Technical Articles
Manage SAP on GCP with SAP LaMa Adapter for GCP – Part 1
Managing your SAP landscape efficiently is key for any organization, both from an IT to business perspective. This is especially true when you are running your system in the cloud. In this regard, Google released a free-of-charge adapter for SAP LaMa, which allows you now to assess this part of the cloud journey on GCP.
In this 2-part article, I will explain and show you how to proceed with this adapter, but also highlight the available operations.
SAP LaMa Adapter for GCP
Before starting any action and to guarantee the success of the exercise, it is important to do some research on our subjects.
Here is a collection of guides, references, and SAP Notes to be reviewed.
Note that these references differ from the previous article, so take the time to review them.
SAP Notes
3051302 – SAP Landscape Management 3.0 SP20
2039615 – Managing system landscapes with SAP Landscape Management Enterprise Edition
3078321 – Google Cloud Connector for SAP Landscape Management (LaMa) 3.x, enterprise edition
2456432 – SAP Applications on Google Cloud: Supported Products and GCP VM types
2488113 – Discover SAP HANA Multitenant Database Containers in SAP LaMa 3.0
2844322 – SAP HANA Platform 2.0 SPS 05 Release Note
Guides
SAP Landscape Management 3.0, Enterprise Edition
SAP Landscape Management 3.0, Enterprise Edition, Developer Guide
Knowledge Base
SAP on Google Cloud Documentation
What and how to articulate it?
Before diving into the technical detail about the process and the solution, let’s first review some comprehensive and basic understanding.
If you are reading this article you might be already familiar with the SAP LaMa product, If not I’m here to share 😉.
SAP LaMa default Adapter
SAP LaMa Adapter Option 1
The other option will be to run your SAP LaMa instance in GCP directly. Will this be simple? Yes, but you need to be mindful of some requirements, including:
- You will need to run SAP LaMa on a certified VM for SAP workload, you will find the certified VMs on the SAP Note 2456432—SAP Applications on Google Cloud: Supported Products and GCP VM types
- Make sure that you have the required API scope activated for VM instance
- Finally, just like for the on-prem option, a dedicated service account.
SAP LaMa Adapter Option 2
Prepare your managed system
We know what it takes now for the SAP LaMa portion, so let’s dive in and prepare the managed environment. The 3 following components will need to be deployed on your remote system:
- SAP Host Agent 7.21 PL51 or higher required
- SAP Adaptive Extension 1.0 EXT PL61 or higher
- Host Agent Extensions for Google Cloud
SAP LaMa GCP Host Extension
GCP Connector Download
GCP Connector Script Installation
Make sure to have the operations.d folder in the exe repository. The script will copy all the necessary libraries for LaMa to perform GCP actions.
Google Machine Image
Authentication and Access Control
In order for SAP LaMa to interact with GCP resources, a service account will be required whatever scenario you envision (on-prem/GCP). I would recommend you to create a dedicated user for more control and visibility.
GCP Role Console
GCP Custom Role Creation
GCP Role Permission
SAP LaMa Full Custom Permission
SAP LaMa Custom Enabled
GCP Service Account Creation
GCP Service Account Role Assignment
GCP Service Account KEYS
Service Account Key Creation
Service Account Key JSON Format
Note that the key might be downloaded automatically on your laptop, hold it we will open it later.
Service Account Key Active and Download
Install and Configure the SAP LaMa Adapter for GCP
Google CA Certificate Repository
Google GTS CA Certificate Download
SAP Netweaver Certificates and Keys
SAP Netweaver TruestedCAs
Import Google Certificate
Google Certificate Details
Netweavre IPv6 avoid
SAP LaMa GCP Connector Deployment
SAP LaMa Cloud Manager
I will click next and provide my label and monitoring interval, but because I’m using a dedicated service account, I will past the content of my private JSON key generated earlier in the “Service Account” field under Additional Properties.
GCP Service Account Key Content Detail
SAP LaMa Cloud Manager GCP Configuration
GCP Cloud Adapter Testing
SAP LaMa Storage Managers
SAP LaMa Virtualiztion Managers
SAP LaMa Advanced Operations
GCP Console Compute Engine Instances
Conclusion
The preparation to run SAP LaMa for GCP is not complicated but will require some attention in regard to the authorization that needs to be granted for your service account. Indeed, we want to be careful and avoid security problems especially if you grant these authorizations at the organization level, which will be inherited to all subsequent projects created.
In the second part of this blog, I will walk you through several operations available from SAP LaMa to GCP, from template deployment to system copy and backup.
Hey Williams,
great and extensive blog post on LaMa EE and GCP, love it! Looking forward to the second part and the scenarios you are shooting for.
Cheers from Munich and merry Christmas in advance from the LaMa PM team,
Andreas
Hey Andreas, thank you very much for your comment, and Merry Christmas in advance too to the team ;-).
Williams
addressed - thanks on their behalf 😉