EMC Enterprise Hybrid Cloud 2.5.1, Federation Software-Defined Data Center Edition

Transcription

1 SOLUTION GUIDE EMC Enterprise Hybrid Cloud 2.5.1, Federation Software-Defined Data Center Edition Data Protection for SAP: Backup Solution Guide EMC Solutions Abstract This Solution Guide describes the data protection backup operations and services for SAP, provided as a modular add-on to the EMC Enterprise Hybrid Cloud solution. The document introduces the architecture, features, and functionality of the solution. April 2015

2 Copyright 2015 EMC Corporation. All rights reserved. Published in the USA. Published April 2015 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS IS. EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. EMC2, EMC, EMC Avamar, EMC Data Domain, and the EMC logo are registered trademarks or trademarks of EMC Corporation in the United States and other countries. All other trademarks used herein are the property of their respective owners. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. EMC Enterprise Hybrid Cloud 2.5.1, Federation Software-Defined Data Center Edition Data Protection for SAP: Solution Guide Part Number H

3 Contents Contents Chapter 1 Executive Summary 7 Document purpose... 8 Audience... 8 Solution purpose... 8 Business challenge... 9 Automated and self-service... 9 Backup retention... 9 Technology solution Terminology Chapter 2 EMC Enterprise Hybrid Cloud Solution Overview 11 Introduction EMC Enterprise Hybrid Cloud features and functionality Automation and self-service provisioning Multitenancy and secure separation Workload-optimized storage Elasticity and service assurance Operational monitoring and management Metering and chargeback Modular add-on components Chapter 3 Data Protection Solution Overview 17 Overview Key components EMC Avamar EMC Data Domain EMC Data Protection Advisor EMC data protection workflows for vcenter Orchestrator Back up as a service Solution architecture Software resources Chapter 4 Implementing Data Protection Backup Services for SAP 23 Overview

4 Contents SAP application server backup and restore Business scenario Configuration steps Use case 1: Image-level backup and restore SAP database backup and restore Business scenario Configuration steps Use case 2: Database backup scheduling with DBA Cockpit Use case 3: Database recovery using BR*Tools Use case 4: Database point-in-time recovery using BR*Tools Monitoring, reporting, and chargeback Monitoring backup and restore status Reporting and chargeback Chapter 5 Conclusion 48 Conclusion Appendix A References 50 References White papers Product documentation Other documentation

5 Figures Contents Figure 1. EMC Enterprise Hybrid Cloud with data protection key components Figure 2. EMC Enterprise Hybrid Cloud Data Protection Backup solution architecture Figure 3. SAP system architecture Figure 4. Create Backup Service Level: Service Level description Figure 5. Create Backup Service Level: Name and backup target Figure 6. Create Backup Service Level: Daily backup schedule Figure 7. Create Backup Service Level: Retention policy Figure 8. Build profile for backup and restore functions Figure 9. Modify build profile property and set default backup service level Figure 10. Enable build profile in the SAP blueprint Figure 11. Delete files on ASCS and PAS instances Figure 12. Image-level backup status in Avamar Figure 13. Choose restore point from the available list of backups Figure 14. Image-level restore status in Avamar Figure 15. Domain structure for Avamar clients Figure 16. Incorporate SAP backup services into SAP application blueprint Figure 17. Enable database backup when provisioning SAP system Figure 18. Database backup schedule in DBA Cockpit Figure 19. Avamar Administrator console logs of scheduled database backups Figure 20. Delete Oracle database data files Figure 21. Successful database restore Figure 22. Restore log on the Avamar Administrator console Figure 23. Delete client Figure 24. Restore the database back to a previous timestamp Figure 25. Backup monitoring dashboard Figure 26. Backup detailed report for a single virtual machine Figure 27. Tables Chargeback Overview report for the Finance BU database-level backups46 Table 1. Terminology Table 2. Additional information Table 3. Solution software resources Table 4. Protection scenarios for SAP instances Table 5. SAP system information Table 6. Database restore scenarios Table 7. Parameters for SAP plugin parameter file

6 6 Contents

7 Chapter 1: Executive Summary Chapter 1 Executive Summary This chapter presents the following topics: Document purpose... 8 Audience... 8 Solution purpose... 8 Business challenge... 9 Technology solution Terminology

8 Chapter 1: Executive Summary Document purpose Audience Solution purpose This document introduces the data protection backup and recovery solution, one of several integral parts of the EMC Enterprise Hybrid Cloud for SAP solution. This solution guide: Introduces the technical components needed to implement and operate the solution Describes the testing and validation of the functionalities presented Evaluates the technical and business value of the solution in the context of an EMC Enterprise Hybrid Cloud for SAP This document is a companion to the EMC Enterprise Hybrid Cloud 2.5.1, Federation Software-Defined Data Center Edition: Foundation for SAP Solution Guide. This companion document provides critical reference information with which you must be familiar, to plan and design a solution for data protection in the hybrid cloud. This solution guide is intended for SAP operations managers, administrators (SAP/server/network/storage), IT architects, and technical managers who want to implement data protection for their hybrid cloud infrastructure-as-a-service (IaaS) platform for managing mission-critical SAP landscapes. You should be familiar with the VMware vcloud Suite, storage technologies, and general IT functions and requirements, as well as with how the hybrid cloud architecture accommodates these technologies and requirements. You should also have a basic understanding of SAP database backup and recovery procedures. Knowledge of basic backup and recovery concepts implemented in EMC Avamar and EMC Data Domain architectures is helpful, but not required. This solution offers effective and efficient protection for SAP systems and data by providing: A backup as a service (BaaS) solution that is suitable for cloud environments Comprehensive backup and recovery strategies, simple deployment, and full integration of VMware vcloud Suite, EMC Avamar, and EMC Data Domain systems with SAP databases, from easy-to-use interfaces Shorter backup and recovery times A smaller backup footprint and fewer network resource requirements using advanced deduplication technology 8

9 Chapter 1: Executive Summary Business challenge Cloud computing has fueled exponential growth in SAP landscapes that are deployed as SAP virtual infrastructures that can house hundreds of virtual machines. Backup and recovery requirements have always created challenges for the IT administrator. Traditionally, from a business perspective, all backup administrators know that a backup is only as good as its recoverability. Today, backup and recovery challenges are compounded by the costs and risks that are associated with larger numbers of virtual SAP systems, and data being provisioned for development, testing, and training. Automated and self-service Backup retention New automation and self service levels are required for SAP developers, end users, and line-of-business owners, freeing them to provide backup and restore services for the systems, on-demand. In addition, because business continuity is critical for enterprises running SAP Business Suite, operational efficiency is important for managing recovery time objectives (RTO) and recovery point objectives (RPO). Operational requirements for enterprises running SAP Business Suite include: Fulfilling service level agreements (SLAs) within limited backup windows due to exponential data growth Simultaneous backups in the cloud environment requiring high network bandwidth Chargeback for backup services to customers in tenant-based cloud environments Many SAP customers are required to retain backups for specific periods of time. Backups are also secured in offsite locations to be compliant with information security standards such as the Information Security Management System (ISO 27001:2005) and the Information Technology Infrastructure Library (ITIL). Increased retention periods incur the following resource costs: Daily full backups using traditional approaches consume storage resources, leaving a large storage footprint on backup media Incremental backups conserve disk space but require more complex restore procedures Sending offsite backups over a wide area network (WAN) can consume a significant amount of network bandwidth 9

10 Chapter 1: Executive Summary Technology solution The EMC Enterprise Hybrid Cloud for SAP solution enables you to perform comprehensive and highly reliable backups, reduce restore downtimes, significantly minimize the backup footprint, and minimize overhead. This solution uses the following technologies to provide data protection services for SAP systems: EMC Data Domain Systems serves as the high-speed, deduplication storage system and offsite replication medium for all backups. EMC Avamar integrated with Data Domain is the central management software that enables backup, recovery, and offsite replication from a single management console. Avamar integrates directly with Data Domain systems through Data Domain Boost Software. EMC Data Protection Advisor is the central monitoring and chargeback reporting tool for backup and restore activities Both EMC Avamar and EMC Data Protection Advisor are available as part of the EMC Data Protection Suite. Terminology Table 1. Terminology Term Changed Block Tracking (CBT) Data Domain Boost (DD Boost) Avamar management console server ( MCS) Definition A vsphere feature that allows a client to scan and process blocks that are in the changed-block list to accelerate backup and restore process Provides advanced integration between backup and enterprise applications. The Management Console Server (MCS) provides centralized administration (scheduling, monitoring, and management) for the Avamar server. The MCS also runs the server-side processes used by the Avamar Administrator graphical management console. 10

11 Chapter 2: EMC Enterprise Hybrid Cloud Solution Overview Chapter 2 EMC Enterprise Hybrid Cloud Solution Overview This chapter presents the following topics: Introduction EMC Enterprise Hybrid Cloud features and functionality

12 Chapter 2: EMC Enterprise Hybrid Cloud Solution Overview Introduction The EMC Enterprise Hybrid Cloud solution is an engineered solution that offers a simplified approach to IT functionality to IT organizations, developers, end users, and line-of-business owners. The solution delivers baseline infrastructure as a service (IaaS) built on a software-defined data center architecture. The EMC Enterprise Hybrid Cloud delivers feature-rich capabilities that: Expand from IaaS to business-enabling IT as a service (ITaaS) Includes back up as a service (BaaS) and disaster recovery as a service (DRaaS) as policies that can be enabled with a few clicks Enable end users and developers to quickly access a marketplace of resources for Microsoft, Oracle, SAP, and EMC Pivotal applications, and can add thirdparty packages as required Can deploy resources on a private cloud or EMC-powered public cloud services, including VMware vcloud Air The EMC Enterprise Hybrid Cloud solution uses the best of EMC and VMware products and services, and takes advantage of the strong integration between EMC and VMware technologies to provide the foundation for enabling IaaS on new and existing infrastructures for the hybrid cloud. Figure 1 shows the key components of the EMC Enterprise Hybrid Cloud solution. Figure 1. EMC Enterprise Hybrid Cloud with data protection key components For detailed information, refer to EMC Enterprise Hybrid Cloud 2.5.1, Federation Software-Defined Data Center Edition: Foundation Infrastructure Solution Guide. For an overview of EMC Enterprise Hybrid Cloud modular add-on solutions, which provide 12

13 Chapter 2: EMC Enterprise Hybrid Cloud Solution Overview functionality such as data protection, continuous availability, and application services, refer to the documentation describing the individual modular add-on component. For detailed information on the add-on solutions, refer to the individual Solution Guides for those solutions. Table 2. Additional information For: Detailed information about the EMC Enterprise Hybrid Cloud An overview of EMC Enterprise Hybrid Cloud modular add-on solutions Detailed information on the add-on solutions Refer to: EMC Enterprise Hybrid Cloud 2.5.1, Federation Software-Defined Data Center Edition Modular add-on component. This solution provides functionality such as data protection, continuous availability, and application services s. The individual Solution Guides for those solutions EMC Enterprise Hybrid Cloud features and functionality The EMC Enterprise Hybrid Cloud solution incorporates the following features and functionality: Automation and self-service provisioning Multitenancy and secure separation Data protection Workload-optimized storage Elasticity and service assurance Monitoring Metering and chargeback Automation and self-service provisioning The solution enables self-service provisioning of automated cloud services to both users and infrastructure administrators. It uses VMware vcloud Automation Center, integrated with EMC ViPR software-defined storage and VMware vcloud Networking and Security or VMware NSX, to provide the compute, storage, network, and security virtualization platforms for the software-defined data center. Cloud users can request and manage applications and compute resources within established operational policies. This self-service capability can reduce IT service delivery times from days or weeks to minutes. Automation and self-service provisioning features include: Self-service catalog Provides a cross-cloud storefront that delivers a catalog of custom-defined services for provisioning applications that are based on business and IT policies. 13

14 Chapter 2: EMC Enterprise Hybrid Cloud Solution Overview Role-based entitlements Ensures that the self-service portal presents only the virtual machine, application, or service blueprints appropriate to different roles within the business Resource reservations Allocates resources for use by a specific group and ensures that access is limited to that group Service levels Defines the amount and types of resources that a particular service can receive during the initial provisioning or as part of configuration changes Blueprints Contains the build specifications and automation policies that specify the process for building or reconfiguring compute resources Multitenancy and secure separation The solution provides the ability to enforce physical and virtual separation for multitenancy as strong as the administrator requires. This separation can encompass network, compute, and storage resources to ensure appropriate security and performance for each tenant. Secure multitenancy through role-based access control (RBAC) in vcloud Automation Center enables the roles to be mapped to Microsoft Active Directory groups. The self-service portal shows only the views, functions, and operations to cloud users who are based on their role within the business. Workloadoptimized storage Elasticity and service assurance Operational monitoring and management With this solution, customers can take advantage of the proven benefits of EMC storage in a hybrid cloud environment. Using ViPR storage services with EMC VNX, VMAX, and XtremIO, the solution provides software-defined, policy-based management of block- and file-based virtual storage. ViPR abstracts the storage configuration and presents it as a single storage control point. Cloud administrators can then access all heterogeneous storage resources within a data center as if the resources were a single large array. The solution uses the capabilities of vcloud Automation Center and various EMC tools to provide the visibility and alerts required to ensure service levels in virtual and cloud environments. Infrastructure administrators manage storage, compute, and network resources within resource pools, while cloud users manage those resources at the virtual machine level. Cloud users can select from a range of service levels for compute, storage, and data protection for their applications. They can expand the resources of their virtual machines on demand to achieve the required service levels for their application workloads. Features include automated monitoring and management capabilities that provide IT administrators with a comprehensive view of the cloud environment to enable intelligent decision making for resource provisioning and allocation. These automated capabilities use a combination of plug-ins, or products including: EMC ViPR Storage Resource Management Suite (SRM) VMware vcenter Log Insight 14

15 Chapter 2: EMC Enterprise Hybrid Cloud Solution Overview VMware vcenter Operations Manager EMC plug-ins for ViPR, VNX, VMAX, XtremIO, and Avamar, part of EMC Storage Analytics (ESA), provide extensive storage details. Cloud administrators can use ViPR SRM to understand and manage the impact that storage has on their applications and to view their storage topologies from application to disk. Capacity analytics and what-if scenarios in VMware vcenter Operations Manager identify overprovisioned resources so that they can be right-sized for the most efficient use of all virtualized resources. Log Insight provides the ability to centralize and aggregate system and application logs. Metering and chargeback Modular add-on components VMware IT Business Management Suite provides cloud administrators with comprehensive metering and cost information across all business groups in the enterprise. IT Business Management Suite is integrated into the self-service portal of the administrator and presents a dashboard overview of the hybrid cloud infrastructure. The EMC Enterprise Hybrid Cloud solution provides modular add-on components for the following services: Application services This add-on solution uses vcloud Automation Center Application Services to optimize application deployment and release management through logical application blueprints in vcloud Automation Center. You can quickly deploy blueprints for applications and databases such as Microsoft Exchange, Microsoft SQL Server, Microsoft SharePoint, Oracle, and SAP. Data protection: Backup EMC Avamar and EMC Data Domain systems provide a backup infrastructure that offers features such as deduplication, compression, and VMware integration. By using EMC customized VMware vcenter Orchestrator workflows, administrators can quickly set up multitier data protection policies that users can assign when they provision their virtual machines. Data protection: Continuous availability A combination of EMC VPLEX virtual storage and VMware vsphere High Availability (HA) allows you to join information across multiple data centers over synchronous distances. With virtual storage and virtual servers working together over distance, the infrastructure can transparently provide load balancing, real-time remote data access, and improved application protection. Backup operations continue to operate. Data protection: Disaster recovery This add-on solution enables cloud administrators to select DR protection for their applications and virtual machines when they provision their hybrid cloud environment. ViPR automatically places these systems on storage that is protected remotely by EMC RecoverPoint. VMware vcenter Site Recovery Manager automates the recovery of all virtual storage and virtual machines. 15

16 Chapter 2: EMC Enterprise Hybrid Cloud Solution Overview Platform as a service The EMC Enterprise Hybrid Cloud solution provides an elastic and scalable IaaS foundation for platform as a service (PaaS) and software as a service (SaaS). Pivotal CF provides a highly available platform that enables application owners to deliver and manage applications over the application lifecycle. The EMC Enterprise Hybrid Cloud solution service offerings enable PaaS administrators to provision compute and storage resources on demand to support scalability and growth in their Pivotal CF enterprise PaaS environments. Public cloud services The EMC Enterprise Hybrid Cloud solution enables IT organizations to broker public cloud services. We have validated the public cloud solution with vcloud Air as a public cloud option that users and administrators can access directly from the solution s self-service portal. End users can provision virtual machines while IT administrators can use VMware vcloud Connector to perform virtual machine migration (offline) to vcloud Air from the on-premises component of their hybrid cloud. 16

17 Chapter 3: Data Protection Solution Overview Chapter 3 Data Protection Solution Overview This chapter presents the following topics: Overview Key components Back up as a service Solution architecture Software resources

18 Chapter 3: Data Protection Solution Overview Overview Key components This modular add-on for data protection provides local backup and recovery services for SAP. This add-on leverages the features and functionality of EMC Avamar, EMC Data Domain, and EMC Data Protection Advisor software. Backup and recovery for SAP in a multitenant hybrid cloud is a complicated endeavor in which many factors must be considered, including: Backup type and frequency Impact and interaction with replication Recoverability methods and requirements Retention periods Implementation in an HA/DR-enabled environment Automation workflows Interface methods (workflows, APIs, GUI, CLI, scripts, and so on) VMware vcenter Orchestrator (vco) is central to all the customizations and operations that are used in this solution. VMware vco manages operations across several EMC and VMware products, including: VMware vcloud Automation Center (vcac) VMware vcenter EMC Avamar and Data Protection Advisor (Both EMC Avamar and EMC Data Protection Advisor are available as part of the EMC Data Protection Suite) This solution focuses on the implementation, management, and automation of the backup service for SAP in EMC Enterprise Hybrid Cloud. This section describes the key components that make up this solution. EMC Avamar EMC Data Domain EMC Avamar deduplication backup software and system is a complete, fast, and efficient software and hardware solution. Equipped with integrated variable-length deduplication technology, Avamar backup and recovery software provides integrated source and global data deduplication, which enables fast, daily full backups for hybrid cloud environments. With this option, Avamar directs backup data to an EMC Data Domain system instead of backups to the Avamar server. Data Domain deduplicates data inline, before writing to disk. With Data Domain, you can retain backup and archived data onsite longer to enable quick and reliable data restores from disk. 18

19 Chapter 3: Data Protection Solution Overview EMC Data Protection Advisor EMC data protection workflows for vcenter Orchestrator With EMC Data Protection Advisor, you can automate and centralize the collection and analysis of all data across backup applications, replication technologies, the virtual environment, and the supporting infrastructure. This software provides a single comprehensive view of the data protection environment and activities. Data Protection Advisor provides a REST API that integrates with VMware vco to provide on-demand reporting of backup statistics and performance. The EMC Federation of businesses has created data protection workflows with vco to automate the protection of virtual machines with Avamar and Data Domain. Protection at provisioning is set up when these workflows are added to the vcac virtual machine provisioning blueprints. Also, workflows can be used to enable simple or point-in-time restores for a specific virtual machine. Infrastructure administrators can also use the data protection workflows to carry out the complete protection policy setup on Avamar and vcenter systems. The workflows enable a quick and easy deployment of the infrastructure that is needed to support end-user protection. Back up as a service This solution implements back up as a service (BaaS), enabling end users to select a backup service level for provisioned virtual machines and SAP systems. This capability hides the complexity of configuring backup software and hardware from end users. A customized vcac user portal presents several backup service levels to the cloud user, offering both Avamar and Data Domain systems as backup targets. Higher service levels require more frequent backups and need longer-term retention policies in comparison to lower-level service tiers. The cloud user can choose from a selection of backup service levels during the virtual Machine provisioning process in the vcac user portal. All virtual machines are then automatically backed up according to the selected backup service level. A cloud user or administrator or the backup administrator can run on-demand backup and on-demand restore operations on a virtual machine from either of the vcac user portals using the Avamar Administrator console. Virtual machines using the Data Domain system as their backup target can use the Instant Access feature that enables virtual machine restore to a production environment in seconds. For usage and billing information, the vcac user portal provides a cloud user or cloud administrator with the ability to gather virtual machine backup details using integration with EMC Data Protection Advisor. 19

20 Chapter 3: Data Protection Solution Overview Solution architecture Figure 2 shows the overall architecture of the solution. Figure 2. EMC Enterprise Hybrid Cloud Data Protection Backup solution architecture Software resources Table 3 details the software resources that are used in the solution. Table 3. Solution software resources Software Version Purpose EMC Enterprise Hybrid Cloud Federation Software-Defined Data Center Edition: Foundation Module EMC Enterprise Hybrid Cloud Federation Software-Defined Data Center Edition: Data Protection Module Customization package for Storage as a service (STaaS) and foundation workflows Customization package for BaaS work flows 20

21 Chapter 3: Data Protection Solution Overview Software Version Purpose VMware vcloud Automation Center Application Services Application provisioning software For a complete, up-to-date list of all software requirements for EMC Enterprise Hybrid Cloud, refer to the following resources: EMC Enterprise Hybrid Cloud Federation Software-Defined Data Center Edition: Foundation for SAP Solution Guide EMC Enterprise Hybrid Cloud Federation Software-Defined Data Center Edition: Data Protection Backup Solution Guide EMC E-Lab s EMC Simple Support Matrix for EMC Hybrid Cloud at elabnavigator.emc.com 21

22 22 Chapter 3: Data Protection Solution Overview

23 Chapter 4: Implementing Data Protection Backup Services for SAP Chapter 4 Implementing Data Protection Backup Services for SAP This chapter presents the following topics: Overview SAP application server backup and restore SAP database backup and restore Monitoring, reporting and chargeback

24 Chapter 4: Implementing Data Protection Backup Services for SAP Overview A typical SAP ERP 6.0 ABAP system consists of the following instances: Central services instance ABAP (ASCS) Application server instances The first application server instance that is installed in an SAP system is called the Primary Application Server instance (PAS). More Application Server instances (AAS) can be installed later to expand compute resource capability. Database instance (DB) Figure 3 shows the SAP system architecture. Figure 3. SAP system architecture The EMC Enterprise Hybrid Cloud Data Protection Backup solution offers different options to protect all SAP instances: Application server instances and central services instances These instances contain executable binaries and work directories. EMC Enterprise Hybrid Cloud offers image-level backup for these instances in the containing virtual machine. Database instances EMC Enterprise Hybrid Cloud offers data consistent database-level protection for various database platforms. The Avamar plug-in for SAP databases is automatically installed and configured during the SAP provisioning process. 24

25 Chapter 4: Implementing Data Protection Backup Services for SAP Table 4 lists the protection scenarios for SAP instances. Table 4. Protection scenarios for SAP instances Protection Solution SAP Instance Protected Files Image-level backup ABAP Central Service Primary Application Server Additional Application Server Database (Optional) All virtual disks Database-level backup Database Data files, control files, parameter files, online/offline redo logs SAP application server backup and restore This section details how EMC Enterprise Hybrid Cloud protects SAP instances. Business scenario SAP application instances and central service instances in a distributed installation and smaller or noncritical SAP systems require only a quick and simple backup and restore. These instances benefit from the virtual machine image-level backup solution that EMC Enterprise Hybrid Cloud offers. With the integration of EMC Avamar, Data Domain, and vcac, the EMC Enterprise Hybrid Cloud backup solution can: Abstract and simplify backup and restore operations for cloud users Use VMware vstorage APIs for data protection, providing changed block tracking (CBT) for faster backup and restore operations Provide online full image backups for virtual machines Eliminate the management of backup agents for each virtual machine Minimize network traffic by deduplicating and compressing data The SAP application owner can choose the following data protection options: Scheduled backup All the provisioned SAP virtual machines are built with a default backup service level predefined by tenant cloud administrators. On-demand backup The SAP application owner can request a one-time imagelevel backup after the SAP application is provisioned. vcac automatically processes the request. The Avamar server receives the backup request and then runs the backup without interrupting the running SAP application. On-demand restore The SAP application owner can request an on-demand restore. vcac processes the request automatically. The Avamar server receives the restore request and runs the restore to the chosen backup point. 25

26 Chapter 4: Implementing Data Protection Backup Services for SAP Configuration steps This section describes the configuration steps that are required to enable image-level backup and restore for SAP instances. Note: These instructions assume that you have implemented and initialized the EMC Enterprise Hybrid Cloud Data Protection Backup Solution. For a detailed guide on implementing backup services, contact EMC professional services. In this solution, we 1 used VMware vcac Application Services to provision the SAP system. During the provisioning process, end users 2 may not be able to select the backup service level that was originally developed with the EMC Enterprise Hybrid Cloud backup solution. We introduce a workaround so that a default backup service level is set for all provisioned SAP systems. To enable image-level backup for SAP systems, create a backup service level and set it as the default backup service level. Creating a backup service level To create a backup service level, follow these steps: 1. Log in to the vcac portal as a cloud administrator, click Catalog, and then click Request on Create Backup Service Level. 2. Click Request Information and type a description of the service level, as shown in Figure 4. Figure 4. Create Backup Service Level: Service Level description 3. Click Backup Service Level, and type a name for the backup service level. Next, select a backup target from the list of available targets, such as Avamar or Data Domain, as shown in Figure 5. 1 We refers to the EMC Engineering Team who tested the solution. 2 In this guide, end user means the vcac self-service portal user. 26

27 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 5. Create Backup Service Level: Name and backup target 4. Click Schedule and select a backup schedule, such as Daily, Weekly, or Monthly. Then specify Schedule Time as shown in Figure 6. If you select Daily,, you must also specify the time interval. Single or multiple time intervals are acceptable (for example, 03:00, 03:30). Figure 6. Create Backup Service Level: Daily backup schedule 5. To create a retention policy, click Retention and customize the retention policy for various options: For a specific period Until a specific date No end date Based on each backup type You can apply a long-term retention policy, which defines the length of time that the final backup of a virtual machine is retained. Figure 7 shows a sample retention policy that retains the backup for one year. 27

28 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 7. Create Backup Service Level: Retention policy Setting the default backup service level To set up the default backup service level, follow these steps: 1. Log in to the vcac portal as an infrastructure administrator and browse to Infrastructure->Blueprints->Build Profiles. 2. Click the BackupAndRestoreFunctions build profile as shown in Figure 8. Figure 8. Build profile for backup and restore functions In the detailed property page of the build profile, modify the epc.backup.servicelevels property, as shown in Figure 9. Specify the backup service level name that you created in the section entited Creating a backup service (for example: Daily_x1_RT_Year1). Click the save icon (the green check mark). 28

29 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 9. Modify build profile property and set default backup service level 6. Enable the build profile in the blueprint by clicking the check box as shown in Figure 10. Figure 10. Enable build profile in the SAP blueprint Use case 1: Imagelevel backup and restore Test scenario In this test scenario, the customer has provisioned an SAP ERP 6.0 EhP7 with a distributed installation option for training purposes. Table 5 lists the detailed information of the SAP system. Table 5. SAP system information Instance Virtual machine name Hostname Disk size (GB) ASCS saperp6ascs-kuh saperpca2ascs 84 29

30 Chapter 4: Implementing Data Protection Backup Services for SAP Instance Virtual machine name Hostname Disk size (GB) DB saperp6db-w4gxc saperpca2db 300 PAS saperp6pas-a10g saperpca2pas 84 AAS saperp6aas-2syq saperpca2aas 84 The customer wanted to protect the ASCS, PAS, and AAS instances using image-level backup services. When the OS file system failed, some of the SAP executable files were lost. The customer restored the virtual machine image to the latest backup point to recover the SAP executable files. Test objective This use case shows how an SAP system is restored successfully without error from scheduled and on-demand image-level backups. Test procedure To test a scheduled backup: 1. Log in to vcac as a tenant user. 2. Request to provision a distributed SAP ERP 6.0 EHP7 system. 3. Log in to the Avamar server console and check that the backup is scheduled automatically for the provisioned SAP system with the default backup service level. To test an on-demand backup: 1. Log in to vcac as a tenant user. 2. Request on-demand backup. 3. Log in to Avamar server console and check that the backup is started and complete. To test an on-demand restore: 1. Shut down SAP on ASCS and PAS. 2. Delete the /sapmnt/* on ASCS instance and the /usr/sap/* on PAS instance to simulate OS file system corruption, as shown in Figure

31 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 11. Delete files on ASCS and PAS instances 3. Log in to vcac as tenant user. 4. Request an on-demand restore for the ASCS and PAS instances in the vcac portal. 5. Log in to the Avamar server console and check that the restore starts and completes. 6. Start SAP and log into the system with SAPGUI. Test results As shown in Figure 12, the scheduled and on-demand image-level backups successfully executed with an average backup time of approximately 33 minutes for the initial run and 10 minutes for the subsequent backups. Figure 12. Image-level backup status in Avamar When restoring the virtual machine image, we selected the latest backup as shown in Figure

32 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 13. Choose restore point from the available list of backups The restore successfully completed in 13 minutes as shown in Figure 14. When we tested the SAP system startup, no errors occurred. Figure 14. Image-level restore status in Avamar SAP database backup and restore This section describes how EMC Enterprise Hybrid Cloud offers full protection for database instances, using the integration of Avamar and Data Domain. Business scenario The SAP database instance is the most critical component of an SAP system. Without a careful approach to backing up the database, the risk of excessive system downtime and data loss is higher. The image-level backup approach protects the whole virtual machine. However, the database requires more backup technology to minimize data loss and ensure business data consistency. EMC recommends a database-level backup for all SAP database instances. EMC Enterprise Hybrid Cloud for SAP offers full protection for database instances, using the integration of Avamar and Data Domain. When using Data Domain as the backup target, only deduplicated and compressed data is directly transferred to the Data Domain system through DD Boost. The related metadata that is generated by the Avamar Client is simultaneously sent to the Avamar server for storage. This metadata enables the Avamar management system to perform restore operations directly from the Data Domain system without first going through the Avamar server. This simultaneous mechanism increases the speed of backup operations by transferring only the changed data during backup, and provides the consistency of a full database backup. When the resulting backup is minimized, reducing the network penalty during replication. SAP supports various database platforms as the database instance. The Avamar client and the corresponding Avamar database plugin must be installed and 32

33 Chapter 4: Implementing Data Protection Backup Services for SAP configured to protect the database instances. This solution uses VMware vcac Application Services to automate the installation and configuration of the Avamar client and the database plugin. When the SAP system is provisioned, database-level backup and restore are ready without additional manual configurations. This document focuses on the protection of Oracle Database on SUSE Linux Enterprise Server for SAP application. For an up-to-date list of supported software for EMC Enterprise Hybrid Cloud, refer to the EMC Simple Support Matrix (ESSM). With Oracle Database, administrators can perform on-demand backup and restore through BR*Tools or DBA Cockpit (t-code dbacockpit). The following backup options are available to protect the database fully against data loss: Online and offline backup Consistent online backup Offline redo log files backup Before restoring the database, analyze the problem and choose the best approach to resolve it. Table 6 describes the scenarios and solutions when performing database restore. Table 6. Database restore scenarios Scenario Objective Solution in BR*Tools Media error such as a disk failure User or software error User or software error within one component of a multicomponent database Either of the following applies: Error in which all copies of the redo log files are lost, but the database file backup is available Error immediately follows a complete or incremental offline or consistent online backup, such as during a software upgrade Loss of entire database system, including backup profiles and logs Recover to the time of failure Recover to a selected point in time Recover the affected component to a selected point in time Reset the database to the state it was in at the most recent offline or consistent online backup Recover as much as possible from the backup Complete database recovery Database point in time recovery Tablespace point in time recovery Whole database reset Disaster recovery This section describes the configuration steps needed to enable database-level backup and restore. It also explains how to schedule database-level backup using 33

34 Chapter 4: Implementing Data Protection Backup Services for SAP DBA Cockpit and how to perform a complete database recovery and database point- In-time recovery using BR*Tools. Configuration steps To configure a database-level backup, follow these steps: 1. Enable virtual machine protection with both guest and image backups on the Avamar server (optional). 2. Automate the installation and registration of the Avamar client and database plug-in. 3. Incorporate SAP backup services into the SAP application blueprint. The following sections describe these steps in detail. Enabling virtual machine protection with both guest and image backups on the Avamar server (optional) To configure both the image-level and database-level backup for SAP database instances perform following steps: 1. Open a command shell, and log in: If logging in to a single-node server, log in to the server as Admin. If logging in to a multi-node server, log in to the utility node as Admin. 2. Stop the MCS by typing: dpnctl stop mcs 3. Open /usr/local/avamar/var/mc/server_data/prefs/mcserver.xml in a UNIX Locate and change the allow_duplicate_client_names preference setting to true. For example: <entry key="allow_duplicate_client_names" value="true" /> 4. Save the changes. 5. Restart the MCS by typing: dpnctl start mcs Automating the installation and registration of the Avamar client and database plugin Create the following two services in VMware vcac Application Services to automate the installation and registration of the Avamar client and database plug-in: Avamar client installation and registration service Avamar SAP plugin installation and configuration service Avamar client installation and registration service Fetch and install the Avamar client package from the NFS share, and register the client to Avamar under the predefined domain. You create the predefined domains manually in the Avamar Administrator Console according to the organization and business group structure of a tenant. For example, TenantA contains three business groups: Engineering, Finance and HR, TenantB contains one business group: Manufacturing. The Avamar domain structure is shown in Figure

35 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 15. Domain structure for Avamar clients The Avamar domain is encapsulated into a property of the service. You can customize it to fit any business groups without changing the service script. Using the Avamar SAP plugin installation and configuration service Fetch and install the Avamar SAP plugin package from the NFS share, then create and modify the configuration files that are needed for BR*tools, using the following steps: 1. Create the SAP plugin parameter file init<sid>.utl Create the SAP plugin parameter file in $ORACLE_HOME/dbs. This file contains the parameters shown in Table 7. Table 7. Parameters for SAP plugin parameter file Parameter Value Description --bindir =/usr/local/avamar/bin Location of Avamar binary directory --sysdir =/usr/local/avamar/etc Location of Avamar sys directory --vardir =/usr/local/avamar/var Location of Avamar var directory --max-streams = 10 Maximum streams when backing up SAP Oracle database. Tune this parameter according to backup workload. --ddr =true Whether to enable Data Domain as backup target --ddr-index = 1 Data Domain system index 35

36 Chapter 4: Implementing Data Protection Backup Services for SAP Parameter Value Description --account =/${DOMAIN}/${hostname} The Domain and client name which the SAP plugin is registered. For example: /EHC/Finance/saperp6dp3.sap.sse.loc al --server --id --password Avamar server IP or FQDN Avamar MCS account name Avamar MCS account encoded password. You can run avtar command on the Avamar server to encode a password: avtar --encodepassword=password where password is the password that you type in clear text at the command prompt. This avatar command returns an encoded password that you can then use in this parameter. 2. Create a soft link to the backint file by running the following command: ln -s /usr/local/avamar/bin/backing /usr/sap/<sid>/sys/exe/run/backint 3. Modify the BR*Tools initialization profile init <SID>.sap file. The BR*Tools initialization profile is located in $ORACLE_HOME/dbs. The service changes the value of the parameter util_par_file to the full path of the SAP plugin parameter file and backup_dev_type to util_file_online. Incorporating the SAP backup services into the SAP application blueprint Incorporate the SAP backup services into an SAP application blueprint, as shown in Figure 16. Figure 16. Incorporate SAP backup services into SAP application blueprint Update the deployment profiles for the SAP backup services to take effect. After completing all configuration steps, choose Yes for ENABLE_DB_BACKUP, which 36

37 Chapter 4: Implementing Data Protection Backup Services for SAP enables SAP database backup when provisioning an SAP system as show in Figure 17: Figure 17. Enable database backup when provisioning SAP system Use case 2: Database backup scheduling with DBA Cockpit Test scenario A customer wishes to provision an SAP ERP 6.0 EhP7 system with a distributed installation option and wants to schedule a database-level backup for the Oracle database using t-code dbacockpit. Test objective The option to enable a database-level backup and restore when provisioning the SAP system must be available. The SAP basis administrator must successfully schedule an online database backup and an archive log backup using DBA Cockpit. Test procedure To register an Avamar client: 1. Log in to vcac as tenant user. 2. Request to provision an SAP system. Choose Yes to the parameter ENABLE_DB_BACKUP to enable Oracle database backup and restore. 37

38 Chapter 4: Implementing Data Protection Backup Services for SAP 3. Log in to the Avamar server console and check that the Avamar client is registered. To schedule a backup: 1. Log in to the SAP system with SAPGUI. 2. Schedule a whole database online backup and a redo log backup using DBA Cockpit. 3. Log in to the Avamar server console and check that the backup is scheduled for the provisioned SAP system. Test results We scheduled a daily whole database online backup and an hourly redo log backup. Figure 18 shows the database backup schedule in DBA Cockpit. Figure 18. Database backup schedule in DBA Cockpit The Avamar Administrator console logs the status of the database backups scheduled in DBA Cockpit, as shown in Figure 19: 38

39 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 19. Avamar Administrator console logs of scheduled database backups Note: There is a time zone offset (1 hour) between the Avamar Administrator console and SAPGUI. Use case 3: Database recovery using BR*Tools Test scenario The SAP ERP system Oracle database that is provisioned in Use case 2: Database backup scheduling with DBA Cockpit has been corrupted. An analysis of the log and trace files by the SAP Basis administrator concluded that some of the data files were lost. The administrator requires a complete database recovery using BR*Tools. Test objective The Oracle database must be restored to the time before failure. The SAP system must then be brought online after the database has been restored. Test procedure To recover a database, follow these steps: 1. Delete /oracle/<sid>/sapdata2/* on an SAP system to simulate the data files corruption, as show in Figure

40 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 20. Delete Oracle database data files 4. Perform a complete database recovery using BR*tools. 5. Log in to the Avamar server console and check that the restore has started and completed. 6. Start the SAP system and login to SAP with SAPGUI. Test results Using the complete database recovery wizard in BR*Tools, we successfully restored the database to the time of failure. Figure 21 shows the execution result of BR*Tools. Figure 21. Successful database restore The wizard in BR*Tools executes the following commands during the restore process: 1. Restore database data files: brrestore -p initca2.sap -b beppxlna.anf -d util_file -r /oracle/ca2/112_64/dbs/initca2.utl -m 12-16,18 -l E -i 30 40

41 2. Restore database offline redo logs: Chapter 4: Implementing Data Protection Backup Services for SAP brrestore -p initca2.sap a =/oracle/CA2/oraarch -d util_file -r /oracle/ca2/112_64/dbs/initca2.utl -k no -l E - i Apply offline redo logs using SQLPLUS: recover from /oracle/ca2/oraarch/ca2arch database The SAP system started without errors. Figure 22 shows the restore log on the Avamar Administrator console. Figure 22. Restore log on the Avamar Administrator console Use case 4: Database point-intime recovery using BR*Tools Test scenario When an accidental operation is committed to the SAP system, the SAP Basis administrator must restore the database back to the timestamp before the operation. In this use case, we deleted Client 100 to simulate the accidental operation. Test objective The Oracle database must be restored to a specific timestamp and the SAP system must be brought back online after a database restore. Test procedure To restore a database to a specific point in time, follow these steps: 1. Log in to the SAP system with SAPGUI and delete Client 100. Figure 23 shows the deletion job started on January 14, 2015 at 15:06:57 and finishing on 15:43:18. 41

42 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 23. Delete client Perform a database point-in-time recovery to a timestamp before the deletion of Client Start the SAP system and confirm that Client 100 no longer exists. Test results Using the database point-in-time recovery wizard in BR*Tools, we successfully restored the database back to 15:00:00, before Client 100 was deleted. The wizard in BR*Tools executes the following commands during the restore process: 1. Restore the database data files: brrestore -p initca2.sap -b beppxlna.anf -d util_file -r /oracle/ca2/112_64/dbs/initca2.utl -m all -l E -i Restore the database offline redo logs: brrestore -p initca2.sap -a =/oracle/CA2/oraarch -d util_file -r /oracle/ca2/112_64/dbs/initca2.utl -k no -l E - i Apply the offline redo logs using SQLPLUS: recover from /oracle/ca2/oraarch/ca2arch database untile time :00:00 using backup controlfile The SAP system started without errors. We logged in to the SAP system with Client 100 and confirmed that SAP system was restored to a time before Client 100 was deleted. Figure 24 shows that there is no Client 100 deletion in the log, indicating a successful database point-in-time restore. 42

43 Chapter 4: Implementing Data Protection Backup Services for SAP Figure 24. Restore the database back to a previous timestamp Monitoring, reporting, and chargeback EMC Enterprise Hybrid Cloud integrates EMC Data Protection Advisor and Avamar to monitor backup and restore status and to offer chargeback reports for both imagelevel and database-level backup and restore. To monitor different roles with an organization, this solution: Monitors backup and restore status for backup administrators supporting the hybrid cloud environment. Notifies end users of their backup and restore status. Provides detailed chargeback reports that identify successful backup and restore activities for end users and business group administrators. This section shows the monitoring and reporting and chargeback features that EMC Enterprise Hybrid Cloud for SAP offers. Monitoring backup and restore status You can monitor the EMC Avamar infrastructure supporting the data protection services for this hybrid cloud solution natively with the Avamar Administrator console and with EMC Data Protection Advisor. The Avamar Administrator console provides details about the health, availability, and protection capacity of the hardware. 43

44 Chapter 4: Implementing Data Protection Backup Services for SAP Data Protection Advisor enhances Avamar monitoring and reporting by providing full visibility into the technologies used to protect the data in the EMC Enterprise Hybrid Cloud, including backup software, backup devices, and virtual infrastructure. Backup administrators can customize the Data Protection Advisor dashboard to provide an overview of the backup infrastructure status for the following information: Backup success rate Failed backup and restore Client that is not backed up Backup key performance indicators Alert status Replication alerts Figure 25 shows a sample of the Data Protection Advisor dashboard. Figure 25. Backup monitoring dashboard Reporting and chargeback Whenever an image-level backup or restore completes or fails, Data Protection Advisor sends an notification about the result to the identified users. Administrators can request the Backup Detailed report on the vcac self-service portal to get detailed reports for a single virtual machine. The backup report contains the following information categories: Job summary 44

45 Chapter 4: Implementing Data Protection Backup Services for SAP Failed jobs Back up jobs with last resolution Estimated protected backup capacity details Backup client deduplication ratios Chargeback summary Client configuration You can configure Data Protection Advisor to send an message containing a report with backup information specific to the virtual machine. To request a chargeback report for a single virtual machine, click Get Backup Summary in the vcac portal. Figure 26 shows a sample backup detailed report with some of the reporting categories. Figure 26. Backup detailed report for a single virtual machine 45

46 Chapter 4: Implementing Data Protection Backup Services for SAP For database-level backup and other image-level backup reports, Data Protection Advisor offers a wide range of customizable reporting templates that you can run ondemand or as part of a schedule. Some of these report templates include: Service level management report Chargeback report Performance report Capacity planning report Figure 27 depicts a sample chargeback overview report for all database-level backup within the Finance BU. Figure 27. Chargeback Overview report for the Finance BU database-level backups 46