SAP AG. All rights reserved
Transcription
SAP AG. All rights reserved
On Demand to On Premise Migration SAP Sourcing/CLM Webcast series SAP Sourcing Center of Excellence November 2012 SAP Sourcing / CLM 2012 Webcast Series Goal • Spread the knowledge about SAP Sourcing • Build and leverage the SAP Sourcing community Audience • SAP Consulting and Field Services • Partner Consulting • SAP Sourcing Customers Upcoming Webcasts • New Features in SAP CLM – eSignature, Delegation & Clauses © 2011 SAP AG. All rights reserved. Internal 2 Agenda 1. Project Outline 2. Preparation 3. Initialization 4. Testing 5. Production Preparation 6. Migration 7. Cutover 8. Other Information © 2011 SAP AG. All rights reserved. Internal 3 Project outline On Demand to On Premise Migration Audience • SAP Consulting • SAP Hosting • Customers & Partners Scope • High level project outline • Timelines • Documentation Goal • Migrate your On Demand system to an On Premise deployment © 2011 SAP AG. All rights reserved. Internal 5 Sample Project Plan Scalable Timeline proposal Activity Preparation 1 2 3 4 5 6 7 8 9 Preparation Kickoff Schedule Upgrade OD staging Review supported platforms Discuss Authentication strategy Initialization Initialize Provision software/hardware Setup OP landscape Communicate to users Installation Installation Install and configure NW Install Sourcing/CLM OP Testing Testing Dry run export DB Document/DB adjustments Test migration/authentication Migration Migrate Transport Production DB to customer Import and perform DB adjustments Test authentication Cutover Cutover Go/No-Go Decision End User Communication © 2011 SAP AG. All rights reserved. Internal 6 Process Preparation Initialization Testing Production preparation Migration Cutover Documentation Provision Hardware and Software Document process Production installation Shut down On-Demand / Hosted system Communication Prerequisites Build Sandbox Test migrated systems Plan Communication Transport production database to customer End Users Release Strategy DB Writeback Test user authentication mechanisms Final preparations before migration Import Database SAP Hosting General Considerations Database Dry Run Turn on email Go/No go decision Landscape Datapump import Declaring Intent Start Sandbox Software Download Load NW system properties Installation and Initial setup of NetWeaver and Sourcing production Test Deploy application Remap cluster information Authentication © 2011 SAP AG. All rights reserved. Internal 7 Preparation Documentation Requirements SAP Delivered Documents Installation Guide Configuration Guide Master Guide / Supported Platforms https://service.sap.com/eso Project recommended documents Timeline Landscape Diagram Hardware Specifications Software Specifications Export of System and Enterprise level properties. © 2011 SAP AG. All rights reserved. Internal 9 Prerequisites and Upgrade Strategy Prerequisites • Licensed SAP Sourcing Customer • On a release in maintenance • Running on Oracle General Considerations • It is required that the On Premise version be the same as the On Demand / Hosted version. [including patch level] Additional Planning • • • • • SAP Sourcing / CLM user authentication strategy How to handle any custom integrations Optional services : Optimizer, Contract Generation Authorizations – Plan for Internal and External authorization issues. Migrate from the On Demand ORACLE system to an On Premise ORACLE system: NO CONVERSIONS TO OTHER DATABASE PLATFORMS. © 2011 SAP AG. All rights reserved. Internal 10 On Premise version the same as the On Demand What does this mean? If a customer is on On Demand wave n+1 they cannot migrate to version n until that corresponding version or higher is available On Premise. Example 1:Once Wave 7 customers are on Wave 8, On Demand to On Premise is not be an option until Wave 9 is out and their On Demand system has been upgraded to it. Example 2: A customer is on E-Sourcing 5.X or 7.0 our preference is that they upgrade to SAP Sourcing 9.0 in the hosted environment prior to migrating On Premise. For some customers, the act of upgrading to version 9.0 prior to migration may be a several month process. © 2011 SAP AG. All rights reserved. Internal 11 Landscape considerations 1/3 Hardware Resources High Availability Application Database Authentication method(s) Security Design Securing external users Load balancing User concurrency for # of instances. Peak Average Network layers Domain Name Settings © 2011 SAP AG. All rights reserved. Internal 12 Landscape considerations 2/3 A detailed landscape diagram covering all environments, networks, firewalls, OS versions, etc. is required to ensure that the proper hardware is ordered and setup. The installation guide can be used as a reference. It is important to consider what additional "services" (e.g., Contract Generation, Optimizer, Virus scanner, Supplier Portal) will be included in the landscape. During this landscape preparation, it should also be determined what user authentication method will be used and how that will impact the migration. These steps should also review the supported platforms documentation to ensure desired landscape is supported. © 2011 SAP AG. All rights reserved. Internal 13 Example system landscape SAP Sourcing 9.0 3/3 Web/App Layer Web Server e.g. Enterprise Portal IDS/IPS http(s) https Firewall e.g. VPN Firewall https Load Balancer Buyside User Sellside User http SAP Sourcing SAP ERP ftp ftp SMTP LDAP Virus Scan* Database Layer NW CE J2 EE .NET* Optimizer* Database JDBC Layer Firewalls Oracle 11G *: These servers are optional and only required if that particular usage scenario is enabled © 2011 SAP AG. All rights reserved. FTP* Process Integration* ECC 6.0+* SERVER DESCRIPTIONS SMTP: Outbound SMTP Relay Required LDAP: Used for authentication Virus Scan: Symantec AV Scan Engine (server side software. Attachments are streamed through his service before being written to disk) NW CE J2EE: NetWeaver Java Web Application Server (NW CE 7.3 SP3) .NET: Server used for contract generation (requires MS-Word) Process Integration: SAP NW PI 7.0+ (for integration to ERP) FTP: typically used to move integration files around. File share could also be used IDS: Intrusion Detection/Protection; recommended: MacAfee 2750 ECC 6.0+: SAP ERP-MM (6.00 and higher) Internal 14 Declaring Intent to Migrate to On Premise Create a CSN message under the component LOD-ESO-HST Message must contain the following: SAP Consultant involved Customer information and SMP S#. Proposed dates Dry run Final cutover At a later date it is recommended to provide SAP Hosting with a static HTML page to replace On Demand login page. © 2011 SAP AG. All rights reserved. Internal 15 Software Preparation Check current On Demand version Discover what version you will be migrating. Check equivalent version is available for On Premise before requesting On Demand upgrade Read release notes. E.g Note 1485210 - SAP Sourcing 7.0 SP02 On Premise Support Pack Note Note 1526147 - Release Information Note for SAP Sourcing Wave 9 SP02 Download software Sourcing Application Contract Generation and MS Word Application Server Database software © 2011 SAP AG. All rights reserved. Internal 16 Initialization Provision Hardware and Software It is important to align the provisioning and expected hardware/software arrival dates with the consulting resource. This can lead to unnecessary bench time. Typically, this can be a cause for delays so it is good to understand this process early and ensure the necessary configuration items are ordered early on. Sample landscape and hardware requirements are available on the SAP Sourcing PAM [service.sap.com/pam] © 2011 SAP AG. All rights reserved. Internal 18 Build Sandbox System SAP Consulting should be provisioned to help with the installation. A baseline database installation should be done at this stage so that connectivity and configuration can be tested. SMTP Buyside/Sellside Login Load balancing DNS Optional services SAP consultants will require access to the hardware to assist with the installation. This is good learning stage for the Customer’s Basis resources. © 2011 SAP AG. All rights reserved. Internal 19 On Demand/Hosted Database Writeback A database write back from production to staging for import to the On Premise sandbox is required so that initial testing can be done using recent data. This should be initialized with a CSN ticket. Expect a 2 week lead time on this request. © 2011 SAP AG. All rights reserved. Internal 20 On Premise Dry Run Database Preparation The target Database for the On Premise installation is to be installed on its own hardware (BEST Practice) and is set up as outlined in the Installation guide’s Section 3.5. Identify Install Obfuscation Toolkit Create Install servers Tablespaces Oracle Text Search (Oracle 10g only) Create Oracle Service Account Gather Schema connection information Verify settings for sourcing. Copy JDBC Driver CREATE USER sourcing70 IDENTIFIED BY password DEFAULT TABLESPACE SOURCING TEMPORARY TABLESPACE TEMP PROFILE DEFAULT ACCOUNT UNLOCK; GRANT CONNECT TO sourcing70; GRANT RESOURCE TO sourcing70; GRANT CTXAPP TO sourcing70; ALTER USER sourcing70 DEFAULT ROLE CONNECT,RESOURCE,CTXAPP GRANT UNLIMITED TABLESPACE TO sourcing70; GRANT CREATE VIEW TO sourcing70; Migrations to SAP Sourcing 7.0 mandate that Oracle 11g is used. © 2011 SAP AG. All rights reserved. Internal 21 Dbimport Dry Run Prep Action • Establish the transport mechanism [HDD or FTP] • Identify DBA • Disable Scheduled tasks • Export DB using Datapump • Encrypt Export • Transfer or Courier data. Transport • Ensure secure transport. © 2011 SAP AG. All rights reserved. Internal 22 On Premise Data Pump import SAP will provide a Datapump export of the source database. Dump file name = <provided_filename> Source Schema Name = <ODschemaName> Target Schema Name = <OPschemaName> Source Tablespace= <ODtablespaceName> This is a generic Datapump Import statement that might be used to restore the DB on Premise . You will need to provide the ODschemaName and ODtablespaceName to complete this task. Target Tablespace = <OPtablespaceName> (SQLPLUS VERSION) impdp system/<password> DIRECTORY=DATA_PUMP_DIR DUMPFILE= <provided_filename>.dmp REMAP_SCHEMA= <ODschemaName> : <OPschemaName>REMAP_TABLESPACE= <ODtablespaceName> : <OPtablespaceName> © 2011 SAP AG. All rights reserved. Internal 23 Changing Timezone If the On Premise installation is in a different timezone form the hosted environment (America/New_York), the time zone offsets need to be fixed for the new time zone. A customized version of Convert_DB_TimeZone.xml will need to be created and executed also using dbimport. When migrating the Database outside of the New York EST time zone its timezone should be converted to whatever the local time of the new systems is. Documentation is available from SAP Support on this process. © 2011 SAP AG. All rights reserved. Internal 24 Start Sourcing Sandbox Run configure Enter Database connection Information Add context to match Undeploy Deploy Start new SCA application Check Login Note: old SCA log as system user. guides can be found at https://service.sap.com/eso © 2011 SAP AG. All rights reserved. Internal 25 Load NW system properties In the DB Importer, (DBimport) use the file picker to browse to and select fciinstall.jar/scripts/dev/import_netweaver_system_pro perties.xml These properties will require updating to use the fully qualified hostnames and ports as the system user after the application has been started. © 2011 SAP AG. All rights reserved. Internal 26 Deploy app in NW and start app Deploy the application using the JSPM. Start the application in NWA. © 2011 SAP AG. All rights reserved. Internal 27 Remap cluster information After the Database is imported bring up the application and login as system to the System Default cluster using the IP address of the machine as the hostname. http://<IPAddress>:50<INST_NO>00/<context>/fssystem/portal/lo gin Navigate to the cluster configuration area and update the active cluster associated with the context you will be using and update the following. Hostname Port Aliases Cluster Member Save the changes. © 2011 SAP AG. All rights reserved. Internal 28 Authentication The On Demand users are stored in OpenLDAP systems for the purposes of authentication. This user data can be exported in LDIF or CSV format for import into an existing Customer LDAP or centralized authentication system. Complications exist in the process of migrating passwords as different LDAPs cannot decrypt each others secured information. Having external users or vendors authenticate against an internal LDAP is often not allowed and so a security exception or new authentication system needs to be provided. © 2011 SAP AG. All rights reserved. Internal 29 Other Configuration changes…. Still as the system user, Update the Directory Configurations as needed. Update the System Properties as documented in the dry run, e.g. SMTP Optimizer IP Virus Scanner Contract Generation Login as the Enterprise User http://<IPAddress>:50<INST_NO>00/<context>/fsenterprise/portal/login Update Save all changes and restart the instance. Check Test any enterprise level properties / company data as required. the application logs for errors. end user access and complete testing checklist. © 2011 SAP AG. All rights reserved. Internal 30 Document process and adjustments The database copied from the SAP On Demand landscape to the On Premise landscape includes certain host and other information the requires updating. These updates should be documented at this point in preparation for the production migration. To be adjusted and documented for production migration: The installation guide is a good starting point for this If necessary – update database time zone offsets using the dbimport procedure provided Import NetWeaver Properties using dbimport Cluster(s) Directory configurations System Properties: Contract Gen URL JNDI host/port Optimizer host/port Master time zone, SMTP host, Virus Scan host, etc. © 2011 SAP AG. All rights reserved. Internal 31 Testing Testing Test user authentication migration Dry run of database export / transport / import Document database adjustments Time zone update Test migrated system Login as enterprise © 2011 SAP AG. All rights reserved. Internal 33 Test migrated systems and User Authentication SAP uses OpenLDAP for the authentication of users. We have found that different LDAPs (MSAD) don’t always have compatible password algorithms. It may be best for the customer to re-import all active users with the ‘generate password’ flag set. Based on the decision for how this will be done, a test should be performed to ensure that migration of user accounts to the On Premise deployment will work correctly. The customer should spend time testing the new On Premise landscape to ensure proper functionality. © 2011 SAP AG. All rights reserved. Internal 34 Production Prep Production Installation Plan communication to users Installation and initial setup of NW Installation of ESO Import SAP On Demand database copy into customer database Note: Document attached. © 2011 SAP AG. All rights reserved. Internal 36 Plan communication to Users Since URLs will be changing as part of the On Premise migration, it is good to plan a communication to the end users regarding the changes. An initial communication alerting the users is a good idea. © 2011 SAP AG. All rights reserved. Internal 37 Final Preparations before Migration It is Best practice to stop the following prior to Migration On Premise: In general, it would be best to have all RFxs and Auctions completed prior to the migration. There should be no e-mails in the queue when the Database is exported. Provide SAP Hosting with a static HTML page to replace On Demand login page. © 2011 SAP AG. All rights reserved. Internal 38 Installation and initial setup of NW Installation steps: For SAP Sourcing 7.0 a valid NetWeaver Java stack needs to be installed and prepared. Connected to the System Landscape Directory Patches applied UME configured to point to central LDAP if applicable. NetWeaver CE 7.3 download home on the service marketplace. © 2011 SAP AG. All rights reserved. Internal 39 Installation of ESO Production system Install requires software components and connect to prepared target database. A baseline database can be created with dbimport to test that the software is correctly installed. A decision should be made on whether you will reuse this schema or if it will be purely for testing the installs. © 2011 SAP AG. All rights reserved. Internal 40 Migration Transport and Continuation Transport production database to customer: The method of transport needs to be agreed upon by Hosting, consulting , and the customer. If a courier outside of consulting is used SAP cannot be responsible for the data during transit. If Physical Media is used, a best practice suggest the media is encrypted. TrueCrypt has been best practice for this purpose. If a customer wishes to provide a static HTML page to hosting stating that the system has moved and displaying the new URLs, we will stand that page up for 60 days post migration. Note: Documentation attached. © 2011 SAP AG. All rights reserved. Internal 42 Import Database Using prepared documentation on import process import the source database using Oracle Datapump Import (impdp). Time for this to occur can vary but we have experience of 18Gb’s taking approximately 8 hours. A better understanding of how long this will take will be established during the Dry run. © 2011 SAP AG. All rights reserved. Internal 43 Testing Production Use the documentation created from dry run of database export / transport / import to update the system. Database adjustments per documentation created Test migrated system © 2011 SAP AG. All rights reserved. Internal 44 Turn on email and enable Scheduled tasks Under the Daemons tab in System information edit and enable the Daemons. Review, update, and enable all scheduled tasks within Sourcing that were disabled prior to migration. © 2011 SAP AG. All rights reserved. Internal 45 Cutover Communication End Users New URL Reporting issues Authentication changes SAP Sourcing Hosting Team © 2011 SAP AG. All rights reserved. Internal 47 Go/No Go decision Go / No Go decision should be communicated to all parties involved, especially SAP Hosting. If No Go decision is made, SAP hosting will have to bring up the OD/Hosted system. The deadline for Go / No Go decision must be planned ahead of time and communicated to SAP hosting. This is important in that a no-go decision could result in the SAP hosted environment remaining intact. © 2011 SAP AG. All rights reserved. Internal 48 Other Information Database choice/conversion OD/Hosting databases are all held on Oracle Databases. In all cases we recommend that the customer migrates to another Oracle OP Database. © 2011 SAP AG. All rights reserved. Internal 50 Multi-tier landscape considerations Assumptions SAP hosting generally operates on a 2-tier system Standard SAP Best practices advocate a 3-tier landscape Alleviated by planning a DEV tier as the first and testing instance. Practice run on QA/Staging 4-tier landscapes will affect time line Landscape Architecture Staging/QA landscape mirrors Production and that user scalability & performance has been factored in. Concurrent users and expected landscape requirements. User activity report can be generated and used to better inform sizing decisions. © 2011 SAP AG. All rights reserved. Internal 51 ERP Integration Reconfiguration 1/2 •Refer to the On Premise ERP Integration guide before attempting any of these steps. •PI & ERP Integrations must be reconfigured especially for upgrades. •Best considered as its own integration project •Sourcing Steps After application migration to On Premise , Import the PI content of On Premise version and follow the integration guides configuration steps. •Master 1. 2. 3. 4. • Data integration Create outbound/inbound directories for data import of materials, vendors, rfx Create directories - upload, queue, archive for the scheduled tasks Update the scheduled task parameters - Remove the hosting FTP server information Update the FTP parameters in Integrated System Configuration Business Document Integration 1. Update the PI URL in Integrated system configuration . If PI and sourcing on the same network , Http/https can be used . Update the external host name to the internal hostname or internal IP. Internal © 2011 SAP AG. All rights reserved. 52 2. If https is used, install the root/intermediate certificate on sourcing server. ERP Integration Reconfiguration 2/2 PI configurations 1. Update PI configuration to send/receive files from the outbound/inbound dir created in Master Integration Point 1. 2. Remove the host file entry containing the IP and host name of the hosting FTPs server. Network configuration 1. Disallow the ports 30000-40000 outbound for hosting FTPs data connection in the firewall 2. Remove the IP address of the hosting sourcing server from the firewall allowed for https inbound connection © 2011 SAP AG. All rights reserved. Internal 53 © SAP AG. All rights reserved No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice. Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors. Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation. IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer, z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registered trademarks of IBM Corporation. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries. Oracle is a registered trademark of Oracle Corporation. UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc. HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World Wide Web Consortium, Massachusetts Institute of Technology. Java is a registered trademark of Sun Microsystems, Inc. JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape. SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and other countries. © 2012 SAP AG. All rights reserved. Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Business Objects Software Ltd. Business Objects is an SAP company. Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybase products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Sybase, Inc. Sybase is an SAP company. All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary. The information in this document is proprietary to SAP. No part of this document may be reproduced, copied, or transmitted in any form or for any purpose without the express prior written permission of SAP AG. This document is a preliminary version and not subject to your license agreement or any other agreement with SAP. This document contains only intended strategies, developments, and functionalities of the SAP® product and is not intended to be binding upon SAP to any particular course of business, product strategy, and/or development. Please note that this document is subject to change and may be changed by SAP at any time without notice. SAP assumes no responsibility for errors or omissions in this document. SAP does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence. The statutory liability for personal injury and defective products is not affected. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages. Thank You! Contact information: Paul Wagner Software Engineer SAP Sourcing - Center of Excellence Cambridge, MA. USA 617 715 7455