Preparing for AZ-120 Certification:
“Planning and Administering Microsoft Azure
for SAP Workloads”
Session learning objectives
REVIEW PREREQUISITES COURSE CONTENT AND HOW TO PREPARE FOR
EXPECTATIONS THE EXAM
https://www.microsoft.com/en-us/learning/browse-all-certifications.aspx
AZ-120
Prerequisites
AZ-120 Exam
Content
Foundations of SAP on Azure
• SAP HANA Certifications
1: Introduction to Azure • SAP NetWeaver Certifications
for SAP Workloads • Other SAP Workloads Supported on Azure
• Common Terms and meaning
• Azure Compute
• Azure Storage
2: Foundations of Azure • Azure Networking
for SAP Workloads • SAP HANA on Azure (Large Instances)
• Azure Active Directory (Azure AD) and (Azure AD DS)
• Deployment options of SAP solutions on Azure
• SAP product-specific support on Azure
3: SAP Certified Offerings • Storage, networking and database support of SAP Azure workloads
on Azure • High availability and disaster recovery
• Monitoring, licensing, pricing and support
Planning for SAP for Azure
4: Azure for SAP • SAP NetWeaver with AnyDB
Workloads – Reference • SAP S4 HANA on Azure VMs
• SAP HANA on Azure
Architecture
5: Planning for • Azure VM Compute, Network, and Storage Considerations
• SAP HANA Azure virtual Machine storage
Implementing SAP • Azure VM High availability and disaster recovery
Solutions on Azure • Azure VM backup, monitoring, security, authentication and licensing
6: Planning for Migrating • Strategies for Migrating SAP Workloads to Azure
SAP Workloads to Azure • SAP Workload Planning and deployment checklist
Implementing SAP on Azure
• Azure VM deployment and Single-Instance implementations
Implementing HA SAP NetWeaver with AnyDB
7: Implementing Azure VM •
• Implementing HA SAP HANA on Azure VM
Based SAP Solutions • Configure Azure Enhanced Monitoring Extensions for SAP
• Implementing AD and Azure AD-based authentication
8: Deploying Hana Large • Azure Implementing Hana Large Instances
Instances (HLI)
• Migration Options
9: Migrating SAP • DMO Methodology
Workloads to Azure • Cloud migration options
• Very Large Database Migration to Azure
Running SAP on Azure
• Remote management
• Performing backups and restores
10: Maintaining Azure for • Networking changes
SAP Workloads • OS and workload updates
• Vertical and horizontal scaling
• Disaster Recovery
11: Monitoring and • Monitoring and troubleshooting Azure VM
Troubleshooting Azure for • Monitoring and Troubleshooting SAP HANA
• Raising Support Requests
SAP Workloads
3: SAP Certified Offerings On Azure
SAP Note #1928533
SAP NetWeaver certifications for non-HANA products
SAP Product Guest OS RDBMS Virtual Machine Types
Windows, SUSE Linux SQL Server (Windows only),
A5 to A11, D11 to D14, DS11 to DS14, DS11_v2 to DS15_v2, GS1 to
SAP Business Enterprise, Red Hat Oracle (Windows and
GS5, D2s_v3 to D64s_v3, E2s_v3 to E64s_v3, M64s, M64ms, M128s,
Suite Software Enterprise Linux, Oracle Linux only), DB2,
M128ms, M64ls, M32ls, M32ts, M208s_v2, M208ms_v2
Oracle Linux SAP ASE
Windows, SUSE Linux SQL Server (Windows only),
A5 to A11, D11 to D14, DS11 to DS14, DS11_v2 to DS15_v2, GS1 to
SAP Business All- Enterprise, Red Hat Oracle (Windows and
GS5, D2s_v3 to D64s_v3, E2s_v3 to E64s_v3, M64s, M64ms, M128s,
in-One Enterprise Linux, Oracle Linux only), DB2,
M128ms, M64ls, M32ls, M32ts, M208s_v2, M208ms_v2
Oracle Linux SAP ASE
SAP A5 to A11, D11 to D14, DS11 to DS14, DS11_v2 to DS15_v2, GS1 to
BusinessObjects Windows N/A GS5, D2s_v3 to D64s_v3, E2s_v3 to E64s_v3, M64s, M64ms, M128s,
BI M128ms, M64ls, M32ls, M32ts, M208s_v2, M208ms_v2
Windows, SUSE Linux SQL Server (Windows only),
A5 to A11, D11 to D14, DS11 to DS14, DS11_v2 to DS15_v2, GS1 to
Enterprise, Red Hat Oracle (Windows and
SAP NetWeaver GS5, D2s_v3 to D64s_v3, E2s_v3 to E64s_v3, M64s, M64ms, M128s,
Enterprise Linux, Oracle Linux only), DB2,
M128ms, M64ls, M32ls, M32ts, M208s_v2, M208ms_v2
Oracle Linux SAP ASE
SAP HANA certifications
SAP Product Supported OS Azure Offerings
SAP HANA Developer Edition
(including the HANA client software
Red Hat Enterprise Linux, SUSE Linux
comprised of SQLODBC, ODBO- D-Series VM family
Enterprise
Windows only, ODBC, JDBC drivers,
HANA Studio, and HANA database)
Business One on HANA SUSE Linux Enterprise DS14_v2, M32ts, M32ls, M64ls, M64s
Controlled Availability for GS5. Full support for M64s,
Red Hat Enterprise Linux, SUSE Linux M64ms, M128s, M128ms, M64ls, M32ls, M32ts,
SAP S/4 HANA
Enterprise M208s_v2, M208ms_v2, SAP HANA on Azure (Large
instances)
M64s, M64ms, M128s, M128ms, M64ls, M32ls, M32ts,
Red Hat Enterprise Linux, SUSE Linux
Suite on HANA, OLTP M208s_v2, M208ms_v2, SAP HANA on Azure (Large
Enterprise
instances)
GS5, M64s, M64ms, M128s, M128ms, M64ls, M32ls,
Red Hat Enterprise Linux, SUSE Linux
HANA Enterprise for BW, OLAP M32ts, M208s_v2, M208ms_v2, SAP HANA on Azure
Enterprise
(Large instances)
GS5, M64s, M64ms, M128s, M128ms, M64ls, M32ls,
Red Hat Enterprise Linux, SUSE Linux
SAP BW/4 HANA M32ts, M208s_v2, M208ms_v2, SAP HANA on Azure
Enterprise
(Large instances)
Other SAP certifications
SAP Product Guest OS RDBMS Virtual Machine Types
All NetWeaver certified VM types as per SAP Note
SAP Business One on SQL Server Windows SQL Server
#928839
All NetWeaver Certified VM types as per SAP Note
SAP BPC 10.01 MS SP08 Windows and Linux
#2451795
SAP Business Objects BI platform Windows and Linux SAP Note #2145537
SAP Data Services 4.2 SAP Note #2288344
SAP Hybris Commerce Platform 5.x
Windows SQL Server, Oracle All NetWeaver certified VM types as per Hybris Wiki
and 6.x
4: High-level architecture - NetWeaver
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-netweaver
4: High-level architecture – S4 HANA
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/sap/sap-s4hana
4: High-level architecture - Sample functional workflow
https://docs.microsoft.com/en-us/azure/architecture/solution-ideas/articles/sap-s4-hana-vm-on-linux
5: Planning for Implementation
White paper: https://azure.microsoft.com/en-in/resources/sap-on-azure-implementation-guide/
Block Internet
Internet
A NSG contains a list
of security rules that
DMZ allow or deny
Block Internet Block SSH network traffic to
443
✓ Block SSH resources connected
to Azure Virtual
Networks (VNet).
SAPFE SAPAPP
SAPDB
• Subnet or VM/NIC.
✓ • Network Filter
✓
• Protocol
SAP Web Dispatcher SAP App. Servers SAP DB
443 30015 • Source/Dest Port
FE Subnet (10.0.0.0/24) App Subnet (10.0.1.0/24) DB Subnet (10.0.3.0/24) Range
• Direction (In or Out)
• ACL - Allow or Deny
Block SAPFE
https://azure.microsoft.com/en-gb/blog/sap-on-azure-architecture-designing-for-security/
Partner S2S
Admin Network VPN Azure
Backbone
Azure Region
network
Azure VNet (Existing) Subscription 1
Web
GW Subnet Subnet Prod AP+DB
non-SAP
SAP Support
Azure VNet (Hub) Azure VNet (Spoke – Prod)
Subnet Subnet S/4H Subnet APP+DB
GW Network Virtual
Subnet
DMZ Shared
Subnet Appliance (NVA) Management
AvSet: ASCS/ERS AvSet: NFS Server AvSet: APP Linux AvSet: SAP HANA System Replication
AvSet AvSet AvSet
Customer Corporate NVA Web Dispatcher Domain
Controller
Network MSEE VPN
Gateway
NetWeaver - APP+DB
AvSet: ASCS/ERS AvSet: SOFS AvSet: APP Win AvSet: SAP HANA System Replication
Express
Route
Gateway
Azure VNet (Spoke – Non-Prod)
Subscription 2 - SAP Subnet Non-Prod AP+DB
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke
Planning for Implementation - DR
SAP HANA disaster recovery
(continued)
Azure Site Recovery
Implement disaster recovery for a multi-tier SAP
NetWeaver deployment
Migrating to SAP S4HANA from SAP Business Suite
Planning for
Migration:
SAP workload
planning and
deployment
checklist
7: Implementing Azure VM-based SAP Solutions:
VM images and disks
Key steps for
SAP HANA
installation
using SAP
SWPM –
Software
Provisioning
Manager
SWPM = Software Provisioning Manager
Key steps for
SAP HANA
installation
using HDBLCM
HDBLCM = HANA Database Lifecycle Manager
Implementing
SAP HANA
scale-out
Implementing HA SAP HANA on Azure VMs
8. HLI
https://docs.microsoft.com/en-us/azure/virtual-
machines/workloads/sap/hana-overview-architecture
9 - Migrating SAP Workloads:
Classic vs. SAP Database Migration Option (DMO)
Classical Migration SAP Database Migration Option
(DMO)
SWPM is used exclusively for database migrations. DMO facilitates both an SAP upgrade and a
SWPM exports data from a source system and imports database migration to the SAP HANA database via
it to AnyDB target system. This method uses a file- one tool. Both steps are handled at once, so DMO is
based approach. referred to as a one-step migration.
Classical Migration uses a heterogeneous system
copy approach (a two-step migration) with the first
step being that of a migration followed by a second
step facilitating an SAP upgrade.
White paper: https://azure.microsoft.com/en-gb/resources/migrating-sap-applications-to-azure/
One-Step Migration – DMO with System Move Option
Two-Step Migration – Lift and Shift followed by DMO
10: Maintaining Azure for SAP Workloads
Remote management of Azure VMs
Remote management methods: Access management control via RBAC:
Direct Azure VMs Connectivity: Authorization system built into Azure Resource
• Public endpoints on a Jumpbox VM Manager
• Private endpoints via ExpressRoute or S2S VPN Uses assignments for granular access control to Azure
Azure Automation: resources
• Management via DSC Each assignment combines a security principal, role
SAP Landscape Management (LaMa): definition, and a scope
• SAP LaMa 3.0 SP05 and higher includes the Azure
connector
• Supports relocating, copying, cloning, and refreshing
SAP systems
SAP HANA file-level backup
SAP HANA snapshot-based backups
Primary considerations:
• Restricted to single-container systems
• Subject to constraints when used in combination with Azure VM Backup:
• With Linux VMs, by default, only file-consistent backups are available
• There is a limit of a single scheduled backup per day
• Application-consistent backups require custom scripts and their own integrity validation mechanism
• Restoring an Azure VM requires re-assigning a new SAP license (not required with disk snapshots)
Implementation options:
•Disk snapshot:
•Prepare for a disk snapshot by creating the SAP HANA snapshot, perform system freeze, create the disk
snapshot, perform system unfreeze, confirm the SAP HANA snapshot
•Azure VM Backup:
•Execute prepare script (which initiates a SAP HANA snapshot and performs system freeze)), take snapshot,
execute post-snapshot script (which performs system unfreeze and confirms the SAP HANA snapshot),
transfer data to a Recovery Services vault
11: monitoring
Remote Management of SAP HANA on Azure (Large Instances)
Connecting to HLI from Azure VMs Managing HLI from the Azure portal:
and from on-premises locations:
HLI is directly accessible from the VNet hosting SAP Provides visibility of basic HLI unit characteristics
application server VMs and activities:
Connecting from on-premises requires transitive • Name, OS, IP addresses, unit type (CPU threads,
routing: RAM), ExpressRoute circuit ID, power state, restarts,
tagging
• Microsoft solutions: ExpressRoute Global Reach
(recommended/supported by Microsoft) and Azure Allows restarting HLI units
Firewall Requires registering the HANA Large Instance
• Third-party solutions: IPTables or reverse-proxy on Resource Provider
Azure VMs/virtual appliances
Resources
MS Learn
docs.microsoft.com/learn
https://docs.microsoft.com/en-us/learn/certifications/courses/az-120t00
Featured training for exam AZ-120
https://partner.microsoft.com/en-
us/training/assets/collection/featured-training-for-exam-az-120#/
Exam Registration
https://docs.microsoft.com/en-us/learn/certifications/exams/az-120
Exam Resource Blog
https://blogs.sap.com/2019/12/30/exam-study-resources-for-az-
120-planning-and-administering-microsoft-azure-for-sap-
workloads/
Session resources
SAP solutions on Azure. How to run SAP solutions across development, testing, and production scenarios
Channel 9. Channel 9 provides a wealth of informational videos, shows, and events.
Azure Tuesdays with Corey. Corey Sanders answers your questions about Microsoft Azure - Virtual
Machines, Web Sites, Mobile Services, Dev/Test etc.
Azure Fridays. Join Scott Hanselman as he engages one-on-one with the engineers who build the services
that power Microsoft Azure.
Microsoft Azure Blog. Keep current on what's happening in Azure.
Azure Documentation. Stay informed on the latest products, tools, and features.
SAP on Azure–Designing for availability and
recoverability
Session SAP on Azure Architecture – Designing for
resources performance and scalability
SAP on Azure Architecture – Designing for
security
SAP on Azure–Designing for Efficiency and
Operations
Hands on Lab SAP on Azure AZ120
AZ-120 Designing and
Deploying SAP on Azure
Join Partner Community
SAP on Azure Partners
Session takeaways
PREPARE IN ADVANCE – USE MS LEVERAGE LEARNING PATHS PRACTICE THE LABS ACTION:
LEARN AND DOCS AND RESOURCES JOIN A STUDY TEAM &
SCHEDULE AN EXAM
Q&A
