SAP HANA Administration Guide en SPS10
SAP HANA Administration Guide en SPS10
2 System Administration... ... ... ... .... ... ... ... ... .... ... ... ... .... ... ... ... .85
2.1 Starting andStoppingSAPHANASystems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Start a System. . ......................................................... 85
Stop a System. . .......................................................... 86
Restart a System.......................................................... 88
Stop and Start a DatabaseS ervice. . . . . . . . . . . .. . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . 90
Monitoring SAP HANA Systems During Stop and Start. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
2.2 Managing MultitenantDatabaseContainers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
CreatingandC onfiguringTenantDatabases. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Monitoring and ManagingTenantD atabases. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Managing Resources in Multiple-Container Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
2.3 Configuring SAP HANASystem Properties(INIFiles). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
SystemPropertiesinMultiple-ContainerS ystems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
Change a SystemProperty.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. 131
Reset a System Property.. .. ... .. .. .. .. .. .. .. .. ... .. .. .. .. .. .. .. .. ... .. .. .. 133
Reserve ConnectionsforAdministrators. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Configure SystemU sageType.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..135
Change the Default SLD Data Supplier Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
2.4 ManagingS APHANALicenses. . . . . . . .. . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . .. . . . 138
LicenseKeys... ... ... ... .... ... ... ... ... ... .... ... ... ... ... ... .... ... ... 138
Check theCurrentLicenseKey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Install a PermanentLicense.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 140
Delete an ExistingPermanentLicenseKey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
2.5 MonitoringtheSAPHANADatabase. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
Monitoring in SAPHANAStudio.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. 143
Monitoring in SAPHANACockpit.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 204
2.6 Managing Tables... ... ... ... ... ... .... ... ... ... ... ... .... ... ... ... ... ... ... 232
Column-Based and Row-Based Storage in the SAP HANA Database. . . . . . . . . . . . . . . . . . . . . 232
DeployaDeliveryUnitArchive(*.tgz). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480
4 Security Administration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482
4.1 ManagingSAPHANAUsers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482
DatabaseUsers.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. 482
OperatingSystemUser<sid>adm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489
User Authentication and Single-Sign On. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489
UserAuthorization.. . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . 507
ProvisioningUsers. . . . . . .. . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . .. . . . . . . . . . . 536
4.2 AuditingActivityinSAPHANASystems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550
ActivateandConfigureAuditing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550
Create an Audit Policy... .... ... ... ... ... ... .... ... ... ... ... ... .... ... ... .. 552
Delete Audit EntriesfromtheAuditTrail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 556
4.3 Managing Encryption of Data Volumes in the SAP HANA Database. . . . . . . . . . . . . . . . . . . . . . . . 557
Enable Data Volume Encryption in an Existing SAP HANA System. . . . . . . . . . . . . . . . . . . . . . 557
Data Volume Encryption in Multitenant Database Containers. . . . . . . . . . . . . . . . . . . . . . . . . . 561
ChangethePageEncryptionKey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 562
Disable Data VolumeE ncryption.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. 563
4.4 Managing Encryption Keys... .... ... ... ... ... ... .... ... ... ... ... ... .... ... ... . 564
Change the SSFSMasterKeys.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 566
Change the Root Key of the Internal Data Encryption Service. . . . . . . . . . . . . . . . . . . . . . . . . . 568
Change the SecureUserStoreEncryptionKey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 570
4.5 Managing Client Certificates in the SAP HANA Database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 572
Client Certificates........................................................ 573
Certificate Collections... ... ... ... ... .... ... ... ... ... ... .... ... ... ... ... ... 574
View CertificatesintheC ertificateS tore. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575
View Certificate Collections.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. . 577
SQL Statements for In-Database Certificate Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . 578