Technical Articles
Create SDA remote source in SAP HANA CLOUD using SAP Cloud Connector
SAP Cloud Connector serves as a link between SAP BTP applications and on-premise systems. Runs as on-premise agent in a secured network and provides control over on-premise systems and resources that can be accessed by cloud applications.
In this blog, you will learn how to enable cloud connector for HANA Cloud Instance, install and configure the cloud connector. Also to connect an SAP HANA on-premise database to SAP HANA Cloud using SDA remote source.
Cloud connector enablement for SAP HANA Cloud Instance
For New instance
- Go to SAP BTP home page and enter your account
- Enter Subaccount and then Space
- Click on SAP HANA Cloud on the left navigation menu
- Click on Create and then select SAP HANA database
- Follow the steps in wizard to create instance
- Under SAP HANA Database Advanced Settings, you can specify what IP addresses you allow by selecting enable the cloud connector option
- Open SAP Hana Cloud Central Cockpit
- Select the instance that you want to connect to an SAP HANA on-premise database
- Click on Manage Configurations
4. Select Edit
Install Cloud Connector
Download the cloud connector from Hana tools.
Refer SAP Help Document for supported browsers.
After the installation is complete, open a browser and enter “https://localhost:8443”
“8443” is the default port specified during installation.
“Administrator/manage” is the default login credentials which is case-sensitive. On first login, password needs to be changed.
Define Subaccount
In the Cloud connector, Subaccount needs to be defined to map to the subaccount that your SAP HANA Cloud database instance is located.
- Select the region of the subaccount
- Enter the subaccount ID
Details of Region and Subaccount ID can be obtained from the BTP cockpit as seen in the below image
Connect to SAP HANA on-premise system
- Click on Cloud To On-Premise on the left panel
- Click on the plus icon in the top right corner to add system mapping
Create SDA Remote Source Using Cloud Connector
Create a remote source in SAP HANA Cloud,SAP HANA Database to an SAP HANA on-premise database.
Prerequisites
- Need CREATE REMOTE SOURCE system privilege.
- The remote source is reachable by the network from the computer you are using.
- Download and import the SSL certificate signed by DigiCert.
REST API-based adapters communicate with the endpoint through an HTTP client. To ensure secure communication, the adapters require client certificates from the endpoint services. Connections to an SAP HANA database in SAP HANA Cloud, which are based on the hanaodbc adapter, also require an SSL certificate.
Refer the document Import Certificates for SSL Connections to Remote Sources.
Create a Remote Source Using SQL Syntax
In SQL console, execute a CREATE REMOTE SOURCE command by specifying the required properties
CREATE REMOTE SOURCE “SDA_CC”
ADAPTER “hanaodbc”
CONFIGURATION ‘<?xml version=”1.0″ encoding=”UTF-8″?><ConnectionProperties name=”connectionproperties”><PropertyEntry name=”adapterversion”>1.0</PropertyEntry><PropertyEntry name=”connectionmode”>adapterproperties</PropertyEntry><PropertyEntry name=”driver”>libodbcHDB.so</PropertyEntry><PropertyEntry name=”server”>virtual_host</PropertyEntry><PropertyEntry name=”port”>virtual_port</PropertyEntry><PropertyEntry name=”dml_mode”>readwrite</PropertyEntry><PropertyEntry name=”extraadapterproperties”>use_haas_socks_proxy=true;scc_location_id=locationid</PropertyEntry></ConnectionProperties>’
WITH CREDENTIAL TYPE ‘PASSWORD’ USING ‘user=<user_name>;password=<password>’;
Create a Remote Source Using Database Explorer
- In Database explorer, right-click the Remote Sources object in your database catalog and click Add Remote Source
After the connection is established the schemas and tables can be accessed from the HANA On-Premise system via the remote source.
Do other CREDENTIAL TYPE like KERBEROS and JWT are supported (instead of PASSWORD) in the case of SDA from HANA Cloud to HANA on-premise ? if yes, what are the additional steps required to make it working ?
Regards,
Michael
Hi Michael,
SSO Kerberos is supported in SDA only between on-premise HANA systems. That is, it is not supported in 'SAP HANA Cloud, SAP HANA database' and it also cannot be used in the hybrid scenario between SAP HANA Cloud and on-premise HANA.
Instead Single Sign-On (SSO) with JSON Web Tokens can be used.
https://help.sap.com/docs/HANA_CLOUD_DATABASE/477aa413a36c4a95878460696fcc8896/084d01055286438682ce8bb4afa87fc0.html
Regards,
Apoorva
Hi Apoorva Nagaraju
Thanks for this guide on connectivity on-prem HANA DB as SDA remote source. Can we also encrypt the communication with encrypt=TRUE property when communicating to on-prem HANA DB in additional adapter properties or it doesn't work when using the SAP cloud connector?
I have created a certificate collection with Digicert Root CA certificate in HANA cockpit with purpose as "REMOTE SOURCE" as advised in sap help - Create an SAP HANA Cloud, SAP HANA Database Remote Source | SAP Help Portal but when adding the encrypt along with other 2 properties for SCC I get SSL error. Appreciate it if you could advise if we can get encryption when using an SAP cloud connector.
Thanks,
Ankit
Hi Ankit,
encrypt=TRUE is not supported. Only the below extra adapter properties are supported.-
For details you can refer - https://help.sap.com/docs/HANA_CLOUD_DATABASE/477aa413a36c4a95878460696fcc8896/20d299d2f5224e8590982e8ad97362a2.html
Regards,
Apoorva
Hello,
very useful blog.
Is it possible to create odata adapter remote source in the same way using cloud connector? I am not able to find how to set the location id.
Thanks
Giuseppe
Hi Giuseppe,
Using SDI adapter via cloud connector is not supported. To set location id you can refer Define Subaccount section.
Regards,
Apoorva