You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sap/workloads/high-availability-guide-windows-azure-files-smb.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,9 +41,9 @@ Evaluate the following points when you're planning the deployment of Azure Files
41
41
* Avoid putting too many SIDs in a single storage account and its file share.
42
42
* As general guidance, don't put together more than four nonproduction SIDs.
43
43
* Don't put the entire development, production, and quality assurance server landscape in one storage account or file share. Failure of the share leads to downtime of the entire SAP landscape.
44
-
* We recommend that you put the *sapmnt* and *transport* directories on different storage accounts, except in smaller systems. During the installation of the SAP primary application server, SAPInst will request the *transport* host name. Enter the FQDN of a different storage account as *<storage_account>.file.core.windows.net*.
44
+
* We recommend that you put the *sapmnt* and *transport* directories on different storage accounts, except in smaller systems. During the installation of the SAP primary application server, SAPinst will request the *transport* host name. Enter the FQDN of a different storage account as *<storage_account>.file.core.windows.net*.
45
45
* Don't put the file system used for interfaces onto the same storage account as */sapmnt/\<SID>*.
46
-
* You must add the SAP users and groups to the *sapmnt* share. Set this permission for them in the Azure portal: **Storage File Data SMB Share Elevated Contributor**.
46
+
* You must add the SAP users and groups to the *sapmnt* share. Set the Storage File Data SMB Share Elevated Contributor permission for them in the Azure portal.
47
47
48
48
Distributing *transport*, *interface*, and *sapmnt* among separate storage accounts improves throughput and resiliency. It also simplifies performance analysis. If you put many SIDs and other file systems in a single Azure Files storage account, and the storage account's performance is poor because you're hitting the throughput limits, it's difficult to identify which SID or application is causing the problem.
49
49
@@ -63,7 +63,7 @@ Here are prerequisites for the installation of SAP NetWeaver HA systems on Azure
63
63
* Make sure that at least one Active Directory domain controller is in the Azure landscape, to avoid traversing Azure ExpressRoute to contact domain controllers on-premises.
64
64
* Make sure that the Azure support team reviews the documentation for Azure Files SMB with [Active Directory integration](../../storage/files/storage-files-identity-auth-active-directory-enable.md#videos). The video shows extra configuration options, which were modified (DNS) and skipped (DFS-N) for simplification reasons. But these are valid configuration options.
65
65
* Make sure that the user who's running the Azure Files PowerShell script has permission to create objects in Active Directory.
66
-
* Install SWPM version 1.0 SP32 and SWPM 2.0 SP09 or later. The SAPInst patch must be 749.0.91 or later.
66
+
* Install SWPM version 1.0 SP32 and SWPM 2.0 SP09 or later. The SAPinst patch must be 749.0.91 or later.
67
67
* Install an up-to-date release of PowerShell on the Windows Server instance where the script is run.
68
68
69
69
## Installation sequence
@@ -72,10 +72,10 @@ Here are prerequisites for the installation of SAP NetWeaver HA systems on Azure
72
72
73
73
The Active Directory administrator should create, in advance, three domain users with Local Administrator rights and one global group in the local Windows Server Active Directory instance.
74
74
75
-
*[email protected]* has Domain Administrator rights and is used to run *SAPInst*, *\<sid>adm*, and *SAPService\<SID>* as SAP system users and the *SAP_\<SAPSID>_GlobalAdmin* group. The SAP Installation Guide contains the specific details required for these accounts.
75
+
*[email protected]* has Domain Administrator rights and is used to run *SAPinst*, *\<sid>adm*, and *SAPService\<SID>* as SAP system users and the *SAP_\<SAPSID>_GlobalAdmin* group. The SAP Installation Guide contains the specific details required for these accounts.
76
76
77
77
> [!NOTE]
78
-
> SAP user accounts should not be Domain Administrator. We generally recommend that you don't use *\<sid>adm* to run SAPInst.
78
+
> SAP user accounts should not be Domain Administrator. We generally recommend that you don't use *\<sid>adm* to run SAPinst.
79
79
80
80
### Check Synchronization Service Manager
81
81
@@ -121,7 +121,7 @@ The Azure administrator should complete the following tasks:
121
121
* Grant the Contributor role-based access control (RBAC) role to this Azure AD user account for the resource group that contains the storage account that holds the file share. In this example, the user *[email protected]* is granted the Contributor role to the respective resource group.
122
122
* The user should run the script while logged on to a Windows Server instance by using an Active Directory domain user account with the permission as specified earlier.
123
123
124
-
In this example scenario, the Active Directory administrator would log on to the Windows Server instance as *[email protected]*. When the administrator is using the Powershell command `Connect-AzAccount`, the administrator connects as user *[email protected]*. Ideally, the Active Directory administrator and the Azure administrator should work together on this task.
124
+
In this example scenario, the Active Directory administrator would log on to the Windows Server instance as *[email protected]*. When the administrator is using the PowerShell command `Connect-AzAccount`, the administrator connects as user *[email protected]*. Ideally, the Active Directory administrator and the Azure administrator should work together on this task.
125
125
126
126

127
127
@@ -136,7 +136,7 @@ The Azure administrator should complete the following tasks:
136
136
1. Check the ACL on the *sapmnt* file share after the installation. Then add the *DOMAIN\CLUSTER_NAME$* account, *DOMAIN\\\<sid>adm* account, *DOMAIN\SAPService\<SID>* account, and *SAP_\<SID>_GlobalAdmin* group. These accounts and group should have full control of the *sapmnt* directory.
137
137
138
138
> [!IMPORTANT]
139
-
> Complete this step before the SAPInst installation. It will be difficult or impossible to change ACLs after SAPInst has created directories and files on the file share.
139
+
> Complete this step before the SAPinst installation. It will be difficult or impossible to change ACLs after SAPinst has created directories and files on the file share.
140
140
141
141
The following screenshots show how to add computer machine accounts.
142
142
@@ -163,8 +163,8 @@ The Azure administrator should complete the following tasks:
163
163
164
164
An SAP Basis administrator should complete these tasks:
165
165
166
-
1. [Install the Windows Cluster on ASCS/ERS nodes and add the cloud witness](sap-high-availability-infrastructure-wsfc-shared-disk.md#0d67f090-7928-43e0-8772-5ccbf8f59aab).
167
-
2. The first cluster node installation asks for the Azure Files SMB storage account name. Enter the FQDN *<storage_account_name>.file.core.windows.net*. If SAPInst doesn't accept more than 13 characters, the SWPM version is too old.
166
+
1. [Install the Windows cluster on ASCS/ERS nodes and add the cloud witness](sap-high-availability-infrastructure-wsfc-shared-disk.md#0d67f090-7928-43e0-8772-5ccbf8f59aab).
167
+
2. The first cluster node installation asks for the Azure Files SMB storage account name. Enter the FQDN *<storage_account_name>.file.core.windows.net*. If SAPinst doesn't accept more than 13 characters, the SWPM version is too old.
168
168
3. [Modify the SAP profile of the ASCS/SCS instance](sap-high-availability-installation-wsfc-shared-disk.md#10822f4f-32e7-4871-b63a-9b86c76ce761).
169
169
4. [Update the probe port for the SAP \<SID> role in Windows Server Failover Cluster (WSFC)](sap-high-availability-installation-wsfc-shared-disk.md#10822f4f-32e7-4871-b63a-9b86c76ce761).
170
170
5. Continue with SWPM installation for the second ASCS/ERS node. SWPM requires only the path of the profile directory. Enter the full UNC path to the profile directory.
@@ -174,7 +174,7 @@ An SAP Basis administrator should complete these tasks:
174
174
175
175
## Disaster recovery setup
176
176
177
-
Azure Files premium SMB supports disaster recovery scenarios and cross-region replication scenarios. All data in Azure Files premium SMB directories can be continuously synchronized to a DR region storage account. For more information, see the procedure for synchronizing files in [Transfer data with AzCopy and file storage](../../storage/common/storage-use-azcopy-files.md#synchronize-files).
177
+
Azure Files premium SMB supports disaster recovery scenarios and cross-region replication scenarios. All data in Azure Files premium SMB directories can be continuously synchronized to a DR region's storage account. For more information, see the procedure for synchronizing files in [Transfer data with AzCopy and file storage](../../storage/common/storage-use-azcopy-files.md#synchronize-files).
178
178
179
179
After a DR event and failover of the ASCS instance to the DR region, change the `SAPGLOBALHOST` profile parameter to point to Azure Files SMB in the DR region. Perform the same preparation steps on the DR storage account to join the storage account to Active Directory and assign RBAC roles for SAP users and groups.
0 commit comments