

Verify that all required SAP HANA, express edition services are running properly.
1. From the command prompt, enter:
HDB info
You should see the following services:
hdbnameserver
hdbcompileserver
hdbpreprocessor
hdbwebdispatcher
hdbdiserver (server plus applications (hxexsa.ova) only)
Multiple /hana/shared/HXE/xs/ services (server plus applications (hxexsa.ova) only)

2016 SAP SE or an SAP affiliate company. All rights reserved.

2. If you don't see these services, restart the database.

Enter: HDB stop then HDB start
Wait approximately 60 seconds for the system to start and the user prompt to return.

Change the Default Password for SYSTEM User

Changing the default SYSTEM user password can help secure your system.
1. From the command prompt, enter this command:
hdbsql -u SYSTEM -d SystemDB p HXEHana1

2. Follow the command prompts to update the password.

Record Your VM's IP Address

Record the IP address of your VM so you can reference it later to connect using SAP HANA client tools.
1. At the command prompt, enter:
/sbin/ifconfig

2. Locate the IP address, listed under the eth0 interface as inet addr.
In the following example, the IP address is 10.7.186.70

2016 SAP SE or an SAP affiliate company. All rights reserved.

Test XSC, XSA and Web IDE

If you installed the server plus applications (hxexsa.ova), test your XS installations and change the passwords of all XSA users.
1. Check that the XSEngine is running. From your VM desktop, open a browser and enter:
http://<ip address of VM>:8000

You recorded the IP address in tutorial topic Record Your VM's IP Address. A success page displays:

2. Change the passwords of all XSA users: a. Change the XSA_ADMIN user password. Enter:
hdbsql -u XSA_ADMIN p HXEHana1 d SystemDB

Follow the prompts to update the default password. b. Change the XSA_DEV user password. Enter:
hdbsql -u XSA_DEV p HXEHana1 d SystemDB

Follow the prompts to update the default password.

c. Change the XSA_SHINE user password. Enter:
hdbsql -u XSA_SHINE p HXEHana1 d SystemDB

Follow the prompts to update the default password.

3. Log in to XSA services:
2016 SAP SE or an SAP affiliate company. All rights reserved.

xs login -u xsa_admin -p <password>

4. Check for a series of entries beginning with https://<ip address of VM>:30030 . If you see these entries, XSA installed correctly.
5. Enter:
xs target s SAP

6. View the list of XSA applications. Enter:

xs apps

7. Check that the application webide shows in the list of XSA applications.
8. Test your Web IDE connection.
On Windows, update the c:\Windows\System32\Drivers\etc\hosts file.
On Linux and macOS, update /etc/hosts to add the IP address.
Example:
<IP address of the VM> hxehost # <your IP address>
9. Enter the URL for Web IDE in a browser on your laptop. The address is the one that displays in your
xs apps

command output.
Example: https://<hostname>:53075

Configure SAP HANA Studio

Download SAP HANA Studio from the SAP HANA developer edition HANA Tools site to your laptop. Then connect to your SAP HANA, express edition instance.
1. Download Eclipse Mars from https://eclipse.org/downloads/
2. Review the installation procedure at https://tools.hana.ondemand.com/#hanatools. Ensure your laptop meets the prerequisites.
3. Follow the installation procedure, but select Eclipse Mars.
4. When directed to the Eclipse packages site, select either Eclipse IDE for Java EE Developers or Eclipse IDE for Java Developers.
5. Download to your laptop.
6. Start the Eclipse installer.
7. Select a workspace when prompted. The welcome page displays.
8. Select Help > Install New Software.
9. In the Work with field, type https://tools.hana.ondemand.com/mars and click Add. The Add Repository dialog box displays.
10. In the Name field, type SAP HANA, express edition.
11. Expand the SAP HANA Tools node.
12. Select SAP HANA Administrator (Developer Edition).
13. Accept the installation wizard prompts. Eclipse restarts.
14. Select Window > Perspective > Open Perspective > Other.
15. Select the SAP HANA Administration Console perspective.
16. Right-click anywhere on the Systems tab and select Add System. The Specify System dialog box displays.
17. Enter:
Host Name: (IP address you recorded in tutorial topic Record Your VM's IP Address)
Instance Number: 00
18. Ensure you click Multiple container mode and click System database. This is important because the system is configured to run on multi-tenant mode
with SystemDB as the default database out-of-the box.
19. Click Next. The Connection Properties dialog box displays.
20. Under Authentication by database user, enter:
User Name: SYSTEM
Password: (Password you specified when you changed the default SYSTEM password)
21. Click Finish. You are connected to HXE(SYSTEM).

Edit the /etc/hosts File

You may need to edit the /etc/hosts file on the VM.
1. Change
sudo echo <ipaddress> $(hostname f) >> /etc/hosts

To
sudo sh -c 'echo <Type your IP Address> $(hostname -f) >> /etc/hosts'

Turn on Statistics Server (hxe.ova Server-only Image)

If you downloaded hxe.ova, you can turn on statistics server from the command prompt.
1. Enter:
hdbsql -d SystemDB -u SYSTEM -p <system passwd> alter system alter configuration('nameserver.ini','SYSTEM') SET
('statisticsserver','active') = 'true' with reconfigure

Configure Security
2016 SAP SE or an SAP affiliate company. All rights reserved.

Apply the HANA, express-edition license key

If you dont apply the license, your SAP HANA, express edition will stop working after the default grace period of 60-90 days. If you have SAP HANA Studio or
the HANA Studio eclipse plugin then begin at Using Studio. Otherwise proceed to Using HDBSQL.

Applying the License Key with HANA Studio

Obtain your hardw are key
If you are using the SAP HANA Studio eclipse plugin, you can do the following.
1. Start SAP HANA studio.
2. On the Systems tab, select SYSTEMDB@HXE (SYSTEM).
3. View properties for SYSTEMDB@HXE (SYSTEM).
4. Select License properties. Open the System License tab.
5. Make a note of the Hardware Key value.

Order your license key

1. Go to http://sap.com/minisap and fill out all required information.
2. For System ID, select HXE.
3. For Hardware Key, enter the hardware key value you recorded earlier.
4. Submit the form. The license key is emailed to you.
5. Save the license key file to your hard disk under the name HXE.txt .

Apply the license key

1. In SAP HANA studio, view properties for SYSTEMDB@HXE (SYSTEM).
2. Select License properties. Open the System License tab.
3. Click Delete License Key to delete any existing licenses.
4. Click Install License Key.
5. Navigate to your license file and select it.
After confirmation, the properties page refreshes with your new license information.
6. Proceed to Change the SSFS Master Keys

Applying the License Key with HDBSQL

Obtain your hardw are key
1. Login in to your HANA, express edition as hxeadm .
2. Enter the following command:
hdbsql -u system -p <your password> -d SystemDB "SELECT HARDWARE_KEY FROM M_LICENSE"

3. Copy or otherwise record the value returned for HARDWARE_KEY

Order your license key

1. Go to http://sap.com/minisap page and fill out all required information.
2. For System ID, select HXE.
3. For Hardware Key, enter the hardware key value you recorded earlier.
4. Submit the form. The license key is emailed to you.
5. Save the license key file to your hard disk under the name HXE.txt .

Apply the license key

1. Make a directory on your HXE machine to store the license.
mkdir ~/license

This command will make the directory /usr/sap/HXE/home/license

2. If you do not have an SCP client, please download and install one. There are several very good open source scp clients available for Windows, Mac and
Linux. Copy the file from your hard disk to the /usr/sap/HXE/home/license directory.
3. Issue the following command to install the license key.
hdbsql -u system -p HANAhxe2 -d SystemDB -I '/usr/sap/HXE/home/license/HXE_License.txt'

4. Confirm that the license key was installed by issuing the following command.

2016 SAP SE or an SAP affiliate company. All rights reserved.

hdbsql -u system -p HANAhxe2 -d SystemDB "select hardware_key, expiration_date from m_licenses"

The expiration date should be one year from today.

5. Proceed to Change the SSFS Master Keys.

Change the SSFS Master Keys

The secure stores in the file system (SSFS) used by SAP HANA are protected by unique master keys, generated during installation or update. If you installed HXE
from an OVA, then it shares master keys with other HXE systems. We recommend that you change the master keys immediately after setup to ensure that your
master keys are not known outside your organization. For more information on changing the master keys, see the Change the SSFS Master Keys topic in the
SAP HANA Administration Guide.
1. Log on to the HANA system as hxeadm and shut the system down using the sapcontrol program:
/usr/sap/hostctrl/exe/sapcontrol -nr 00 -function Stop

2. Re-encrypt the master key of the instance SSFS:

RSEC_SSFS_DATAPATH=/usr/sap/HXE/SYS/global/hdb/security/ssfs
RSEC_SSFS_KEYPATH=/usr/sap/HXE/SYS/global/hdb/security/ssfs rsecssfx changekey $(rsecssfx generatekey -getPlainValueToConsole)

3. Add the following entry to the global.ini file using a text editor. (SAP HANA, express edition, comes with the vi and vim text editors.) The
global.ini file is located here: /usr/sap/HXE/SYS/global/hdb/custom/config/global.ini
Add or edit the cryptography section with the following value.
[cryptography]
ssfs_key_file_path = /usr/sap/HXE/SYS/global/hdb/security/ssfs

4. Re-encrypt the system PKI SSFS with a new key - HDB start:
RSEC_SSFS_DATAPATH=/usr/sap/HXE/SYS/global/security/rsecssfs/data
RSEC_SSFS_KEYPATH=/usr/sap/HXE/SYS/global/security/rsecssfs/key rsecssfx changekey $(rsecssfx generatekey -getPlainValueToConsole)

5. Restart the system:

/usr/sap/hostctrl/exe/sapcontrol -nr 00 -function Start

Change the Root Key

SAP HANA generates unique root keys on installation. If you installed HXE from an OVA, then it shares a root key with other HXE systems. We recommend that
you change the root key of the internal data encryption service to ensure it is not known outside your organization. For more information on this topic, see the
Change the Root Key of the Internal Data Encryption Service topic in the SAP HANA Server Installation and Update Guide.
1. Log on to the HANA system as hxeadm and shut the system down using the sapcontrol program:
/usr/sap/hostctrl/exe/sapcontrol -nr 00 -function Stop

2. Generate a new root encryption key using the hdbnsutil program:

cd /usr/sap/HXE/HDB00/exe
./hdbnsutil -generateRootKeys --type=DPAPI

3. Restart the system:

/usr/sap/hostctrl/exe/sapcontrol -nr 00 -function Start

4. Reset the consistency information in the SSFS using the hdbcons program:
cd /usr/sap/HXE/HDB00/exe
./hdbcons "crypto ssfs resetConsistency" -e hdbnameserver

5. After running the hdbcons command you have 20 seconds to rerun the command again to completely rewrite ssfs consistency information:
./hdbcons "crypto ssfs resetConsistency" -e hdbnameserver

6. Change all application keys so that they are encrypted with the new root key by using SAP HANA studio or SAP HANA HDBSQL:
hdbsql -u system -p <YourPassword> -d SystemDB "ALTER SYSTEM APPLICATION ENCRYPTION CREATE NEW KEY"

2016 SAP SE or an SAP affiliate company. All rights reserved.

Important disclaimers and legal information

Coding Samples
Any software coding and/or code lines / strings ("Code") included in this documentation are only examples and are not intended to be used in a productive
system environment. The Code is only intended to better explain and visualize the syntax and phrasing rules of certain coding. SAP does not warrant the
correctness and completeness of the Code given herein, and SAP shall not be liable for errors or damages caused by the usage of the Code, unless damages
were caused by SAP intentionally or by SAP's gross negligence.

Accessibility
The information contained in the SAP documentation represents SAP's current view of accessibility criteria as of the date of publication; it is in no way intended
to be a binding guideline on how to ensure accessibility of software products. SAP in particular disclaims any liability in relation to this document. This disclaimer,
however, does not apply in cases of wilful misconduct or gross negligence of SAP. Furthermore, this document does not result in any direct or indirect
contractual obligations of SAP.

Gender-Neutral Language
As far as possible, SAP documentation is gender neutral. Depending on the context, the reader is addressed directly with "you", or a gender-neutral noun (such
as "sales person" or "working days") is used. If when referring to members of both sexes, however, the third-person singular cannot be avoided or a genderneutral noun does not exist, SAP reserves the right to use the masculine form of the noun and pronoun. This is to ensure that the documentation remains
comprehensible.

Internet Hyperlinks
The SAP documentation may contain hyperlinks to the Internet. These hyperlinks are intended to serve as a hint about where to find related information. SAP
does not warrant the availability and correctness of this related information or the ability of this information to serve a particular purpose. SAP shall not be liable
for any damages caused by the use of related information unless damages have been caused by SAP's gross negligence or willful misconduct. All links are
categorized for transparency (see: http://help.sap.com/disclaimer).

2016 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate
company. The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its distributors contain
proprietary software components of other software vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP or
its affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP or SAP affiliate company products and
services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as
constituting an additional
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate
company) in Germany and other countries. All other product and service names mentioned are the trademarks of their respective companies.
Please see http://www.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

2016 SAP SE or an SAP affiliate company. All rights reserved.

go.sap.com/registration/
contact.html

2016 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any
form or for any purpose without the express permission of SAP SE
or an SAP affiliate company. The information contained herein may
be changed without prior notice.
Some software products marketed by SAP SE and its distributors
contain proprietary software components of other software
vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company
for informational purposes only, without representation or warranty
of any kind, and SAP or its affiliated companies shall not be liable for
errors or omissions with respect to the materials. The only
warranties for SAP or SAP affiliate company products and services
are those that are set forth in the express warranty statements
accompanying such products and services, if any. Nothing herein
should be construed as constituting an additional warranty.
SAP and other SAP products and services mentioned herein as well
as their respective logos are trademarks or registered trademarks
of SAP SE (or an SAP affiliate company) in Germany and other
countries. All other product and service names mentioned are the
trademarks of their respective companies.
Please see http://www.sap.com/corporate-en/legal/copyright/
index.epx for additional trademark information and notices.