SAP ANANLYTICS FOR CLOUD CONNECTION TO LIVE SAP HANA

[millicentdark]

Hello Experts,

I am trying to create a Live connection from SAC to my on-premise Live HANA Database.

I have assigned the needed roles to the SYSTEM user and I have imported certificate successfully.

I have also done the XS classic activities and also done the needed CORS settings as shown attached.

Below is my PSE settings successfully done as shown below;

When I log in to the cloud platform to connect to my HANA DB I get the below error ;

Connections steps;

Error;

I have checked my CORS settings as shown below;

Any help on what is missing and how to make connection from SAC go through directly to my on-premise HANA system

Regards

Justice

[dvankempen]

You are on release SAP HANA 1.0?

Assume this should work.

The InA protocol goes back to 2012, or so (SP04/05) and relies on HANA XS classic.

[millicentdark]

Yes SAP HANA 1.0 SP12.

[dvankempen]

For test/dev, no need to populate all the values, CN suffices, any name will do.

Certificate > CN=sap-saphana-vm

Live connection configuration > sap-saphana-vm

1:1

[millicentdark]

Thank you, I will do that and give you feedback. I am also going over your YouTube videos step by step to see if I missed anything.

[millicentdark]

Public URL (XS) i am not using a multitenant DB. Can I use a single DB for this?

[millicentdark]

In my environment, I do not have a public URL to map to my local SAP HANA server. I rather have a public IP address.

Should I generate my certificate with the Public IP and also open ports 43<Instance number> and 80<instance number>?

That is how I can access my on-premise SAP HANA system via SAC?

SAP-SAPHANA-VM is my HANA server Local name.

Please advice.

[dvankempen]

Hi Justice,

I have posted a blog on this topic that goes through this step-by-step, including troubleshooting steps:

• https://blogs.sap.com/2019/05/28/sap-analytics-cloud-live-connection-to-sap-hana/

The CORS error message is fairly generic.

The error contains a message about the allowed origin. Try if your configuration works when allowing traffic from everywhere. If not, check your host name.

CN=SAP-SAPHANA-VM.persolgh.com in certificate (FQDN with uppercase hostname)

sap-saphana-vm (lowercase host without domain) in SAC Live configuration. I would configure this matching 1:1 (case and all).

[millicentdark]

Can I create my certificate CN=SAP-SAPHANA-VM in this form without the domain name? So that I can have a matching 1:1?

Example: CN=SAP-SAPHANA-VM, OU=HANA, O=SAP, C=EN, DNS=SAP-SAPHANA-VM: SAP-SAPHANA-VM

Is the above right?

I will go through your blog as well.

My Allowed origin should be my SAC account / URL assigned to my company Persol right?

Regards

Justice

[millicentdark]

Hello Mohammed,

Please find below as requested, the result from running the URL;

Please can you share with me a command or query to check if my certificate generated is valid on the HANA system?

Regards

[millicentdark]

Hello Martijn van Foeken,

Please find below as requested;

My server is a Suse Linux server, Please can you direct me on how to check from the Linux server/HANA system the SSL certificate validity?

Any command or query to run to share results with you?

Regards

[mfoeken]

Hi Justice,

Can you open the Developer Tools (via F12) in Chrome before you try to connect to your HANA system and check the network and console tab? Please share the result here. Did you check the SSL certificate on the HANA system is valid. What happens if you browse to HANA XS page?

Kind regards,

Martijn van Foeken | Interdobs

[former_member456023]

Hi,

Can you cross check the following

1. SAP HANA User (SYSTEM) Password

2. Use this HTTPS service port to navigate to the URL and test the InA connection and the JSON response: https://<hanahost>:<port>/sap/bc/ina/service/v2/GetServerInfo

Note - If you see the sign Secure in green next to the “https://”, then your server is configured for HTTPS with secured/signed SSL certificate.

Thanks
Ashraf