KB 054 – PowerConnect 5.0 S4 HANA Installation

Installation steps

Installation of PowerConnect for Splunk requires the following steps to be completed in the order listed below.

  1. If you wish to use HTTPS / SSL connection between SAP and Splunk please setup the SSL support in the ABAP engine using the steps listed here. (link to Setting up HTTPS / SSL support).
  2. Import the agent using TMS / SAINT
  3. Activate BC Sets
  4. Upload PowerConnect Roles
  5. Start the PowerConnect for Splunk control panel in SAP using tcode /BNWVS/MAIN
  6. Configure the connection between SAP and Splunk
  7. Load HDB Scripts (HANA only)

Setting up HTTPS / SSL support in SAP

By default, Splunk REST API listens on port 8089 and HEC on Port 8088 with SSL active. SAP supports SSL however some basic setup is needed to provide SSL functionality to the native HTTP client built in to the ICM to support HTTPS. You can disable SSL support in Splunk and use HTTP without SSL to communicate between SAP and Splunk however it is not recommended for a production environment, especially where Splunk traffic traverses a shared network or in a public or private cloud hosted solution for SAP or Splunk.

If you wish to enable SSL support in SAP ABAP, please follow the steps below.

Please note that the instructions below are for setting up SSL to Splunk with a default configuration that includes a self-signed certificate that is included into Splunk during installation.

Important Note(s):

If your Splunk Enterprise Server has a custom SSL certificate installed, the process is the same, however names you see in the examples will differ from the screen shots below.

If you connect to a Splunk server via a proxy server then you will need to install any certificates that may sign HTTPS requests that flow through it into SAP.

If you are unsure about how to configure SSL, or you get SSL chain-verify or peer verify errors in SAP log a support call. You will need a valid license and support agreement to get email and phone support.

  • Ensure that System environment variable SECUDIR is set, this normally points to the /usr/sap/<SID>/<Instance>/sec directory.

  • If further details are required for setting environment variables please refer to SAP OSS Note 1827566 – http://service.sap.com/sap/support/notes/1827566
  • Download the latest SAP Crypro library from SAP Marketplace and unpack into the instance executable directory

  • http://support.sap.com/swdc -> Support Packages and Patches -> My Application Components -> SAPCRYPTOLIB
  • In transaction RZ10 set the following profile parameters into the Default.pfl profile parameters. A restart of you SAP system is required after saving updated profile.
  • KB 054 - PowerConnect 5.0 S4 HANA Installation 1

  • In transaction STRUSTSSO2 activate the following SSL nodes:
    SSL Server Standard
    SSL Client SSL Client (Anonymous)
    SSL Client SSL Client (Standard)
  • Activate by right clicking on each node and selecting “Create” – The default entry can be used unless specific security policies must be adhered too.

KB 054 - PowerConnect 5.0 S4 HANA Installation 2

Change Mode -> KB 054 - PowerConnect 5.0 S4 HANA Installation 3

KB 054 - PowerConnect 5.0 S4 HANA Installation 4

KB 054 - PowerConnect 5.0 S4 HANA Installation 5

KB 054 - PowerConnect 5.0 S4 HANA Installation 6

KB 054 - PowerConnect 5.0 S4 HANA Installation 7

KB 054 - PowerConnect 5.0 S4 HANA Installation 8

KB 054 - PowerConnect 5.0 S4 HANA Installation 9

KB 054- PowerConnect 5.0 S4 HANA Installation 86

KB 054 - PowerConnect 5.0 S4 HANA Installation 11

Next we need to ensure the ROOT CA (or server self-signed certificate is installed in the ABAP system)

Start by connecting to the Splunk server on port 8089 using HTTPS this will show you the certificate in use.

KB 054 - PowerConnect 5.0 S4 HANA Installation 12

Open the certificate information

KB 054 - PowerConnect 5.0 S4 HANA Installation 13

This certificate is signed by the SplunkCommonCA and we need to import this CommonCA certificate into SAP so it trusts the certificate being issued by the Splunk server.

To do this highlight the SplunkCommonCA certificate and click View Certificate

KB 054 - PowerConnect 5.0 S4 HANA Installation 14

Not we are looking at the SplunkCommonCA certificate that is the issuer of the certificate being sent by Splunk. If we configure SAP to trust this certificate, then it will also trust the certificates it has issued which include the one being sent to SAP by the Splunk Server (SplunkServerDefaultCert).

KB 054 - PowerConnect 5.0 S4 HANA Installation 15

Next click Copy to file to export this certificate

KB 054 - PowerConnect 5.0 S4 HANA Installation 16

KB 054 - PowerConnect 5.0 S4 HANA Installation 17

KB 054 - PowerConnect 5.0 S4 HANA Installation 18

KB 054 - PowerConnect 5.0 S4 HANA Installation 19

KB 054 - PowerConnect 5.0 S4 HANA Installation 20

KB 054 - PowerConnect 5.0 S4 HANA Installation 21

Now we need to import this certificate into SAP. Start tcode STRUSTSSO2.

Highlight the hostname under node “SSL client SSL Client (Standard).

KB 054 - PowerConnect 5.0 S4 HANA Installation 22

Click on the import button KB 054 - PowerConnect 5.0 S4 HANA Installation 23 in the certificate section

in the certificate section 24

Now enter the file path of the SplunkCommonCertificate saved in the previous step

KB 054 - PowerConnect 5.0 S4 HANA Installation 25

KB 054 - PowerConnect 5.0 S4 HANA Installation 26

Now the SplunkCommonCA certificate appears in the Certificate section, click on the Add to Certificate List button to add it to the Certificate List

KB 054 - PowerConnect 5.0 S4 HANA Installation 27

KB 054 - PowerConnect 5.0 S4 HANA Installation 28

Click Save in the toolbar to save this change

KB 054 - PowerConnect 5.0 S4 HANA Installation 29

Repeat this change for the following 2 nodes

SSL server Standard

SSL client SSL Client (Anonymous)

KB 054 - PowerConnect 5.0 S4 HANA Installation 30

SAINT

Ensure Installation and Support Packages are unpacked into \usr\sap\trans\EPS\in directory

Client 000 -> Transaction Saint

KB 054 - PowerConnect 5.0 S4 HANA Installation 31

KB 054 - PowerConnect 5.0 S4 HANA Installation 32

KB 054 - PowerConnect 5.0 S4 HANA Installation 33

Install add-on

KB 054 - PowerConnect 5.0 S4 HANA Installation 34

From the main screen in transaction SAINT select “Start”

KB 054 - PowerConnect 5.0 S4 HANA Installation 35

Highlight the PowerConnect Add-on

KB 054 - PowerConnect 5.0 S4 HANA Installation 36

Select “Continue”

KB 054 - PowerConnect 5.0 S4 HANA Installation 37

KB 054 - PowerConnect 5.0 S4 HANA Installation 38

Select “Continue”

KB 054 - PowerConnect 5.0 S4 HANA Installation 39

You will then see a list all packages being installed.

KB 054 - PowerConnect 5.0 S4 HANA Installation 40

Select “Continue”

KB 054 - PowerConnect 5.0 S4 HANA Installation 41

Select “No” for Modification Adjustment transport

KB 054 - PowerConnect 5.0 S4 HANA Installation 42

KB 054 - PowerConnect 5.0 S4 HANA Installation 43

Select the “Start Options” button”

KB 054 - PowerConnect 5.0 S4 HANA Installation 44

Change to start in background

KB 054 - PowerConnect 5.0 S4 HANA Installation 45

Select the “tick” to continue

KB 054 - PowerConnect 5.0 S4 HANA Installation 46

Select the “tick” to start installation

KB 054 - PowerConnect 5.0 S4 HANA Installation 47

Once installation is complete select “Finish”

KB 054 - PowerConnect 5.0 S4 HANA Installation 48

The “BNWVS” add-on will now appear in installed add-on list

KB 054 - PowerConnect 5.0 S4 HANA Installation 49

Activate BC Sets

Go to transaction SCPR20

In the BC Sets Field enter “\BNWVS\BCSET_500”

KB 054 - PowerConnect 5.0 S4 HANA Installation 50

BC Set -> Activate

KB 054 - PowerConnect 5.0 S4 HANA Installation 51

Create a transport for the BC Set activation – This transport will be imported into subsequent systems rather than running this transaction again.

KB 054 - PowerConnect 5.0 S4 HANA Installation 52

KB 054 - PowerConnect 5.0 S4 HANA Installation 53

KB 054 - PowerConnect 5.0 S4 HANA Installation 54

KB 054 - PowerConnect 5.0 S4 HANA Installation 55

The follow line will appear at the bottom of screen on complete.

KB 054 - PowerConnect 5.0 S4 HANA Installation 56

To confirm successful activation view the logs by going to Goto -> Activation Logs

KB 054 - PowerConnect 5.0 S4 HANA Installation 57

KB 054 - PowerConnect 5.0 S4 HANA Installation 58

Upload Roles

Add Transport to buffer

Ensure transport files are loaded into the usr\sap\trans\cofiles and \usr\sap\trans\data directories.

Transaction STMS

From the buffer of the system select Extras -> Other Requests -> Add

KB 054 - PowerConnect 5.0 S4 HANA Installation 59

Select transport “N71K900223”

KB 054 - PowerConnect 5.0 S4 HANA Installation 60

Select the “tick” and then “yes” to add to buffer

KB 054 - PowerConnect 5.0 S4 HANA Installation 61

KB 054 - PowerConnect 5.0 S4 HANA Installation 62

Select transport with the mouse and then from menu select Request -> Import

KB 054 - PowerConnect 5.0 S4 HANA Installation 63

Ensure “Ignore Invalid Component Version” is selected.

KB 054 - PowerConnect 5.0 S4 HANA Installation 64

KB 054 - PowerConnect 5.0 S4 HANA Installation 65

Upload PowerConnect Roles

Transaction PFCG

From menu Role -> Upload

KB 054 - PowerConnect 5.0 S4 HANA Installation 66

KB 054 - PowerConnect 5.0 S4 HANA Installation 67

Navigate to the directory where you have saved the roles and select one.

KB 054 - PowerConnect 5.0 S4 HANA Installation 68

Confirm the import.

KB 054 - PowerConnect 5.0 S4 HANA Installation 69

Carry out the same procedure for the other role.

KB 054 - PowerConnect 5.0 S4 HANA Installation 70

KB 054 - PowerConnect 5.0 S4 HANA Installation 71

Generation Roles

From menu select Utilities -> Mass generation

KB 054 - PowerConnect 5.0 S4 HANA Installation 72

In the role field enter “Z_BNWVS*”

KB 054 - PowerConnect 5.0 S4 HANA Installation 73

Select Program -> Execute

KB 054 - PowerConnect 5.0 S4 HANA Installation 74

Edit -> Select All

KB 054 - PowerConnect 5.0 S4 HANA Installation 75

Roles -> Generate profile

KB 054 - PowerConnect 5.0 S4 HANA Installation 76

Select “online”

KB 054 - PowerConnect 5.0 S4 HANA Installation 77

KB 054 - PowerConnect 5.0 S4 HANA Installation 78

Leave transaction

KB 054 - PowerConnect 5.0 S4 HANA Installation 79

Assign Roles

Assign role Z_BNWVS_ADMIN_CHANGE to user who will administer PowerConnect and Z_BNWVS_BATCHUSER to user that will run the PowerConnect batch jobs.

Activate PowerConnect

Transaction /n/bnwvs/main

Enter your PowerConnect license

KB 054 - PowerConnect 5.0 S4 HANA Installation 80

Accept the user terms

KB 054 - PowerConnect 5.0 S4 HANA Installation 81

Configure Splunk Connection

Enter Splunk Connection details

Enter either the hostname and port to the REST or HEC port and the target index

KB 054 - PowerConnect 5.0 S4 HANA Installation 82

Enter Credentials

One of the two credential methods can be used, but we do recommend using HEC keys.

Enter HEC key

If using HEC select the “Event Collector” Radio button and enter the Token associated with your index.

KB 054 - PowerConnect 5.0 S4 HANA Installation 83

Enter REST user details

If using REST select the “REST” radio button – specify username and password

KB 054 - PowerConnect 5.0 S4 HANA Installation 84

Connection Test

On the next screen you can carry out a connection test to confirm SAP can access Splunk and the index exists.

KB 054 - PowerConnect 5.0 S4 HANA Installation 85

KB 054 - PowerConnect 5.0 S4 HANA Installation 86

KB 054 - PowerConnect 5.0 S4 HANA Installation 87

KB 054 - PowerConnect 5.0 S4 HANA Installation 88

KB 054 - PowerConnect 5.0 S4 HANA Installation 89

KB 054 - PowerConnect 5.0 S4 HANA Installation 90

KB 054 - PowerConnect 5.0 S4 HANA Installation 91

Start Batch jobs

In the “Batch User” field enter the name of your background user and confirm.

KB 054 - PowerConnect 5.0 S4 HANA Installation 92

KB 054 - PowerConnect 5.0 S4 HANA Installation 93

Load HANA Scripts

If your SAP systems run on HANA you will need to upload the scripts to run extended querys.

Administrator -> Setup Metric -> BDB Queries

KB 054 - PowerConnect 5.0 S4 HANA Installation 94

Select Upload file button

KB 054 - PowerConnect 5.0 S4 HANA Installation 95

Navigate to where HDB_SCRIPTS.xml file has been save and select

KB 054 - PowerConnect 5.0 S4 HANA Installation 96

KB 054 - PowerConnect 5.0 S4 HANA Installation 97

Once uploaded select with scripts you want to run and then select “save” from the top menu

KB 054 - PowerConnect 5.0 S4 HANA Installation 98

Download PDF version here