Monday, February 20, 2017

Pre Installation Setup for Hyperion EPM V11.1.2.4

1.  General

Recently, when I was working with Norwegian courier services leader for installation and configuration of Hyperion EPM V11.1.2.4, I got chance to document my steps and hence finally got chance to share on blog.
As they always say,
“The will to win is worthless if you do not have the will to prepare.”
To begin with Hyperion EPM V11.1.2.4 installation and configuration, we should prepare our environment and resources well for it.
That’s my aim here, to provide steps for pre-installation setup for Hyperion EPM V11.1.2.4. 

2.  Pre-Installation Checklist

1.       Work Area
·         Internet Access – Outside firewall (Disable firewall for the working folder – e.g. installers and oracle folder.
At beginning, we will have only installers folder, disable firewall for this folder.)
·         Computer within EPM Servers network
2.       Third party licenses
E.g. web server licenses, Java

3.       Software
Check all installers are downloaded from oracle edelivery

4.       Required documents
Check if all the required documents are downloaded from oracle edelivery 

5.       Preparing the Hardware
·         Confirm your plan of deployment architecture – whether single server or distributed environment for EPM
·         Plan which components to be installed on which servers if we are going for distributed environment.
·         Confirm whether computers meet hardware system requirements. Check following matrix.
·         Resolve Firewall problem
Open a restricted range of ports in your firewalls for client to server or server to server communication.
·         Disable antivirus
Exclude the EPM Oracle home directory from automatic antivirus scans and scan this directory only at scheduled times.

3.  Preparing Environment

Preparing ports

This section contains information about default port numbers for EPM System products.

Necessary ports should be enabled on EPM Environment servers. Firewall should be disabled at these ports for communication between servers or between servers and clients.

EPM Module
Default Port Number
Default SSL Port
Weblogic Administration Server
Oracle Enterprise Manager Java Web Application Port
SOA Server Port
Foundation Services Web Application
Oracle HTTP Server
Provider services (SmartView)
Essbase Administration Services
Essbase Agent
Essbase server applications (ESSSVR)
Essbase SSL Agent
OPMN (Oracle Process Manager and Notification Server) Local Port

OPMN (Oracle Process Manager and Notification Server) Remote Port

Essbase Studio Listen Port

Essbase Studio remote Port

Reporting and Analysis Framework Agent

Reporting and Analysis Framework Agent RMI

Reporting and Analysis Framework Services

Financial Reporting Web Application
Financial Reporting Default Service Ports

Reporting and Analysis Framework Web Application
Web Analysis Web Application
Financial Management Java Web Application Port
Financial Management Server port
FM Datasource Start Port
Planning Java Web Application Ports
Planning RMI Server Port

Disable UAC on all servers

UAC must remain disabled in order for EPM System server components to function properly.
UAC can be enabled on end-user client desktops.
In Windows 2008 environments, disable User Access Control (UAC) on each server in the deployment.
Control Panel à System and Security

Server Preparations

Server Name Information

Web server(s) (could be more than one):
·         Name: _____________________________
·         IP: _________________________
Application server(s) (could be more than one):
·         Name: __________________________
·         IP: _____________________
Database server (information depending on Oracle DB or MS SQL):
·         Name: __________________________
·         IP: _____________________
·         SID/Instance/Port: _____________________

Operating System

Prepare each server for the installation:
Update server software as needed.
·         For each server in the deployment, apply Windows updates and reboot before starting with installation and configuration of Hyperion EPM System
·         Include service packs, hot fixes, fix packs, etc.
·         Always stay on the latest OS Service pack level
·         Install Internet Explorer (IE) on the servers,
For any version higher than IE 9
·         Disable unnecessary services.
·         Power option set to High Performance

Synchronize clocks

The clock on each server must be synchronized to within one second difference.

Resolving Host Names

The canonical host name of each server must be the same when accessed from within the server and from other servers in the deployment.
You can modify hosts file located at following location C:\Windows\System32\drivers\etc
An archive of the utility ( is available in the directory where you unzip the assembly for EPM System Installer.

Disabling Anti-virus Software

Antivirus software can cause performance issues with EPM System products if, each time you access any resource on the server, the antivirus software tries to open and scan the object. To prevent these issues, exclude the EPM Oracle home directory from automatic antivirus scans and scan this directory only at scheduled times.

Excluding the EPM Oracle home directory from automatic antivirus scans 
Scan EPM Oracle home directory only at scheduled times.   

Web Server

·         Make sure that a DNS (CName) name is ready for the load balancer (BIG IP)
·         Make sure that the load balancing solution is in place for the web server(s). (Server group 1)
·         The following products require IIS to be installed with ASP.NET and ASP support enabled before configuration of the EPM System product: (Server group 1)
Strategic Finance

Network Share

·         A network share for storing software for installation together with patches and used 3rd party components
·         A read/write network share needs to be created for RAF to store the Workspace objects (Server group 1)
o   Name on share: RAF
o   Network path/address to share: \\ServerName\D$\EPMQA\
·         A read/write network share needs to be created for LCM to store the application artifacts* (Server group 1)
o   Name on share: LCM
o   Network path/address to share: \\ServerNamel\D$\EPMQA\LCM
Start with 200 GB for all three products and make sure that the shared folder is locked down to install account to start with.

Preparing User Account

·         Do not use the Administrator user to install and configure. Run EPM System Installer and EPM System Configurator as a user with administrator rights.
·         When you upgrade, apply a maintenance release, or patch this server, use the same user account that was used to install and configure the earlier release.
·         Make sure that no password policy forces the user account to change password or expire.

Preparing External Directory Lookup Account

Prepare a service account for external authentication against the authentication provider of your choosing (MSAD or LDAP). This account allows the Shared Services component to make a browse level connection to your chosen authentication provider. The purpose of this is so that you can use accounts from your Authentication provider to log in to the Oracle Hyperion EPM
·         Create a service account with browse level privileges for MSAD or other LDAP Provider
·         Ensure service account does not have any special characters
·         Ensure service accounts Distinguished Name (DN) is able to access MSAD or other LDAP Provider
·         Ensure that MSAD or other LDAP Provider port is known
·         Be familiar with the name of a Primary Domain Controller that has access to MSAD and the base DN
·         Have information ready to the consultant for where the users and groups is in the directory so that configuration to the correct OU can be done
·         Ensure that server can communicate with MSAD or other LDAP Provider

MSAD/LDAP information

·         Name of connection: ________________ (identifier we should user)
·         Server name: ____________________
·         Port number: _______________________
·         User ID: ___________________ (The user to log in to directory service)
·         Password: ____________________
·         Attribute for user ID : ____________________ (the username in EPM)
·         Base DN for lookup user: __________________________
·         Base DN for user folder: ___________________________
·         Base DN for group folder: __________________________
·         Filter for EPM users: _____________________

Check disk space and RAM

Client System Disk Space and RAM

The recommended RAM requirement for all clients is 1 GB.
The installation program checks for twice the required disk space, based on your product installation choices.

Server Disk Space and RAM

4.  Preparing Database

Oracle Database Client

Unlike previous versions of Hyperion EPM system till V11.1.2.2, Oracle Database client comes bundled along with Hyperion EPM v11.1.2.4 installers.
Under Foundation services, we have 32 bit Oracle DB client and 64 bit Oracle DB client.

We can either use the bundled client or we can install DB client separately. In that case we need to uncheck Oracle client under Foundation services.

If we are installing DB client separately, we need to refer following points.

Separate DB client

Install the full Oracle Database client on the following machines before you start your installation of EPM System products:
·         Performance Management Architect Dimension server
·         Financial Management application server
·         FDM Application Server and any machine that has FDM Workbench
·         Strategic Finance
For v11.1.2.4 installation, we need to install DB client. Following are some bullet points to be highlighted.
·         We need to install Oracle DB client (Both 32 bit and 64 bit) on HFM and FDM server if we are using distributed environment.
Reason – HFM is 32 bit application and for running all processes properly, we need both 32 as well as 64 bit DB client.
·         For Foundation server, we can install only 64 bit client. 32 bit client can be skipped.
·         While installing client, 32 bit DB client is first installed followed by 64 bit client installation.

Oracle Database

The database must be created using Unicode Transformation Format UTF-8 encoding (character set).

Make sure that the following attributes and settings are used for the Oracle database:
·         alter system set PROCESSES=1000 scope=spfile;
·         alter system set SESSIONS=2000 scope=spfile;
·         alter system set SESSION_CACHED_CURSORS=200 scope=spfile;
·         RESIZE 1000M;
·         NEXT 500M
·         MAXSIZE 5000M;
Product Specific
Oracle Hyperion Financial Management
·         alter system set OPEN_CURSORS=5000 scope=spfile;

Database Privileges

The following privileges must be granted to the owners of the database schemas:
·         CREATE VIEW
·         CREATE TYPE
·         CREATE TABLE

Purpose of schema
Initial Size (Auto Extend)
DB Name (SID)
Shared Services
1 GB
Reporting and Analysis Framework
1 GB
HFM schema
30 GB
Calc Manager
500 MB
Planning configuration
100 MB
Planning application 1
100 MB
Planning application 2
100 MB
Planning application 3
100 MB
Planning application 4
100 MB
Essbase Administration Services
100 MB
Essbase Server Studio
100 MB
30 GB
Strategic Finance
500 MB
Extra schema
500 MB
Extra schema
500 MB

2.  Web Application and Web Servers

Web Application Server

WebLogic Server

Oracle provides a limited-use license of WebLogic Server for use with EPM System products.

Web Server

Oracle HTTP Server

Bundled with EPM installer and can be installed during installation of foundation services.

IIS Server

None of the components except HSF require IIS as web server. So we require to install IIS.