1. SUSE Linux Enterprise Server for SAP Applications: HP Partner Event, April 2015
Bob Fidrych
HP Partner Executive
Rodolfo Bejarano
Sales Engineer

2. Question
Over x% of SAP customers using Linux prefer SUSE Linux Enterprise Server for SAP Applications
70%

3. Agenda 3 HP- SUSE Partnership Linux/SUSE in SAP ecosystem
SAP specific offering: SLES for SAP
Hardening your HANA System
Additional Info/Big Winner
SUSE is a standalone division of the Attachmate Group.
Other divisions include Attachmate, NetIQ and Novell.
Attachmate provides products and services to help you leverage your legacy systems and applications to meet today’s needs. Attachmate solutions cover host connectivity, legacy modernization, managed file transfer, and enterprise fraud management
NetIQ delivers a breadth of solutions that help you securely deliver and manage computing services across your physical, virtual and cloud computing environments. NetIQ solutions cover identity, security and compliance management, systems management and resource management.
Novell provides you with the right tools to enhance productivity, allowing end users to work together more efficiently and communicate more effectively. Novell solutions cover collaboration, file and networking services, and endpoint management.
The governing philosophy of the Attachmate Group (including its divisions) is to deliver quality products, provide exceptional service, and be easy to do business with.

4. HP and SUSE – Alliance Overview
Broad Relationship
Partners for over 23 years—OEM, Reseller, Engineering, Support
Product Offering Integration
HP offers a great selection of SUSE Linux Enterprise Server (SLES) offerings on the HP price list, including SLES, SLES for SAP, SLEHA, and SLES for HPC
HP Technology Services provides the SUSE technical support for all of the HP OEM SUSE Linux Enterprise offerings they provide
Technical Collaboration
SUSE Linux Enterprise is certified across the HP ProLiant and BladeSystem server lines (incl. Moonshot Servers); also certified across HP Storage line
EVERY Gen8 ProLiant Server ships with/initially boots off of SUSE technology—base of HP’s Gen8 ProLiant server feature called “Intelligent Provisioning”
Many HP-SUSE Reference Architecture’s including HANA and new HP- SUSE-Hortonworks

5. Benchmark Release with SLES11 SP35
Benchmark Release with SLES11 SP3
New HP ConvergedSystem 900 for SAP HANA
captures top spots on SPECjbb2013-MultiJVM
benchmark
Performance Brief
SUSE is a standalone division of the Attachmate Group.
Other divisions include Attachmate, NetIQ and Novell.
Attachmate provides products and services to help you leverage your legacy systems and applications to meet today’s needs. Attachmate solutions cover host connectivity, legacy modernization, managed file transfer, and enterprise fraud management
NetIQ delivers a breadth of solutions that help you securely deliver and manage computing services across your physical, virtual and cloud computing environments. NetIQ solutions cover identity, security and compliance management, systems management and resource management.
Novell provides you with the right tools to enhance productivity, allowing end users to work together more efficiently and communicate more effectively. Novell solutions cover collaboration, file and networking services, and endpoint management.
The governing philosophy of the Attachmate Group (including its divisions) is to deliver quality products, provide exceptional service, and be easy to do business with.

6. Benchmark Release with SLES11 SP36
Benchmark Release with SLES11 SP3
“Record-breaking performance never happens by chance. The HP ConvergedSystem 900 for SAP HANA is the best platform for real-time in-memory computing, and our work with SUSE helps customers get the most out of the architecture.”
-- Paul Miller, Vice President of Marketing, HP Converged Systems
SUSE is a standalone division of the Attachmate Group.
Other divisions include Attachmate, NetIQ and Novell.
Attachmate provides products and services to help you leverage your legacy systems and applications to meet today’s needs. Attachmate solutions cover host connectivity, legacy modernization, managed file transfer, and enterprise fraud management
NetIQ delivers a breadth of solutions that help you securely deliver and manage computing services across your physical, virtual and cloud computing environments. NetIQ solutions cover identity, security and compliance management, systems management and resource management.
Novell provides you with the right tools to enhance productivity, allowing end users to work together more efficiently and communicate more effectively. Novell solutions cover collaboration, file and networking services, and endpoint management.
The governing philosophy of the Attachmate Group (including its divisions) is to deliver quality products, provide exceptional service, and be easy to do business with.

7. HP Uses SUSE Linux
HP Video

8. Business Case for migrating SAP to SUSE Linux

10. SAP installations on Linux steadily increasing each year (SCN)
Most SAP UNIX migration goes to Linux
Linux on Intel achieves 5x SAPS/$
No Limits for SAP workloads on Linux
Competitive Advantage
Improved Performance
High Availability
Increased Reliability
Tightened Security
Source: The Trend from UNIX to Linux in SAP Data- Centers, RealTech Consulting, Oct 2012

12. SAP’s #1 Linux (since 1999) 1999 First Linux certified for SAP 2006
First OS certified for SAP ACC “
Only OS selected for use with SAP BWA
SAP's Linux/UNIX software development platform
2007
First virtualization validated for SAP
First joint support through SAP Solution Manager
2008
Installation Wizard for SAP and SUSE software
Only OS selected for use with SAP Business ByDesign
SAP Pinnacle Award 2008 Winner
2009
Only OS recommended and supported for SAP HANA
SAP Pinnacle Award 2009 Finalist
2010
4 validated high availability best practices with SAP Linux Lab
First Linux supported on Amazon Web Services
2011
SUSE Linux Enterprise Server for SAP Applications
2012
Distribution of ClamSAP (anti-virus connector to ClamAV)
SUSE celebrates 20th anniversary
First Linux certified for SAP NetWeaver High Availability
2013
SUSE ads new channel program for SAP Business One HANA

13. Why SUSE® for SAP ?
20,000+
SAP customers are using Linux to run the database and/or application server
of these are running their workloads on SUSE Linux Enterprise
SUSE Linux Enterprise is SAP's development platform for UNIX and Linux
SUSE Linux Enterprise is the recommended and supported OS of choice for SAP HANA
First Linux distributor to certify HA extension for integration with SAP Netweaver
70% #1 #1 #1

14. SUSE Linux Enterprise Server for SAP The only operating system optimized for SAP Applications
Built in HA components to enable you to protect Mission Critical Applications
Extended Update Cycle (18 months) to fit your needs
Enables High Performance of Large Workloads
Integrated Priority Support from both SUSE and SAP
Enables Fast and Easy Deployment with Installation Wizard

15. The Recommended OS for SAP HANA SUSE Linux Enterprise Server for SAP Applications
5000 customers
SAP IT reference
HP, IBM, Dell, Cisco, Fujitsu, Hitachi, Huawei, VCE, NEC, SGI,
Unisys, Lenovo
Settings
Firewall
JeOS
Reliability
Security
Maintenance
Availability
Up to 13 years
Flexibility
Guidance
SLA
Built-in HA
Supported

16. News Headlines
1616

17. Securing SAP HANA with SUSE Linux Customized OS Security Hardening for SAP HANA
SUSE Linux Enterprise Security Guide for SAP HANA
Security Hardening Settings for HANA
SUSE Firewall for HANA
Minimal OS package selection
SUSE Security Updates

18. Classification of the Hardening Guide
OS Security
Hardening Guide
for SAP HANA
SAP HANA
Security Guide
SUSE
Security Guide
SAP HANA specific
Operating System generic
SAP provides a security guide, but this focus on the DB internal security settings. .
SUSE provides a security guide, but this is a general guide for all possibilities
We fill now the gap with a new guide which takes
care of the OS Security Hardening for SAP HANA
1818

19. Security Hardening Settings Categories
Authentication Settings → User login restrictions, password policy, etc.
System Access Settings → Local and remote access restrictions
Networking Settings → i. e. behavior of the Linux IP stack
Linux Service permissions → i. e. disallow of 'at'-jobs
File permissions → Access rights of security-critical files
Logging and Reporting → Behavior of the system logging, security reports, etc.
1919

20. Security Hardening Settings Detailed Example: Prohibit login as root via ssh
Description
By default, the user “root” is allowed to remotely log in via ssh. This has two disadvantages: First, root logins are logged, but cannot be associated with a particular user. This is especially a disadvantage if more than one system administrator makes changes on the system. Second, a stolen root password allows an attacker to login directly to the system. Instead of logging in as a normal user first, then doing “su” or a “sudo,” an attacker just requires the root password.
Procedure
Edit /etc/ssh/sshd.conf and set parameter
PermitRootLogin no
Impact
Root no longer can be used to login remotely, so that users are required to use “su” or “sudo” to gain root access when using ssh.
Priority: high
Don't be affright because of the heavy text. .
This is a real example out of the guide
5 headings (self explaning) 20

21. SAP HANA Technical Operation Manual
Updating and Patching the Operating System
The customer is generally responsible for implementing operating system patches.
OS security patches may be installed immediately after they are available.
Any updates related to kernel or runtime libraries (glibc) need to be validated and approved by SAP beforehand (and the relevant HW partner).
OS Service Packages (SPs) can be downloaded and applied to the SAP HANA system only according to agreements with the respective hardware partner.
Do not change configuration settings when you patch the operating system unless explicitly stated in the corresponding SAP release note. 21

22. Availability of the Hardening Guide
Download link →
About the Authors → Developed by Markus Guertler SAP Linux Lab) and Alexander Bergmann (SUSE Maintenance & Security Team)
Future Outlook
Additional and improved hardening settings
Improvements of the firewall (i. e. automatic detection of installed HANA systems)
Further reduction of the minimal set of packages 22

23. Competitive Assessment
Product Elements
SLES 11
SLES for SAP Applications 11
RHEL 6 for SAP
Basic
Priority
Premium
Maintenance / Update X
Dedicated SAP Update Channel
Priority Support 24X7
SAP Solution Manager Integration
Installation Wizard
Linux Kernel 3.0
Xen Virtualization supported by SAP
KVM Virtualization supported by SAP
Page-Cache Limit
Expanded Service Pack Overlap Support
High Availability Clustering
Cluster File System support
Support for SAP required JVM
ClamSAP integration

24. Additional Information

25. CLP Training Academy for Partners (Certified Linux Professional)
4,000 USD Value
New to Linux Administration
SUSE Linux Enterprise 11 Fundamentals – 3 days
SUSE Linux Enterprise 11 Administration – 5 days
SUSE Linux Enterprise 11 Professional – 5 days
Exam: CLA & CLP
By invitation only
Flexible 11-week
Self-study
Training portal
Regular assignment
Weekly webcast
Live instructor
Also in September we kick off our next round of our Linux Training Academy.
This is a unique course as we have taken an intense two week course and stretched into smaller segments so that it lasts 15 weeks, but can be done from you location. It is a combination of Lab Work, Video’s and a weekly conference. We have received a lot of kudo’s about this course.
Those you finish the course are granted free vouchers for third party exams, which can earn you Certified Linux Admin or Certified Linux Professional designations.
We have a class stating in Sept, which is almost full, and another class staring in Feb.
For the first time we are offering this class to Cisco and Cisco partners, and there is NO charge.
We also have upcoming future SLES for SAP and SUSE Cloud classes.
Please contact us if you are interested.
All of this is at No Charge to HP Partners and Includes the Test Vouchers
Academy occurs twice a year
Contact to get on list for next training

26. Linux Training for SAP Administrators SUSE administration course with relevant SAP technical content
SUSE Linux Enterprise Server 11 for SAP Applications Administration
Designed for SAP administrators
Become Linux administrator
Learn SAP specific Linux configurations
4 days online hands-on technical training
Price €1,750
Help prepare for the SUSE CLA 11 certification exam

27. Appendex- SAP Notes Relevant SAP Notes*
SAP Software on Linux: Essentials
SUSE LINUX Enterprise Server 11: Installationsguide
SUSE Priority Support for SAP Applications
Linux paging improvements
Linux: SAP Support in virtualized Environments
VMware Knowledge base
Disabling simultaneous write protection provided by VMFS using the multi-writer flag
* SAP S-User Id required

28. Appendex- More Information
SUSE Websites
SUSE Linux Enterprise Server for SAP applications
SUSE and SAP Alliance
SUSE Linux Enterprise and SAP HANA
SUSE Linux Enterprise for SAP Applications
Overview and Features
Video Introduction
Solutions Guide
Success Stories
Whitepapers
Best Practice Guides (High Availability)
FAQ
Technical Information
Evaluation Download

29. Grand
Prize

30. Summary- SUSE Linux The First Linux for SAP HANA is still the best for Linux for HANA

31. Summary The First Linux for SAP HANA is still the best for Linux for HANA
#1 The leading platform for SAP solutions on Linux #1 The only Enterprise Linux optimized for SAP solutions #1 SUSE Linux Enterprise is SAP's development platform for UNIX and Linux #1 SAP HANA was first developed and built on SUSE Linux Enterprise #1 SUSE Linux Enterprise is the recommended and supported OS of choice for SAP HANA with over 5,000 servers to date #1 The most secure OS available for SAP HANA