SAP Solution Manager Enterprise Edition
License Management / Maintenance Certificate
Ing Thomas Winkler,
Maintenance of an SAP landscape – the
Challenge
Development Landscape
DEV
Test Landscape
TST
Productive Landscape
PRD
+ ChaRM
+ SLM
OS / DB patches
SAP kernel patches
SAP Support
packages & patches
SPAM /
JSPM
Custom Development
/ Customizing ABAP
(Single) SAP Notes
Custom Development JAVA
© SAP 2008 / Page 2
TMS + OTO
MOPZ Governance
Recommended Standard Maintenance Process
Phase SAP Service
1
Marketplace
SAP Solution
Manager
Software
Lifecycle
Manager
Software
Logistics
Tools
Control download of
support packages &
enhancement packages
Integration of Software
Lifecycle Manager
Integration of Change
Request Management
Additional technical
checks through
Maintenance Certificate
Change Request Management
Phase SAP Service
Marketplace
2
SAP Solution
Manager
Software
Lifecycle
Manager
Software
Logistics
Tools
Change Request Management
Phase SAP Service
Marketplace
3
SAP Solution
Manager
Software
Lifecycle
Manager
Software
Logistics
Tools
Change Request Management
© SAP 2008
Required,
as of April
‘07
optional
Maintenance Certificate
Required, as of January ‘09
Maintenance Certificate in detail
The Maintenance Certificate ensures that only customers with a valid maintenance
contract can apply Support Packages. It prevents unauthorized use.
Coverage:
All SAP products based on SAP NetWeaver 7.0 and beyond (including SAP Business
Suite 2005)
Deployment of Maintenance Certificates:
Automatically to all systems by SAP Solution Manager
Manual fall-back scenario (self-service) will be offered in SAP Support Portal
Validity:
A Maintenance Certificate has a validity of 3 months
Procedure:
Maintenance Certificate is stored in license store of SAP system (Transaction:
SLICENSE)
SAP import tools (e.g. SPAM, SAINT, JSPM,…) check for valid Maintenance Certificate
Import is stopped if no Maintenance Certificate is available
© SAP 2008 / Page 4
Example – Maintenance Certificate File
----- Begin SAP License ----SAPSYSTEM=MAR
HARDWARE-KEY=P1719877629
INSTNO=0020224520
BEGIN=20080115
EXPIRATION=20080415
LKEY=MIIBOgYJKoZIhvcNAQcCoIIBKzCCAScCAQExCzAJBgUrDgMCGgUAM
AsGCSqGSIb3DQEHATGCAQYwggECAgEBMFgwUjELMAkGA1UEBhMCREUxHDA
aBgNVBAoTE215U0FQLmNvbSBXb3JrcGxhY2UxJTAjBgNVBAMTHG15U0FQL
mNvbSBXb3JrcGxhY2UgQ0EgKGRzYSkCAgGhMAkGBSsOAwIaBQCgXTAYBgk
qhkiG9w0BCQMxCwYJKoZIhv
SWPRODUCTNAME=Maintenance_DB6
SWPRODUCTLIMIT=2147483647
SYSTEM-NR=000000000310537041
SWPRODUCTNAME = Maintenance_<Database> indicates a Maintenance Certificate
© SAP 2008 / Page 5
Display Successfully Installed Maintenance
Certificate (ABAP)
1.
Run transaction SLICENSE
2.
Choose „New Licenses“
3.
Section „Installed Licenses“
shows a table Maintenance
Certificates (issued for each
Hardware Key) and Product
Licenses.
Distribution of Maintenance Certificate –
automated or manual
Distribution through SAP
Solution Manager
(recommended)
Manual
distribution
Master Data
Customer
Data
Exchange
---- Inst 00001234
---- Inst 00001245
---- Inst 00001256
Automatic
Regular Automatic
Key
Updateof Maintenance
Updates
Certificate
on regular basis
Data
Exchange via
SAP Service
Marketplace
SELF-SERVICE:
Request
Certificate
Maintenance
Certificate is
installed
manually on
every system
SAP Solution
Manager
distributes
Maintenance
Certificate to
system
SAINT
SPAM
JSPM
SAINT
SPAM
JSPM
Manual deployment vs. automated deployment
via SAP Solution Manager
In order to minimize the effort for customers an automated
deployment for Maintenance Certificate is offered
The usage of automated deployment is recommended but optional for
customers
Automated deployment requires a network connection to SAP as well as a
connection to all systems that require Maintenance Certificates
It is possible to use the automatic deployment option for some systems and
the manual deployment for other systems
SAP Solution Manager 7.0, Service Pack 16 is required for automatic
deployment
A manual deployment option will be available in SAP Support
Portal
Customers can request Maintenance Certificates via self-service
Maintenance Certificate has to be downloaded and imported manually
© SAP 2008 / Page 8
Automatic Distribution of Maintenance
Certificate
Customer
SAP Solution Manager
SolMan requests 1
Maintenance Certificates
Global Support
Backbone
Maintenance
Certificates are
generated
2
Managed system
3
SolMan receives
Maintenance Certificates
4
System receives
Maintenance Certificate
1
2
3
4
SAP Solution Manager requests Maintenance Certificates for all connected systems
Maintenance Certificates are generated in Global Support Backbone
SAP Solution Manager receives Maintenance Certificates upon next connection
Managed system pulls Maintenance Certificate from SAP Solution Manager
End to end process may take up to 48 hours (as SAP Solution Manager connects to Global
Support Backbone once a day)
© SAP 2008 / Page 9
Maintenance Certificate (ABAP Systems)
Automatic Distribution of Maintenance Certificate
SAP
Customer
SAP System
SAP Solution
Manager
Request
Maintenance
Certificate for all
known relevant
systems, which
keys are invalid or
not yet locally
stored
SPAM/SAINT:
Check for
valid
Maintenance
Certificate
SDCCN:
Request
Maintenance
Key
SDCCN: Get
Maintenance
Certificate
SDCCN:
Store
Maintenance
Certificate in
SLICENSE
Provide
Maintenance
Certificate for
all systems
SAP Support Backbone
Job: REFRESH_ADMIN_DATA_FROM_SUPPORT
Updates SMSY, Runs once per day
Yes
Check Maintenance
Status of System
Maintenance Certificate
exists?
No
Trigger Creation of
New Maintenance
Certificate
(Certificate available to
picked up at next day)
Maintenance Certificate – Summary
The Maintenance Certificate enables software logistics tools to identify your system
and the exact scope of your corresponding SAP maintenance agreement. It ensures
that no unwanted Support Packages are applied and prevents unauthorized use.
Coverage:
All SAP products based on SAP NetWeaver 7.0 and beyond (including SAP Business Suite 2005)
Deployment of Maintenance Certificates:
Automatically to all systems by SAP Solution Manager 7.0
Manual fall-back scenario (self-service) will be offered in SAP Support Portal
Timeline:
Pilot phase started in February (with selected customers)
Automatic deployment via SAP Solution Manager available for all customers in May ‘08 (SP 16 of SAP
Solution Manager + SAP Notes) (ABAP)
Maintenance Certificate visible / available in SAP Support Portal in June ‘08
Required for all customers January ’09
Planned: Automatic deployment via SAP Solution Manager available for all customers in May ‘08 (SP
21 of SAP Solution Manager + SAP Notes) (JAVA)
More information:
SAP Support Portal: /maintenancecertificate
© SAP 2008 / Page 11
Effected Lifecyle Management Tools
Tool
Version
Status
Remarks
SPAM/SAINT 700
0031 (Oct 2008)
Warning
SPAM/SAINT 700
0034* (Jan 2009)
Version is in preparation, Check
JSPM 701
SP02
Warning
JSPM 701
SP03 (Q4 2008)
Warning, for Double Checks, Maintenance
Certificate of ABAP Stack is checked
SAPINST
--
--
Check of Maintenance Certificate not
required during installation.
SAPUPGR
in Prep.
Upgrade not yet covered, recommended to
integrate check as of starting release 700.
EhPI
in Prep.
Integration of check in preparation,
technically similar to SAPUPGR.
Technical Prerequisites
SAP Solution Manager
SAP Solution Manager 4.0 with Support Package Stack 15 + Support Package Collection
SP16
Activated automatic license data distribution in SAP Solution Manager configuration (SPRO),
under Scenario-Specific Settings Change Management License Management.
Scheduled background job REFRESH_ADMIN_DATA_FROM_SUPPORT
(schedule via transaction SM_CONFIG_JOBS).
Managed System (Satellite System)
ABAP Basis 700 or higher
ST-PI Support Package 2005_1_700 SP06 or 2005_1_710 SP004 or higher
SAP Note 1134886 to activate extended logs
(functionality is also active without the Note, but extended logs are created in case of problems)
Activated SDCCN and system is connected to Solution Manager system (via Back
Destination). That means, EarlyWatch Alerts are processed in Solution Manager
System Number is known in Satellite System (check with transaction SLICENSE)
Display Current Maintenance Status in SAP
Support Portal – Installation Level
No valid Maintenance Agreement exists for this Installation Number
/system-data
A missing agreement is indicated in System Data. A Maintenance Certificate would not be
issued.
Display Current Maintenance Status in SAP
Support Portal – System Level
No valid Maintenance Agreement exists for this Installation Number
/system-data
A missing agreement is indicated in System Data. A Maintenance Certificate would not be
issued.
SAP Support for Maintenance Certificates
Related components
Component
Description
BC-SEC
Digital signed Licenses (SLICENSE)
BC-UPG-OCS-SPA
SPAM/SAINT
Warning/Error “Maintenance Certificate” is shown,
although it’s installed.
SV-SMG-LIC
SAP Solution Manager: Issues related to
Maintenance Certificates with distribution to
connected systems and retrieval from SAP
Support Backbone
SV-SMG-SDD
SDCCN, Issues with connection to SAP Solution
Manager, retrieval of Maintenance Certificates
from SAP Solution Manager
XX-SER-LIKEY
License Key / Maintenance Key Application in
SAP Support Portal
Request of License Keys
XX-SER-GEN-CONTR
Component has been closed,
customer needs to send a mail to
Contract Department
http://service.sap.com/contracts
Contract issues.
Customer System Data in SAP Support Portal
does not show valid maintenance agreement, but
maintenance agreement exist
Installation is defined for wrong Software Product
SAP Notes
SV-SMG-LIC
1134886 Activating log SDCCN for retrieval of maintenance certificat
SV-SMG-LIC
1236587 JSPM - no valid maintenance certificate found
SV-SMG-LIC
1239134
SAP Internal SV-SMG-LIC: Technical Analysis: Maintenance Certificate
SV-SMG-LIC
1240265 SPAM/SAINT: No valid maintenance certificate found
SV-SMG-LIC
1251060 Error in requirement process of maintenance certificate
SV-SMG-LIC
1264784 Job log correction for request for maintenance certificates
SV-SMG-LIC
1266139 Incomplete SMSY systems do not receive maint. certificate
SV-SMG-LIC
1275483 Maintenance certificate required as of January 2009
SV-SMG-LIC
1280664 Distribution of maintenance certificates: Troubleshooting
SV-SMG-SDD
1293657 Error in distribution of Maintenance Certificates in SDCCN
SV-SMG-SVC
1229904 Maintenance certificate distribution for service provider
XX-SER-LIKEY
1136164 Check of License Key (Kernel 145 and above required)
License Management with SAP Solution Manager
EhP1 (ST 400 SP 18)
License Management Cockpit provide a central overview on available Licenses and
Maintenance Certificate for all systems that are known by the SAP Solution Manager system
Central overview
Receive Maintenance Certificate and SAP Licenses of SAP’s Global Service Backbone
Distribute items to the systems connected to SAP Solution Manager
Manage automatic distribution of Maintenance Certificate and licenses per system
Download received Maintenance Certificate and SAP Licenses in bulk
Multi-customer support
© SAP 2008 / Page 18
License Management
Customer
SAP Solution Manager
Managed system
Global Support
Backbone
2
SolMan receives
Maintenance Certificates
1
SolMan gets Information on
installed Licenses and
Maintenance Certificate
(LANDSCAPE_FETCH)
1
2
SAP Solution Manager receives Licenses and Maintenance Certificates from Global Support Backbone
Solution Manager retrieves information from Managed System (job LANDSCAPE_FETCH)
© SAP 2008 / Page 19
License Management with SAP Solution Manager
EhP1 (ST 400 SP 18)
Multi customer support
Manage automatic distribution of Maintenance
Certificate and licenses per system.
Download received
Maintenance
Certificate and
Licenses in bulk
Filter
Status
Information
Maintenance Certificate – Summary
The Maintenance Certificate enables software logistics tools to identify your system
and the exact scope of your corresponding SAP maintenance agreement. It ensures
that no unwanted Support Packages are applied and prevents unauthorized use.
Coverage:
All SAP products based on SAP NetWeaver 7.0 and beyond (including SAP Business Suite 2005)
Deployment of Maintenance Certificates:
Automatically to all systems by SAP Solution Manager 7.0
Manual fall-back scenario (self-service) will be offered in SAP Support Portal
Timeline:
Pilot phase started in February (with selected customers)
Automatic deployment via SAP Solution Manager available for all customers in May ‘08 (SP 16 of SAP
Solution Manager + SAP Notes) (ABAP)
Maintenance Certificate visible / available in SAP Support Portal in June ‘08
Required for all customers January ’09
Planned: Automatic deployment via SAP Solution Manager available for all customers in May ‘08 (SP
21 of SAP Solution Manager + SAP Notes) (JAVA)
More information:
SAP Support Portal: /maintenancecertificate
© SAP 2008 / Page 21
Falls Sie noch Fragen haben …
Ing
IngThomas
ThomasWinkler
Winkler
SAP
SAPSenior
SeniorConsultant
Consultant
HP
HPEnterprise
EnterpriseServices
Services
Hewlett-Packard
Hewlett-PackardGes.m.b.H.
Ges.m.b.H.
Wienerbergstrasse
Wienerbergstrasse41
41
A-1120
Wien
A-1120 Wien
M:
+43
M: +43676
67676
7610
10601
601
thomas.winkler@hp.com
thomas.winkler@hp.com