Merge pull request #299222 from dennispadia/dp-ha-docs

Update in RHEL HA document

Author: prmerger-automator[bot]

articles/sap/workloads/sap-hana-high-availability-netapp-files-red-hat.md

@@ -9,7 +9,7 @@ ms.subservice: sap-vm-workloads
 ms.topic: article
 ms.tgt_pltfrm: vm-linux
 ms.custom: devx-track-azurecli, devx-track-azurepowershell
-ms.date: 10/16/2024
+ms.date: 05/01/2025
 ms.author: radeltch
 ---
 
@@ -346,50 +346,12 @@ For more information about the required ports for SAP HANA, read the chapter [Co
 
    Configure the OS as described in the following SAP Notes based on your RHEL version:
 
-   - [2292690 - SAP HANA DB: Recommended OS settings for RHEL 7](https://launchpad.support.sap.com/#/notes/2292690)
-   - [2777782 - SAP HANA DB: Recommended OS Settings for RHEL 8](https://launchpad.support.sap.com/#/notes/2777782)
-   - [2455582 - Linux: Running SAP applications compiled with GCC 6.x](https://launchpad.support.sap.com/#/notes/2455582)
-   - [2593824 - Linux: Running SAP applications compiled with GCC 7.x](https://launchpad.support.sap.com/#/notes/2593824)
-   - [2886607 - Linux: Running SAP applications compiled with GCC 9.x](https://launchpad.support.sap.com/#/notes/2886607)
-
-1. **[A]** Install the SAP HANA.
-
-   Starting with HANA 2.0 SPS 01, MDC is the default option. When you install the HANA system, SYSTEMDB and a tenant with the same SID are created together. In some cases, you don't want the default tenant. If you don't want to create an initial tenant along with the installation, you can follow SAP Note [2629711](https://launchpad.support.sap.com/#/notes/2629711).
-
-   Run the **hdblcm** program from the HANA DVD. Enter the following values at the prompt:  
-   1. Choose installation: Enter **1** (for install).
-   1. Select more components for installation: Enter **1**.
-   1. Enter **Installation Path** [/hana/shared]: Select Enter to accept the default.
-   1. Enter **Local Host Name** [..]: Select Enter to accept the default.
-   **Do you want to add additional hosts to the system? (y/n)** [n]: **n**.
-   1. Enter **SAP HANA System ID**: Enter **HN1**.
-   1. Enter **Instance Number** [00]: Enter **03**.
-   1. Select **Database Mode / Enter Index** [1]: Select Enter to accept the default.
-   1. Select **System Usage / Enter Index** [4]: Enter **4** (for custom).
-   1. Enter **Location of Data Volumes** [/hana/data]: Select Enter to accept the default.  
-   1. Enter **Location of Log Volumes** [/hana/log]: Select Enter to accept the default.
-   1. **Restrict maximum memory allocation?** [n]: Select Enter to accept the default.
-   1. Enter **Certificate Host Name For Host '...'** [...]: Select Enter to accept the default.
-   1. Enter **SAP Host Agent User (sapadm) Password**: Enter the host agent user password.
-   1. Confirm **SAP Host Agent User (sapadm) Password**: Enter the host agent user password again to confirm.
-   1. Enter **System Administrator (hn1adm) Password**: Enter the system administrator password.
-   1. Confirm **System Administrator (hn1adm) Password**: Enter the system administrator password again to confirm.
-   1. Enter **System Administrator Home Directory** [/usr/sap/HN1/home]: Select Enter to accept the default.
-   1. Enter **System Administrator Login Shell** [/bin/sh]: Select Enter to accept the default.
-   1. Enter **System Administrator User ID** [1001]: Select Enter to accept the default.
-   1. Enter **ID of User Group (sapsys)** [79]: Select Enter to accept the default.
-   1. Enter **Database User (SYSTEM) Password**: Enter the database user password.
-   1. Confirm **Database User (SYSTEM) Password**: Enter the database user password again to confirm.
-   1. **Restart system after machine reboot?** [n]: Select Enter to accept the default.
-   1. **Do you want to continue? (y/n)**: Validate the summary. Enter **y** to continue.
-
-1. **[A]** Upgrade the SAP Host Agent.
-
-   Download the latest SAP Host Agent archive from the [SAP Software Center](https://launchpad.support.sap.com/#/softwarecenter) and run the following command to upgrade the agent. Replace the path to the archive to point to the file that you downloaded:
+   - [2292690 - SAP HANA DB: Recommended OS settings for RHEL 7](https://me.sap.com/notes/2292690)
+   - [2777782 - SAP HANA DB: Recommended OS Settings for RHEL 8](https://me.sap.com/notes/2777782)
+   - [3108302 - SAP HANA DB: Recommended OS Settings for RHEL 9](https://me.sap.com/notes/3108302)
+   - [3057467 - Which compat-sap-c++ package do I need for SAP on RHEL?](https://me.sap.com/notes/3057467)
 
-   ```bash
-   sudo /usr/sap/hostctrl/exe/saphostexec -upgrade -archive <path to SAP Host Agent SAR>
-   ```
+1. **[A]** Install SAP HANA, following [SAP's documentation](https://help.sap.com/docs/SAP_HANA_PLATFORM/2c1988d620e04368aa4103bf26f17727/2d4de94c8bf14cda8d37278647fff8ab.html).
 
 1. **[A]** Configure a firewall.
 

articles/sap/workloads/sap-hana-high-availability-rhel.md

@@ -8,7 +8,7 @@ ms.service: sap-on-azure
 ms.subservice: sap-vm-workloads
 ms.topic: article
 ms.custom: devx-track-python, devx-track-azurecli, devx-track-azurepowershell, linux-related-content
-ms.date: 12/04/2024
+ms.date: 05/01/2025
 ms.author: radeltch
 ---
 
@@ -190,9 +190,11 @@ The steps in this section use the following prefixes:
 
    Next, create `fstab` entries for the three logical volumes by inserting the following lines in the `/etc/fstab` file:
 
+   ```bash   
    /dev/mapper/vg_hana_data_HN1-hana_data    /hana/data    xfs  defaults,nofail  0  2
    /dev/mapper/vg_hana_log_HN1-hana_log    /hana/log    xfs  defaults,nofail  0  2
    /dev/mapper/vg_hana_shared_HN1-hana_shared    /hana/shared    xfs  defaults,nofail  0  2
+   ```
 
    Finally, mount the new volumes all at once:
 
@@ -204,18 +206,18 @@ The steps in this section use the following prefixes:
 
    You can either use a DNS server or modify the `/etc/hosts` file on all nodes by creating entries for all nodes like this in `/etc/hosts`:
 
+   ```bash
    10.0.0.5 hn1-db-0
    10.0.0.6 hn1-db-1
+   ```
 
 1. **[A]** Perform RHEL for HANA configuration.
 
    Configure RHEL as described in the following notes:
-   * [2447641 - Additional packages required for installing SAP HANA SPS 12 on RHEL 7.X](https://access.redhat.com/solutions/2447641)
-   * [2292690 - SAP HANA DB: Recommended OS settings for RHEL 7](https://launchpad.support.sap.com/#/notes/2292690)
-   * [2777782 - SAP HANA DB: Recommended OS Settings for RHEL 8](https://launchpad.support.sap.com/#/notes/2777782)
-   * [2455582 - Linux: Running SAP applications compiled with GCC 6.x](https://launchpad.support.sap.com/#/notes/2455582)
-   * [2593824 - Linux: Running SAP applications compiled with GCC 7.x](https://launchpad.support.sap.com/#/notes/2593824)
-   * [2886607 - Linux: Running SAP applications compiled with GCC 9.x](https://launchpad.support.sap.com/#/notes/2886607)
+   * [2292690 - SAP HANA DB: Recommended OS settings for RHEL 7](https://me.sap.com/notes/2292690)
+   * [2777782 - SAP HANA DB: Recommended OS Settings for RHEL 8](https://me.sap.com/notes/2777782)
+   * [3108302 - SAP HANA DB: Recommended OS Settings for RHEL 9](https://me.sap.com/notes/3108302)
+   * [3057467 - Which compat-sap-c++ package do I need for SAP on RHEL?](https://me.sap.com/notes/3057467)
 
 1. **[A]** Install SAP HANA, following [SAP's documentation](https://help.sap.com/docs/SAP_HANA_PLATFORM/2c1988d620e04368aa4103bf26f17727/2d4de94c8bf14cda8d37278647fff8ab.html).
 
@@ -241,9 +243,8 @@ The steps in this section use the following prefixes:
    Create firewall rules to allow HANA System Replication and client traffic. The required ports are listed on [TCP/IP Ports of All SAP Products](https://help.sap.com/viewer/ports). The following commands are just an example to allow HANA 2.0 System Replication and client traffic to database SYSTEMDB, HN1, and NW1.
 
    ```bash
-    sudo firewall-cmd --zone=public --add-port={40302,40301,40307,40303,40340,30340,30341,30342}/tcp --permanent
-    sudo firewall-cmd --zone=public --add-port={40302,40301,40307,40303,40340,30340,30341,30342}/tcp
-
+    sudo firewall-cmd --zone=public --add-port={1128,1129,40302,40301,40307,40306,40303,40340,30340,30341,30342}/tcp --permanent
+    sudo firewall-cmd --zone=public --add-port={1128,1129,40302,40301,40307,40306,40303,40340,30340,30341,30342}/tcp
    ```
 
 1. **[1]** Create the tenant database.
@@ -264,6 +265,9 @@ The steps in this section use the following prefixes:
    hdbsql -d NW1 -u SYSTEM -p "<passwd>" -i 03 "BACKUP DATA USING FILE ('initialbackupNW1')"
    ```
 
+   > [!NOTE]
+   > When using Local Secure Store (LSS), SAP HANA backups are self-contained and require you to set a backup password for the encryption root keys. Refer to SAP Note [3571561](https://me.sap.com/notes/0003571561) for detailed instructions. The password must be set for SYSTEMDB and individual tenant database.
+
    Copy the system PKI files to the secondary site:
 
    ```bash
@@ -338,7 +342,7 @@ This important step optimizes the integration with the cluster and improves the
    # Enable repository that contains SAP HANA resource agents
    sudo subscription-manager repos --enable="rhel-sap-hana-for-rhel-7-server-rpms"
 
-   sudo dnf install -y resource-agents-sap-hana
+   sudo yum install -y resource-agents-sap-hana
    ```
 
    > [!NOTE]
@@ -425,13 +429,13 @@ For more information on the implementation of the SAP HANA hooks, see [Enabling
 
 Create the HANA topology. Run the following commands on one of the Pacemaker cluster nodes. Throughout these instructions, be sure to substitute your instance number, HANA system ID, IP addresses, and system names, where appropriate.
 
-   ```bash
+```bash
 sudo pcs property set maintenance-mode=true
 
 sudo pcs resource create SAPHanaTopology_HN1_03 SAPHanaTopology SID=HN1 InstanceNumber=03 \
  op start timeout=600 op stop timeout=300 op monitor interval=10 timeout=600 \
  clone clone-max=2 clone-node-max=1 interleave=true
-   ```
+```
 
 Next, create the HANA resources.
 

articles/sap/workloads/sap-hana-high-availability-scale-out-hsr-rhel.md

@@ -8,7 +8,7 @@ ms.assetid: 5e514964-c907-4324-b659-16dd825f6f87
 ms.service: sap-on-azure
 ms.subservice: sap-vm-workloads
 ms.topic: article
-ms.date: 12/31/2024
+ms.date: 05/01/2025
 ms.author: radeltch
 ---
 
@@ -186,7 +186,6 @@ The full set of PowerShell code display the setup of the load balancer, which in
 
 ---
 
-
 > [!NOTE]
 > When you're using the standard load balancer, you should be aware of the following limitation. When you place VMs without public IP addresses in the back-end pool of an internal load balancer, there's no outbound internet connectivity. To allow routing to public end points, you need to perform additional configuration. For more information, see [Public endpoint connectivity for Virtual Machines using Azure Standard Load Balancer in SAP high-availability scenarios](./high-availability-guide-standard-load-balancer-outbound-connections.md).  
 
@@ -685,6 +684,9 @@ The following steps get you set up for system replication:
     hdbsql -d HN1 -u SYSTEM -p "passwd" -i 03 "BACKUP DATA USING FILE ('initialbackupHN1')"
     ```
 
+   > [!NOTE]
+   > When using Local Secure Store (LSS), SAP HANA backups are self-contained and require you to set a backup password for the encryption root keys. Refer to SAP Note [3571561](https://me.sap.com/notes/0003571561) for detailed instructions. The password must be set for SYSTEMDB and individual tenant database.
+
    Copy the system PKI files to the secondary site:
 
     ```bash