Configuration Steps to Set up SAP HANA System Replication
- Start the primary system.
- Create an initial data backup or a storage snapshot on the primary system.
- Enable system replication on the primary system.
- Prepare the secondary system for authentication by copying the system PKI SSFS .key and the .dat file from the primary system to the secondary system.
- Register the secondary system and establish a connection between the secondary and primary systems.
The configuration tasks on the primary and secondary systems to set up system replication are shown in the figure Setup of System Replication. With this configuration, you can recover from a data center outage by switching to a secondary site. The primary system stays online during this procedure.

The following steps are performed during the setup of system replication:
- The primary system is informed to enable system replication.
- The secondary database is stopped. Content is wiped out during the initial load, with a full data backup later during the initial start of replication.
- The secondary system is advised to connect to the primary system, and communicates about the attempt to start the system replication standby process.
- This process is secured with certificates and so on.
- Only one command is needed: HDBNSUTIL.
- Both sides must have the same number of active and standby hosts with the same sizing (memory and CPU).
- SAP HANA itself handles the relationships of, for example, scale-out setups on both sides (primary to secondary) and how communication is established with each counterpart.
- Communication takes place internally between sites on TREXnet.
Note
If the primary connection between data centers is too weak for an initial data load (usually TBs), then use snapshot data backups for setting up SAP HANA system replication initialization.
Additional Configuration Steps to Enable SAP HANA System Replication
Starting with SAP HANA 2.0, additional configuration steps are required to set up SAP HANA system replication, because replication connections now use certificate-based authentication.
System replication with SAP HANA 2.0 requires authentication for the data and log shipping channels. The authentication is done using the certificates in the system PKI SSFS store. An additional manual setup step is required to exchange certificates in the system PKI SSFS store between primary and secondary sites. For more information, see SAP Note: 2369981.
Additional Configuration Steps to Enable SAP HANA System Replication
Copy the system PKI SSFS KEY and DAT files from the primary site to the secondary site. The files can be found at the following locations:
/usr/sap/<SID>/SYS/global/security/rsecssfs/data/SSFS_<SID>.DAT
/usr/sap/<SID>/SYS/global/security/rsecssfs/key/SSFS_<SID>.KEY
For more information, see SAP Note 2369981 - Required configuration steps for authentication with HANA System Replication.
Note
If you installed XS advanced, you must also copy the XSA SSFS .key and the .dat file from the primary system to the secondary system in the following directories:
/usr/sap/<SID>/SYS/global/xsa/security/ssfs/data/SSFS_<SID>.DAT
/usr/sap/<SID>/SYS/global/xsa/security/ssfs/key/SSFS_<SID>.KEY
For more information, see SAP Note 2300936 - Host Auto-Failover & System Replication Setup with SAP HANA extended application services, advanced model.
The copied files become active during system restart. Therefore, it is recommended to copy the files when the secondary SAP HANA system is offline, for example, before registration.