dmcardlenl

This needs to be updated to include at least 2 SANs.

Common Name: f.q.h.n

Organization: Your Corp

Organization Unit: IT

City or Locality: NY

dmcardlenl

Docker container rebuild failes
Adding roles to host
So, built manually and see what's wrong

apt install libxxf86vm1 and libgtk2.0-dev to get the GUI installer to work.
update-rc.d -n is not liked, so shift the arg or something:
https://blogs.sap.com/2018/07/21/how-to-install-sap-hana-express-edition-2.0-on-ubuntu-18.04-bionic-beaver/

hdbnsutil createSecureStore segvs.  I think it could be glibc difference between deb 11 and 12.
TBC.

dmcardlenl

Export disk (both volumes C: and UEFI) to .VHDX using Mark Russinovich's export vhdx utility
Turn off Win Bitlocker during export if necesssary
Create new Proxmvox VM
qm disk import <ID> <filename.vhdx> <name of storage> (e.g. local or local-lvm etc.)
Do standard proxmox admin to make sure CD isn't boot device etc.

boot

Windows should say checking devices or some such.

dmcardlenl

Add Root CAs to sapcli.pse for hdbsql
-------------------------------------

sapgenpse -p sapcli.pse "CN=mynode.mycorp.corp"
sapgenpse seclogin -chpin -p sapcli.pse to remove PIN if needed
sapgenpse maintain_pk -p sapcli.pse -a Root_cert.pem
sapgenpse import_own_cert -p sapcli.pse -c Signed_Response_file_you_got_signed_after_CSR_was_shown_after_first_command_above.pem

Done.
sapgenpse get_my_name -p sapcli.pse

dmcardlenl

Generate PSE with SANs

Create empty PSE with own self-signed CN and lots of SANs:

Create CSR for CA for PSE

Import signed CSR response resulting in PSE with private key and cert and chain.

Export PSE to .p12:
sapgenpse export_p12 -p SAPSSLS.pse -z 123456 -C 0 pse_database.p12

dmcardlenl

Automated Cert renewal
For each landscape
For each SID
For each instance
CD to sec dir
Export SECUDIR
For each PSE
Sapgenpse <PSE> <action> <cert>
Where action is:
1) import trusted (root) cert

dmcardlenl

SELECT USER_NAME, VALUE, SUBSTR_AFTER (VALUE,'@') FROM user_parameters where PARAMETER = 'EMAIL ADDRESS' order by  SUBSTR_AFTER (VALUE,'@');

dmcardlenl

Select USER_NAME ,
       VALID_FROM,
       TO_VARCHAR((VALID_UNTIL),'DD mon YYYY') as VALID_UNTIL,
	   LAST_SUCCESSFUL_CONNECT,
	   INVALID_CONNECT_ATTEMPTS as ATTEMPTS,
	   PASSWORD_CHANGE_NEEDED,
	   case
	     when USER_DEACTIVATED = 'TRUE' then
	        'Deactivated user'
         else