Release Notes for SAP HANA Cloud Platform

Multiple SAP HANA databases can be hosted on a single SAP HANA system when the support for multitenant database container (MDC) is enabled for the SAP HANA databases (beta). Creating a tenant database is available on the trial landscape too.

A tenant database runs for 12 hours and shuts down at the end of the period to free resources. A tenant database that is not used for 30 days is automatically deleted.

A blog post describes the procedure for creating and testing a tenant database by using the SAP HANA Interactive Education example on a trial landscape. For more information, seeSAP HANA Multitenant Database Containers (MDC) Scenarios Now on Trial Landscape.

In addition, the OData entity properties are typed according to the respective database table column. For RDMS, a device supports up to 32 custom attributes. For example, you can use a custom attribute to store things like serial number, MAC or IP address of a device. For more information, see Device.

Fixes:

• When a shadow is upgraded from an older version, the system certificate stays correctly available. The system certificate used to get lost during the upgrade when connecting to the master instance, which was not yet upgraded. As a result, the system certificate could be restored only with a workaround.
• The restart mechanism works properly in all environments. On some Linux systems, the restart used to not work as expected.
• Changes needed to support the correct E2E destination check.

Internet of Things

New

Features:

• The system certificate of the Cloud connector used to have two roles: the first one for acting as a client certificate to establish mutual trust, and the second one for acting as a certificate authority (CA) for short-living certificates when using principal propagation. A new CA certificate is introduced, which leads to the separation of the two roles into different certificates. The system certificate keeps the client certificate role, while the CA certificate contains the CA role. For more information, see  Initial Configuration, and Setting Up Trust .
• As an alternative to the local CA certificate, the Cloud connector now allows to delegate the creation of the short-living certificates to Secure Login Server (SLS). For more information, see Secure Login Client Installation .
• The authentication configuration has been improved. When the local user database for the administration UI access is used, the user name can be configured. When the LDAP-based user database is used, the access check role can be configured if sccadmin role cannot be used. For more information, see Managing Accounts, Configuring Access Control, and Using LDAP for Authentication .
• The trust store for HTTPS connectivity to backend systems can be set by uploading the trusted certificates. For more information, see Configuring the Cloud Connector for HTTP .
• It is now possible to configure which TLS ciphers shall be allowed for the access to the administration UI. For more information, see Recommendations for Secure Setup .
• A security status screen is showing at a glance what security configurations have already been done and which are still missing. For more information, see Recommendations for Secure Setup .
• Description fields are now added in the configuration tabs for account fields, exposed systems, and resources. These description fields allow users to add descriptions for the corresponding fields, systems, and resources.
  

Bugfixes:

• An OutOfMemoryError has been addressed that occurred under high load during an exchange of large documents.
• During access, the exposed host can now be checked regardless of the case of the host's letters. For example, the host can be in uppercase in the on-premise system and in lowercase in the SAP HANA Cloud Platform destination.

When creating a new message type in the cockpit for the Internet of Things services, you can sort message fields by using drag and drop. Furthermore, there is a full Unicode support for message types, device types and devices.

The manual configuration step to adapt the „Authentication Configuration“ for MMS in order to enable the Push as well as the OData APIs is not needed anymore. Moreover, date message fieldsnow can be sent in Unix time format rather than only in ISO 8601 format.

Enhancement

For more information, see Exporting an HTML5 Application and Importing an HTML5 Application.

Internet of Things

New

Devices can now be organized in flexible hierarchies and for example grouped by organizations or locations. Furthermore the support forbinary message type fieldsis now implemented.

SAP HANA

SAP HANA revision 102.01 is now productively available. For more information, seeSAP Note 2021789 - SAP HANA Revision and Maintenance Strategy.

Gamification Service

New

The SAP HANA Cloud Platform gamification service is now generally available.

Changes compared to the beta version:

• The API is completely revised. Major changes:
  • Redundant and infrequently used methods have been removed.
  • A new more compact JSON model for all player achievement queries has been introduced.
  • getPlayerDetails has been changed to getPlayerRecord, which is based on the new JSON model.
  • Access control has been revised: All achievement updates have to be done using rules to allow efficient caching in the rule engine.
• The player's lifecycle is now handled differently: Players are not created automatically anymore. They have to be created first and then initialized for an app (optionally).
• Incompatibility change: Versioning has been introduced for the API stubs used in rules. For example, updateAPI --> updateAPIv1. Please update your rules manually or in case of the HeldDesk generate them again.
• Responses are now shown by the API Terminal.
• The gamification workbench complies to the accessibility standards. For example, it supports keyboard navigation and high contrast scheme.

 
For more information, seeGamification Service .

SAP HANA

SAP HANA revision 97.03 is now productively available. For more information, seeSAP Note 2021789 - SAP HANA Revision and Maintenance Strategy.

Eclipse Tools

The interface of the Server editor for cloud servers is changed. The Advanced Options panel is now in a new Advanced tab. The Advanced tab also contains a new Environment variables table, which you can use to set the environmental variables to the runtime environment of Java applications locally. For more information, seeAdvanced Application ConfigurationsandSetting the Cloud Environment Variables Using Eclipse IDE.

Change Management (Beta)

Enhancement

You can transport SAP HANA Cloud Platform applications via the enhanced Change and Transport System (CTS+) tool.

For more information, see Change Management with CTS+.

HTTP destinations now support additional formats as key stores and trust stores for X.509 certificate-based authentication:

• For key stores: JKS, PFX and P12.
• For trust stores: JKS, CRT, CER and DER.

For more information on the supported formats, seeUsing Destination Certificates (Cockpit).

You can now manage subscriptions to HTML5 applications. The Subscribed HTML5 Applications panel in the cockpit lists all existing subscriptions and allows you to create new subscriptions to HTML5 applications of your own accounts.

For more information, seeManaging HTML5 Subscriptions.

Internet of Things

New

You can use a newOData interfaceto consume messages processed by MMS 2.3. You can also use an API to define custom names for tables and columns and to customize table mapping schemas. For more information, seeMessage Storage.

Cockpit, Connectivity

When creating and editing additional properties in destinations, you can select properties from a dropdown, or type in the value if the property you need is not in the list. The dropdown lists the known supported additional properties (TrustAll for example).

Connectivity, Performance Statistics

Performance statistics and SAP passports are now supported by HTTP destinations and RFC destinations for Java applications. If performance statistics are switched on, statistics are collected in subsequent requests and can be inspected in the cockpit. For more information, seePerformance Statistics Service (Beta).

Cockpit

Enhancement

The creation of trial accounts has been simplified and consists of fewer manual steps now.

Support for TLS 1.0 is discontinued. For more information, seeProduct Prerequisites and Restrictions.

Eclipse Tools

Enhancement

The SAP HANA Cloud Platform landscape host hana.ondemand.com will no longer be set as default. When setting up the SDK location and landscape host, use the respective landscape host for your account. For more information, see Setting Up SDK Location and Landscape Host.

Cockpit

The cockpit has been redesigned to provide a better UI experience. The improvements include optimized use of the screen real estate and a more modern look and feel.

Remote Data Sync service

The Remote Data Sync service is now generally available. You can use the service to synchronize structured data between many remote databases and a consolidated database running on SAP HANA Cloud Platform. For more information, see Remote Data Sync service.

Connectivity, Performance Statistics (beta)

Enhancement

Performance Statistics (beta) was extended with additional information about the duration of external HTTP calls done during request processing. For more information, see Metrics of a Performance Statistics Report.

New SAP JVM patch versions are available for download on the SAP Development Tools for Eclipse page:

• SAP JVM 6.1.080 (Windows and Linux)
• SAP JVM 7.1.035 (Windows, Linux and Mac OS X)
• SAP JVM 8.1.009 (Windows, Linux and Mac OS X)

For information about how to update the SAP JVM, see Updating SAP JVM.

The old netweaver.ondemand.com domain will be disabled in Q4 2015. SAP HANA Cloud Platform will be accessible only on hana.ondemand.com.

Please make sure all your links, bookmarks, automations and others are using only hana.ondemand.com.

SAPUI5

Enhancement

SAPUI5 Distribution 1.30.6 for Java & HTML5 applications (incl. 1.30.8 of Runtime & Documentation) has been released.

SAPUI5 Documentation

The SAPUI5 documentation has been taken out of the SAP HANA Could Platformdocumentation.

You can now find it in the SAPUI5 Demo Kit athttps://sapui5.hana.ondemand.com(on the "Developer Guide" tab). The Demo Kit is your one-stop-shop for all information about SAPUI5 - documentation, API reference, samples, demo apps - just check it out.

Gamification Service (Beta)

Recent changes contain larger API updates as we fully cleaned up and rebuilt the API for the upcoming GA. Accessibility features have been added to the Gamification Service Workbench.

SAP HANA

Enhancement

SAP HANA revisions 85.05 and 97.01 are now productively available. For more information, seeSAP Note 2021789 - SAP HANA Revision and Maintenance Strategy.

You can now leave comments, ideas, and suggestions about the documentation directly in the documentation. You will find a feedback form at the bottom of every documentation page.

You can bootstrap to a specific SAPUI5 version now. For more information, see Variant for Bootstrapping from SAP HANA Cloud Platform.

You can find the list of all available SAPUI5 versions on SAP HANA Cloud Platform on this new overview page: https://sapui5.hana.ondemand.com/versionoverview.html.

Java 8 (beta) is now available as a deployment option for Java applications. Java 7 is the new default option (instead of Java 6).

The handling of services has been redesigned and improved. Each service now has its own page showing description, possible actions and the required configurations. For more information, see Accessing Services.

The following interfaces were extended with new methods:

• DestinationConfiguration - getKeyStore() and getTrustStore() - for access to the configured HTTP Destination key store and trust store. For more information, see ConnetivityConfiguration API.
• AuthenticationHeaderProvider - getSAPAssertionHeader() - for generation of SAP Assertion SSO Headers. For more information, see AuthenticationHeaderProvider API.

• The identifier of Message Type has been changed from a combined key of sequence + DeviceTypeId to a single 20 character hex value. To guarantee full compatibility the messaging application (MMS) must be updated in the consumer account.
• Self-registration of devices via OAuth is now supported.

SAP HANA Cloud connector 2.6.1.1 is released. Fixes:

• Fixed the OutOfMemoryError shown when viewing really huge audit logs in the built in log viewer.
• Fixed the NullPointerException that could occur when importing a UI certificate.
• Fixed the NullPointerException that could occur when configuring a Cloud User Store.
• Fixed the CriticalSccException - "Could not get initialized configuration - locked by another thread" - that could occur when you log on to a Cloud Connector that is running in a high availability setup.

The REST API for managing role authorizations and user assignments of your applications is now generally available. For more information, seehttps://api.hana.ondemand.com/authorization/v1/documentation.

The public monitoring REST API for fetching metrics and monitoring state of applications is now generally available. For more information, seehttps://api.hana.ondemand.com/monitoring/v1/documentation.

The cockpit login page has been redesigned. All links to details, legal info and related cloud products have been moved to the footer of the page.

The second USA landscape, us2.hana.ondemand.com, is located in Phoenix and is now productive. For more information on landscapes, seeLandscape Hosts

The Remote Data Sync service (beta) now provides a sizing guide, which helps you choose the optimal hardware configuration for a fluent run of your applications on a MobiLink server. For more information, seePerformance and Scalability of the MobiLink Server.

SAP HANA revision 96 (SPS 09) is now productively available. For more information, see:SAP Note 2021789 - SAP HANA Revision and Maintenance Strategy

Some of the setup routines when using JPA in your project are now automatically handled by the tools. The following settings are automatically added to the persistence.xml file when you create a new JPA project or a new project that contains the JPA facet in its configuration:

• DDL generation type: Create Tables
• Persistence Provider: org.eclipse.persistence.jpa.PersistenceProvider

For more information, seeProgramming with JPA.

SAP Jam is an enterprise social networking (ESN) application that can integrate data from SAP and third-party applications. SAP Jam presents that data and any related documents in a social networking structure that enables business collaboration through template-based patterns. For more information, see SAP Jam Service.

The cockpit now remembers your location when you log out. When you log in again, the cockpit takes you automatically to the place from which you left off.

The TenantContext API was extended with methods for listing:

• the accounts subscribed to a calling multitenant application;

• the attributes of these accounts. 

For more information, seeTenant Context API.

SQL Anywhere MobiLink Service (beta) is now renamed to Remote Data Sync Service (beta). Also, you can try the detailed example of synchronizing data from a remote SQL Anywhere database into SAP HANA.

See:Developing Client-Initiated Synchronization

The certificates for SAP HANA Cloud Platform domains are now updated so as to guarantee the compatibility of the platform with the newest browser versions.  If you have not yet updated your Eclipse Tools and SDK to the latest versions, we strongly recommend that you do that! Otherwise, your Eclipse and Console client will stop working properly. 

For more information, see this blog post:Platform certificates will expire soon

You can now import and export users and roles in the Eclipse IDE. For more information, seeSecurity Testing Locally.

Use SAP Mobile Documents to access and share business content stored in your existing document management systems, by connecting them to your cloud application. For more information, seeSAP Mobile Documents.

Beta: Java applications running on SAP HANA Cloud Platform can use JRE 8 by specifying the parameter --java-version 8 duringdeploywith the console client, or via theset-application-propertycommand. It is supported only in combination with Java Web Tomcat 7 runtime (neo-java-web 2.x). For more information, seeChoosing JRE Version.

NOTE: You can use JRE 8 only if you have enabled the beta features usage for your account. You do that with the Enable Beta Features option in the cockpit. For more information, seeManaging Accounts and Quotas.

SAP HANA Cloud connector 2.6.0 is released. Features:

• You can now change the UI certificate of the Cloud connector and also add a system certificate, by issuing a certificate signing request. Both actions can be performed from the Settings dialog as you can then import the response from the CA. For more information, seeExchanging UI Certificates.
• A shadow installation now allows to configure its authentication mechanism. Moreover, LDAP configuration supports more options natively. For more information, seeInstalling a Failover Instance for High Availability.
• Accounts managed on the Cloud connector can have a display name in addition to the technical one so that it's easier to identify certain accounts. For more information, seeInitial Configuration.
• There is a new Access Control wizard for configuring new systems that shall be exposed by the Cloud connector. For more information, see Configuring Access Control (RFC)andConfiguring Access Control (HTTP).
• The Principal Propagation section now allows you to create a sample certificate that can be used for generating user mapping rules in the target system, for example, via transaction certrule in an ABAP system. For more information, seeConfiguring Subject Pattern for Principal Propagation.
• In the UI, the application trust configuration is now separated from the principal propagation. They can be managed via sections Trusted Applications and Principal Propagation, respectively.
• A command-line tool is added, which allows you to adjust the UI port of the Cloud connector. For more information, seeChanging the UI Port.
• You can provide description for a Cloud connector instance. In future, this description will be available when monitoring on the cloud side, so that you can identify a particular Cloud connector there.
• In high availability setup, on the master instance, you can now see alerts if there are issues with transferring settings to a shadow instance. This way, an administrator recognizes that there might be inconsistencies in the configuration of these two instances.
• The number of failed log-on attempts to the Administration UI is now limited. When reaching this limit, your user will be locked for a certain period of time.

SAP HANA Cloud connector 2.6.0 is released. Fixes:

• For some accounts, the payload traces used to not be written. This wrong behavior no longer occurs.
• When trying to restart the Cloud connector or to delete an account, the Cloud connector used to hang. This behavior no longer occurs.
• If the Internet access from within the corporate network is protected by a proxy requiring authentication, the Cloud connector used to fail to establish connection to SAP HANA Cloud Platform with an error message, similar to "java.lang.IllegalArgumentException: Header value must not end with '\r' or '\n'". This behavior no longer occurs.

The Add New Member feature was enhanced to allow adding multiple members to an account simultaneously. For more in information, seeAssigning Members to Accounts.

You can maintain display names and descriptions of HTML5 applications. For more information, seeDefining Application Details (HTML5 Apps).

The certificates for SAP HANA Cloud Platform domains will be updated in order to guarantee the compatibility of the platform with the newest browser versions. This change will become effective on the platform landscapes with the planned update on 18-Jun-2015.

Due to this change, you need to update your Eclipse Tools and SDK to the latest versions, which already contain the new compatible certificates.

For more information, see this blog post:Platform certificates will expire soon 

The Internet of Things (IoT) Services (beta) enable you to develop, customize and operate IoT business applications in the cloud. For more information, seeInternet of Things (IoT) Services (beta).

Member management has been redesigned to facilitate managing account members:

• The Members list is simplified to show only the roles per member that are assigned to this member.
• Editing the role assignments of a member happens in a dedicated dialog per member, thus reducing potential errors.
• A role filter is available that allows you, with one click, to filter the Members list to show only the members assigned to a specific role.

For more in information, seeAssigning Members to Accounts.

You can now export destinations from the Eclipse IDE. For more information, seeExporting Destinations (IDE).

You can now view the logs of all HTML5 applications running in your account, or the logs of the subscriptions to these applications. For more information, seeLogging HTML5 Applications.

SAPUI5 distribution 1.28.5 for Java and HTML5 applications (including runtime 1.28.5 & documentation) has been released.

Performance Statistics (beta) allows easier troubleshooting of performance problems. For each HTTP request, it provides a breakdown of the request processing time and the consumed resources. For more information, see Performance Statistics (beta).

Using the Gamification service (beta), you can now rapidly introduce gamification concepts into Web applications. The service includes an online development and administration environment (gamification workbench) for easy implementation and analysis of gamification concepts. For more information, seeGamification Service (beta).

SAP Translation Hub (beta) is a service that allows you to translate short texts in applications into additional languages quickly and easily. This service uses multilingual texts from SAP applications that are stored in an SAP HANA database. For more information, seeSAP Translation Hub (beta).

You can now see all available IP ranges for a particular landscape host.  For more information, seeLandscape Hosts.

From now on, HTTP destinations with proxy type Internet can be used to call external systems on arbitrary ports. Previously, there were issues with some ports > 1024. This limitation no longer exists.

You can now update your productive SAP HANA instances so that you always use the latest available version. You can update all installed software components to a higher version, or apply a single support package. For more information, seeUpdating SAP HANA Instances.

The UI theme designer is a browser-based tool for cross-theming scenarios. Use it to:

• Apply your corporate branding and look to applications built with SAP UI technologies.
• Easily build your corporate identity themes by modifying one of the theme templates provided by SAP. For example, you can change the color scheme, or add your company's logo.

The tool is targeted at different user groups, including developers, visual designers, and administrators. For more information, seeUI Theme Designer Guide.

In the Eclipse IDE, you can now faster apply changes that you have made in your deployed application without uploading the entire set of files tо the cloud. For more information, seeDeploying on the Cloud from Eclipse IDE→ section "Next Steps".

In Cockpit → Authorizations→ Users, you can now filter the groups displayed when you assign a user to groups, using parts of the group name or a regular expression. For more information about user assignments, seeManaging Roles.

SAP HANA Cloud connector 2.5.2 is released. Fixes:

• If you invoked an HTTP service that had previously contained URL-encoded parts, those parts used to be replaced with their decoded characters. For Java scenarios, this used to happen for on-demand to on-premise connectivity (on the cloud side) when using HTTP proxy instead of Java destination runtime. For SAP HANA XS scenarios, this used to happen on every HTTP call of that type. This wrong behavior no longer occurs.
• If the connection to a cloud account failed, the execution of all successive attempts to establish this connection used to fail, and thus the connection could not be created even if the cause for the failure had been eliminated. This wrong behavior no longer occurs.
• The high-availability setup with LDAP user authentication is now improved, and thus you no longer need to use workarounds with additional dummy users.

When new features become available, they are announced in a pop-up window when you open SAP HANA Cloud Platform cockpit. If you want to open this pop-up again later, choose What's New in the cockpit header.

Document service repositories can now be managed from within the cockpit. For more information, seeManaging a Repository in the Cockpit.

SAPUI5 distribution 1.26.10 for Java and HTML5 applications (including runtime 1.26.9 & documentation) has been released.

The sapui5 repository located onsapui5.hana.ondemand.comis now available through the Akamai CDN. All applications which consume it directly in their UI layer will benefit from the improved latency.

This enhancement does not affect applications consuming SAPUI5 via server-side proxy fetching.

You can use delta deployment for faster development turnaround. Use the --delta parameter in the console client commandsdeployandhot-updateto deploy only the changes between your source and what is already deployed.

• The integration of the HTML5 Applications cockpit page with SAP Web IDE has been simplified. Now, after creating an HTML5 application, you can click the Edit Online button to launch SAP Web IDE and clone the repository. For more information, seeCloning a Repository.
• To create, delete, start, stop, or activate an HTML5 application in the cockpit, the Developer role is now sufficient. Users no longer need the Administrator role to execute these operations.

SAP HANA Cloud Platform offers a new role: Application User Admin. Members with this role can maintain the permissions of users for accessing Java and HTML5 applications. Application user admins can assign users to the roles of the application or to the groups which are assigned to the roles of the application. For more information, see Account Member Roles.

The Git service now supports the account member roles Administrator, Developer, and Support User. For more information, seeWorking with Git.

You can specify environment variables for configuring the environment in which a Java application runs. Use the console client commandsdeployandset-application-property, or use thelifecycle REST API.

The Product Availability Matrix (PAM) is now extended with additional OS versions for the new Cloud connector versions (2.5.1 and higher). For more information, seePrerequisites.

• In the Members section, the new History button opens a list of changes made to account members (for example, added/removed account members, or changed role assignments).
• The cockpit icons are redesigned in high-contrast mode.

• HTML5 application versions can now be created and activated on a single screen in the cockpit.
• A required destination from the neo-app.json file can now be mapped to an existing account destination. For more information, seeAccessing REST Services.

SAP HANA revision 92 (SPS 09) is now available.

• In a production environment or planned Go-live in less than 6 weeks,we recommend that you stay on the current SAP HANA SPS 08 until the next SAP HANA Datacenter Service Point is reached.
• In a non-production environment or planned initial system setup, you can update to the new SPS 09 via request to SAP HANA Cloud Platform operators.

For more information, see:SAP Note 2021789 - SAP HANA Revision and Maintenance Strategy

• Thehome pageis improved.
• Breadcrumbs are included for better navigation.
• The documentation structure is simplified and optimized by categories which reflect the programming models offered by the platform - Java, SAP HANA, HTML5, and SAPUI5.

• Thedownload site is now served viaAkamai CDNto optimize latency and throughput in all geographical regions.
• There is better throughput when downloading cloud tools, HCI, or AppBuilder with the speed of your local ISP.
• The installation time of the Eclipse tools is significantly reduced.

Applications called via HTTP destinations of authentication type ApplicationToApplicationSSO now support principal propagation.

SAP HANA Cloud connector 2.5.1 is released. Fixes:

• The Connect/Disconnect operations in Account Dashboard now behave correctly.
• After restarting the Cloud connector, both the principal propagation and the trust configuration work properly for existing sessions.
• After restarting the Cloud connector or in case of failover, the Service Channels function is started automatically. 
• If there is a SAP JVM installed via RPM on Linux OS, the Cloud connector will prefer this SAP JVM to other available JVMs .
• Previously, if an account was deleted in the Master instance, the deletion was propagated to the Shadow one, but the account configuration remained in the Shadow. This wrong behavior is now fixed.

You can now set SuccessFactors as the role provider for extension applications. This allows you to manage the roles of such applications only in the SuccessFactors system. For more information, seeChanging the Default Role Provider.

Only the main links (Settings, Help, and Feedback) remain in the cockpit header. All the other links were moved to the new footer.

SAPUI5 distribution 1.26.5 for Java and HTML5 applications (including runtime 1.26.4 & documentation) has been released.

• Тhe OAuth tokens of HTTP destinations with authentication type OAuth2SAMLBearerAssertion are now auto-renovated. When a token is about to expire, a new token is created shortly before the expiration of the old one.
• To allow parallel usage of HTTP client instances, HTTP clients created by HTTP destinations will now use ThreadSafeClientConnManager.

By default, the FORM and SAML2 login methods used to fall back to user name and password authentication (HTTP basic authentication) in case of failure of the trusted SAML identity provider. This default fallback is now removed. To preserve the behavior, in Authentication Configuration create for your application a custom login method, in which you select the User name and passwordoption. The change requires application restart. For more information, seeConfiguring Authentication for Your Application.

Breadcrumbs show the full object hierarchy in the pattern:

Data Center→Account→<application>→<process>

The interface com.sap.core.connectivity.api.configuration.ConnectivityConfiguration is extended with a new clearCache() method. It allows each application to clear its local cache to ensure that the next configuration will be taken from a central storage. The method also clears the configuration cache used by HTTP destinations. For more information, seeConnectivity Javadoc.

SAPUI5 distribution 1.26.3 for Java and HTML5 applications (including runtime 1.26.3 & documentation) has been released.

SAP HANA revision 91 (SPS 09) is now available.

• In a production environment or planned Go-live in less than 6 weeks,we recommend that you stay on the current SAP HANA SPS 08 until the next SAP HANA Datacenter Service Point is reached.
• In a non-production environment or planned initial system setup, you can update to the new SPS 09 via request to SAP HANA Cloud Platform operators.

For more information, see:SAP Note 2021789 - SAP HANA Revision and Maintenance Strategy

Virtual roles are now available for HTML5 applications.

• AccountAdministrator– account members with Administrator role.
• AccountDeveloper– account members with Developer or Administrator role.
• Everyone– all authenticated users of the configured identity provider.

You can map virtual roles to HTML5 application permissions. AccountAdministrator and AccountDeveloper require SAP IDP to be configured as identity provider. In case a custom IDP is configured, you can manually create these roles in the corresponding account.

By default, every permission required to access a protected resource of an application is granted to members of the AccountDeveloper role. As long as no other role is assigned to the permission, only account members with the Developer or Administrator role have access to the protected resource. This is also true for the default permission NonActiveApplicationPermission, which is required to access a non-active version of an HTML5 application.

• The Subscribed Java Applications table now has columns State and Start Time, so you can see the run state and start time of your subscribed Java applications.
• Every row in the log viewer has a View button that opens the respective log line in text-only format.

The rolling-update command is now available for productive use. For more information, seerolling-update.

SAPUI5 distribution 1.24.6 for Java and HTML5 applications (including runtime 1.24.5 & documentation) has been released.

New version of SAP JVM Tools is released. For more information about the new major features, seeWhat is New in SAP JVM Tools 2.2.

• JCoDestination.ping() times out after <rfc.client_connect_timeout>  seconds. It also throws a JCoException with error group JCO_ERROR_TIMEOUT if the system does not respond in that time.
• When using a destination with pooling, you can configure the destination to check the validity of a connection before using the connection for a function call. This way you can avoid zombie connections that may lead to error-prone situations.
• Traffic traces are added, which allows analyzing transferred data amounts.

Connectivity Service

• JCoRecord.isInitialized(name|index) no longer returns wrong "false" for nested tables or structures.
• Performance improvement is done for client calls that do not use AbapClassException.

Platform Infrastructure

The Safari browser no longer blocks iFrame-embedded applications.