Where can I find SAP Host Agent?
On Service Market Place you can download the latest version from the following path: Support Packages and Patches -> Browse Our Download Catalog -> SAP Technology Components -> SAP HOST AGENT -> SAP HOST AGENT 7.22.
What is the first patch level of SAP Host Agent released in 7.22?
The first patch level released in 7.22 is 52. The counter was not reset and continues counting from 7.21 (last SAP Host Agent release in 7.21 is patch level 51).
Is there a difference between SAP Host Agent 722_REL and 722_EX2_REL?
On Windows, the SAP Host Agent is only released in 722_EX2_REL and all other platforms in 722_REL. The SAP Host Agent functionalities for both kernel make variants are the same. Also, SAP Host Agent 722_REL works together with the same SAP products as SAP Host Agent 722_EX2_REL.
How to determine the version of SAP Host Agent installed?
To determine the version of the installed SAP Host Agent you can use You can use the command 'saphostexec -version'. Alternatively you can use 'saphostctrl -host <hostname> -function ExecuteOperation -name versioninfo' to determine the SAP Host Agent version of a remote system.
Can I install SAP Host Agent in another location than the predefined location?
This is generally not recommended. Several functionalities of SAP Host Agent require the fixed installation path.
On Windows, SAP Host Agent is installed in the %ProgramFiles% directory by default. So, if you change the value of the default %ProgramFiles%, you are able to install SAP Host Agent in another location.
Caution:
If you change the default value of %ProgramFiles% during the installation of SAP Host Agent, and then switch back to the previous value, it is not guaranteed that the agent will work correctly.
For more information about SAP Host Agent installation, paths and users, please refer to note 1031096
Can I change the permissions, the owner and the group of the SAP Host Agent files?
No!
Changing these values leads to problems when running SAP Host Agent. It may even not be possible to start SAP Host Agent at all.
Note:
This also applies for the host_profile of SAP Host Agent.
For more information about SAP Host Agent installation, paths and users, please refer to note 1031096
Where can I find the Host Agent logfiles?
The SAP Host Agent log files can be found here:
/usr/sap/hostctrl/work/ (UNIX)
C:\Program Files\SAP\hostctrl\work\ (Windows)
The most important logfiles are dev_saphostexec (used by saphostexec executable) and sapstartsrv.log (used by sapstartsrv executable).
It is advised to provide the whole "work" directory to the Host Agent Support Team when creating CSN Messages.
Why is the ERROR "Profile permission violation" issued by SAP Host Agent?
The error 'Profile permission violation' means that your host_profile file - that is the configuration file for SAP Host Agent located in /usr/sap/host/exe/host_profile - is editable for another user than the root user.
In this case SAP Host Agent does not start for security reasons, because otherwise every local user within the operating system could manipulate the profile and get root permissions on your local system.
The correct permissions are as follows:
rw-r----- 1 root sapsys /usr/sap/hostctrl/exe/host_profile
By default, the host_profile file is created with the correct permissions during the installation of SAP Host Agent. Do not change these default permissions manually.
How can I install SAP Host Agent in a cluster environment?
The general strategy in high availability (HA) environments is to install SAP Host Agent locally on each cluster node, like in non-cluster environments. SAPOSCOL should not be clustered and the SapCluster directory is not used by SAP Host Agent and its components.
Do I have to be logged on as a user with root authorization to start or stop SAP Host Agent?
It is not neccessary that you are logged on as a user with root authorization to start or stop SAP Host Agent. If you are logged on as user <sapsid>adm, you can control SAP Host Agent using the hostexecstart executable. However, it is not possible to stop SAP Host Agent without being logged on as a user with root authorization.
In general, hostexecstart can do the following:
usage: hostexecstart -[option]
[option]:
-start: start SAP Host Agent if not running.
-restart: stop SAP Host Agent if running, and restart it.
-status: return the status of SAP Host Agent (running/stopped)
-upgrade <path>: upgrade SAP Host Agent using the executable stored in the directory specified in <path>
Which SAP Notes are important for SAP Host Agent?
| SAP Note Number | Note Description |
|---|---|
| 1031096 | SAP Host Agent Installation |
| 1473974 | SAP Host Agent Auto upgrade |
| 1636252 | SAP Host Agent upgrade 7.[0|1][0|1] to 7.20 |
| 927637 | Web service authentication in sapstartsrv |
| 1907566 | SAP Host Agent Documentation |
| 3061366 | SAP Host agent 7.22 |
Can I use a sapadm domain user in Windows?
Yes!
In some cases it might be useful to configure sapadm as a domain user instead of a local user (for example, if you have multiple hosts with SAP Host Agent on each of them). First, create the domain sapadm user and install the SAP Host Agent with the -user option by executing the following command:
saphostexec.exe -install -user <domain>\sapadm
and afterwards delete the local sapadm user if it exists, e.g., from a previous SAP Host Agent installation without the option -user.
Important:
It is not supported to have a domain sapadm user and a local sapadm user at the same time. This causes troubles.
Note:
You need at least SAP Host Agent 7.20 PL 33 and the user must already exist in the domain!
Can I use UNC paths for Autoupgrade of SAP Host Agent?
Yes! Using UNC paths in the DIR_NEW parameter is allowed. e.g. DIR_NEW=\\centralSystem\HostAgentShare\new\
When using this kind of centralized location on Windows, you have to make sure, the Host Agent is able to access this share. Since Host Agent is running as LocalSystem account, HOSTNAME$ must have read access to the DIR_NEW location.
Does SAP Host Agent provide auditing?
Auditing Overview
SAP Host Agent provides the means to audit-log every operation the Host Agent is performing.
The operating systems which are supported by Host Agent have built-in means of audit logging. In UNIX and LINUX, Host Agent is using the syslog (/var/log/messages) and in Windows, the Application Eventlog is used. The user can decide if audit logging is done via OS means or provide a file to which all audit messages are written.
Audit logging is disabled by default. It can be enabled and configured via host_profile parameters:
service/auditlevel=0/1 | 0 disables audit logging, 1 enables audit logging. |
service/auditlogfile=<FILENAME> | If an audit logfile is provided by the user, Host Agent uses the Logfile for audit logging. Eventlog and Syslog will not be used in this case. If the File does not exist, Host Agent will create it, otherwise new entries will be appended. |
service/auditlogfilesize=0...X | If an audit logfile is provided, the user can decide how big the logfile can become. All sizes must be given in MB (Megabyte). If the size is exceeded, the current audit logfile is saved to <FILENAME>.old and a new audit logfile is created. In case of size 0 or if the parameter is not given at all, the audit logfile can become infinitely large. |
| service/accesslog=1 | Enable HTTP access log. Once this parameter is set a file called <access.log> is created within the HOME Directory of SAP Host Agent! |
| service/accesslogsize=0...X | If service/accesslog is set, the user can decide how big the Accesslog can grow. All sizes must be given in MB (Megabyte). If the size is exceeded, the current access.lo is saved to <FILENAME>.old and a new audit access.log is created. In case of size 0 or if the parameter is not given at all, the access.lo can become infinitely large. |
A Host Agent restart is neccessary to activate the configurations.
Audit logging output is always written in one line and can look like this:
[2012/08/24 11:22:16][AUDIT SUCCESS]Operation ListInstances; Socket type Network Socket; Remote IP 127.0.0.1; Remote port 60779; Username Not Available
Are SAP Host Agent's HTTP and HTTPS ports (1128/1129) configurable?
No, the ports which SAP Host Agent is using cannot be configured.
These ports are registered with the Internet Assigned Numbers Authority (IANA) which means that both ports should not be used by any application other than SAP Host Agent.
See the following link for more information:
https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xml
Can SAP Host Agent, be configured to use TLS 1.2 only ?
Yes, since SAP Host Agent 722 PL 57 the TLS 1.2 only setting can be configured by using:
<SAP Host Agent Path>/saphostexec -setup tls12
If TLS 1.2 needs to be configured for older SAP Host Agent versions, information can be found in notes 510007 and 2384290
Hostname & IP Address Lookup in SAP Host Agent
Note 129997 - "Hostname and IP address lookup" describes the recommended IP and host resolution setup. It also describes the restrictions which apply regarding this setup.
The same restrictions also apply to SAP Host Agent
Do SAP Host Agent support IPv6 ?
Yes. To enable IPv6 support for SAP Host Agent follow the instruction of SAP Note 1346768. The specified environment variable value can be add into the file host_profile.
Example: SETENV_00 = SAP_IPv6_ACTIVE=1
Does the "Hosts file" has standard defined ?
Yes. The Hosts file format can severely impact the SAP Host Agent and the connectivity between the Solution Manager and the Managed System.
Please note that the "Hosts File" format has to be defined on the host following a "Mandatory Standard". See https://wiki.scn.sap.com/wiki/x/i4IjIQ