Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • CryptoHub 7.2.0.7 or later.

​
Supported operating systems

  • A Linux distribution supported by both SAP HANA and the CryptoHub Linux TDP agent (for example, RHEL 9).

​
TDP agent and driver

  • The CryptoHub Linux TDP agent (ftdp) and the fesfifs kernel module (fesfifs-dkms).
The fesfifs-dkms package requires dkms, which is not included on the RHEL 9 installation media. On an unregistered, ISO-only, or airgapped host, enable EPEL or an equivalent repository that provides dkms before installing.

​
Required access

  • An account on the CryptoHub with administrator privileges to deploy services and manage path rules.
  • Root (or sudo) access on the Linux host running SAP HANA, to install the agent, load the kernel module, and manage mounts.
  • The SAP HANA administrator user (for example, <sid>adm) and its group (sapsys).

​
SAP HANA

  • A running SAP HANA instance whose persistence base paths you can identify. You can look these up with:
    The values of basepath_datavolumes and basepath_logvolumes are the directories this integration protects.

​
Network and firewall

  • Allow outbound connectivity from the SAP HANA host to the CryptoHub, specified by FQDN (for example, cryptohub.example.com) or CIDR (for example, 10.0.0.0/24), so the TDP agent can reach CryptoHub for policy and key delivery.
TLS inspection or SSL proxies can break mutual TLS handshakes. Exempt the CryptoHub FQDN(s) from inspection, and configure the CryptoHub with a FQDN so the exemption applies.

​
Other

SAP HANA