HYPERION FINANCIAL MANAGEMENT TECHNICAL COURSE
Lesson Plan1. Introduction to HFM• What is HFM for?
• Important terminology• Tasks Performed• HFM as a Data Source
2. Architectural Overview• Characteristics• N-Tier
3. Configuring Security• Types of Security• Configuring security
4. Installing HFM• Prerequisites• Planning the Install
5. Installing the HFM Application Server• Installing• Configuring the HFM Application Servers• DCOM Security
6. Installing HFM on the IIS Web Application Server• Installing• IIS Settings and Properties
7. Testing the Installation• Building the Simple Demo Application• Testing The Web Site
8. HFM System 9 Overview
Lesson 1: Introduction to HFM
What is HFM?What is HFM?
Hyperion Financial Management is a Web based (architected), financial consolidation, analysis and reporting product.Companies use HFM to consolidate data from various systems to create a global view of information.
•Journals for Adjustments•Inter-company transactions•Consolidation of Data•Translation of exchange rates•Reporting and data loading through Excel•Data analysis and report writing through Hyperion Analyzer and Hyperion Reports•Data Entry Forms•Data Grids•Rules •Process Management•Security•Related Content•Workspaces
TerminologyTerminology
HFM Dimensions:Scenario – Set of related Data – Eg: Actual, Forecast, BudgetYear – Years – Eg: 2004, 2005, 2006, 2007, 2008Period – Sub division of years – Eg: Trimester, Quarters, Months, Weeks, Days…Entity – Management and reporting structures - Eg: companies, regions, divisionsValue – input Currency, Parent Currency, Adjustment currency and consolidation detail.Account – Hierarchy of Account – Eg: Chart of AccountsInter-Company ICP – Used for inter-company eliminationsView – Data representation modes Eg: Periodic, YTDCustom 1,2,3,4 – Used for more detailed analysis Eg: Product, Region, Customers
TerminologyTerminology
Hyperion Reports - Graphical report writer (Read Only).
Allows for Web based report output in HTML or PDF
Hyperion Analyzer – Online analysis reporting tool (Read Only).
Web Based Graphical Output
Hyperion Application Link (Read Write)
Smart View – Microsoft Excel Add-in (Read Write)
Extended Analytics – (Read)
Lesson 2: Architectural Overview
N-TierN-TierHFM is a multi tier systemThere are three tiers in total:
Client Tier – The main user interface, This is the way most users will interact with HFM from their workstations. Access methods mainly use HTTP(S) through the Internet Explorer Web Browser or through Microsoft Excel.
Middle Tier - Application Servers and IIS Web application Servers layer, This is where all the data processing occurs and is the tier where html/asp pages are generated to be sent to the end user.
Data Tier – Consists of the relational Database tier. This is where all HFM data is stored.
BenefitsScalabilityReliabilityEfficiency
Database Server
N-TierN-Tier
Laptop Computer
Middle TierWeb/AppServers
WAN/LANDCOM
Laptop Computer
WAN/LAN/WebHTTP
LANOLE DBDatabase Tier
DB2/MS SQL/OracleServer
Client TierWin32 ClientWeb/Excel
MS Windows NT4/2000/XPIE6/IE7/MozillaMS Office 2000/XP/2003HFM Win32 ClientHFM Smart View
MS Windows 2000/2003IIS5/IIS6HFM Web Components
MS Windows 2000/2003HFM Application Server Components
Platform IndependentMS SQL/Oracle/DB2
The HFM ProcessesThe HFM Processes
The main work horse in an HFM system are the two processes that run on the HFM Application Server.
1. HSXServer.exe - When HFM is active there is one HSXServer.exe process active on each HFM Application Server. This Process stays active till all users have logged out of the HFM Applications. The HSXServer.exe process is responsible for presenting the user with a list of available applications, once the user selects an application the HSVDatasource.exe is started and controlled by the HSXServer.exe process.
2. HSVDatasource.exe – There is one HSVDatasource.exe process running for each active application on each application server. For example, If There are 3 HFM Applications but only two of the applications are being accessed we would expect to see one HSXServer.exe process and Two HSVDatasource.exe Processes running.
3. The HFMService – The HFM Service is an optional component which will force the HSXServer.exe Process to start and ALL the HSVDatasource.exe processes, independent of the fact that there may be no user activity on the system.
The HFM ProcessesThe HFM Processes
In a multi Application server environment these server processes communicate between each other.
These Processes are normally run by the “DCOM User”. The DCOM User must have sufficient rights to start the Processes on the local HFM Application Server, As well as have the rights to launch the HFM services on any other sibling HFM application servers.
The Require Rights: The DCOM user should be a member of the
local Administrators Group The DCOM User should have the rights to:
1. “Act of part of the operating system” 2. “Log on as a batch job”
On windows 2003 – Anonymous Launch must be allowed for the HFM Processes
ProtocolsProtocols
HTTP and HTTPSHypertext Transfer Protocol (HTTP) is the method used to transfer or convey information on the World Wide Web. Used for communication between Internet Explorer/Excel Smartview workstations and the HFM Web Server. Nearly all functionality in HFM is accessible through the HFM Web site.Ports Used: HTTP = 80 & HTTPS = 443DCOM and DCE/RPCDistributed Component Object Model (DCOM) is a Microsoft proprietary technology for software components distributed across several networked computers to communicate with each other. DCOM communication is the only way different components can talk with the core HFM processes.Ports Used: RPC = 135 and then a dynamic port range (This can be fixed for compatibility with firewall environments)OLE DBObject Linking and Embedding for Databases, is a means Microsoft uses for accessing different types of data stores in a uniform manner. HFM processes use a UDL file to interface with the database.Ports Used: MS SQL Server = 1433(TCP) & 1434(UDP) Oracle = 1521 1526 1575 1630
Protocol Overview (As Per Pre-System9 Protocol Overview (As Per Pre-System9 Architecture)Architecture)
Hyperion HubServer
Hyperion Financial Management ServerHyperion Reports Server
Acrobat / Ghostscript
Writer
Web Clients
Reports Database(Repository)
HFM Database(Data & Metadata)
Browser (IE / Netscape)
HT
TP
/ H
TT
PS
Internet Information Server
HFM Web Server
HFM Client (ADM Driver)
DCOM
HFM Application Server
OLE DBD
CO
M
HT
TP
/ H
TT
PS
Hyperion Hub Database(Repository)
External HTTP Server
Reports Print
Server
Reports Scheduler
Server
RMI
RMI
Reports Communication Server
Reports Server
ADM Driver
JDBC
DCOM
Tomcat / WebSphere / WebLogic
ADM Driver
Hyperion Hub
JDBC
HT
TP
/ H
TT
PS
External HTTP Server
Tomcat / WebSphere / WebLogic
Reports Web Server
RM
I
DCOM
Lesson 3: Security/Authentication
HFM SecurityHFM Security
Security for HFM is configured on three levels.
The local security rights required by the HFM processes just to run, often a local user on the individual application servers. Often referred to as the “DCOM user”
User Authentication - The actual End Users IDs and passwords this is normally the company’s Primary Domain Controller. HFM Uses this to authenticate a user only. This can be NTLM (old) or MSAD or LDAP (eDirectory)
User rights within HFM Financial Application. Once a users username and password has been verified, HFM checks the users rights to view certain data, to create delete information, to perform certain tasks.
Security OptionsSecurity Options
Authentication Providers
Windows NT LAN Manager (NTLM) on NT 4.0 or higher
Microsoft Active Directory (MSAD), Windows 2000 SP3 or higher
Lightweight Directory Access Protocol (LDAP) version 3 or higher
Lesson 4: Planning The Installing HFM
3rd Party Installation Requirements3rd Party Installation Requirements
Relational Database Management System
Microsoft SQL Server 2000 SP3, SQL Server 2005Oracle 8 / 9i, 10gIBM DB2 7.2 / 8.1
Authentication Providers
Windows NT LAN Manager (NTLM) on NT 4.0 or higherMicrosoft Active Directory (MSAD), Windows 2000 SP3 or higherLightweight Directory Access Protocol (LDAP) version 3 or higher
Microsoft 2000/2003 Servers
Read through the HFM Installation Documents and README for the release you are installing
Lesson 5: Installing HFM Application Server
PrerequisitesPrerequisites
Relational DatabaseMicrosoft SQL Server – Database and UserOracle – Tablespace and User
Starting the HFM Install, Language & TOCStarting the HFM Install, Language & TOC
HFM Installation Directory Selection
Default: C:\Program Files\Hyperion Solutions\Hyperion
Financial ManagementClients will more than likely like
to install to x:\Hyperion
Directory For Common Components
Selecting the components to installSelecting the components to install
The InstallationThe Installation
Application Server Configuration ScreenApplication Server Configuration Screen
The DCOM userEither a local user, or a domain user with the rights to run the HFM processes locally
If using a local user do not include a domain name.*If the user does not exist, then HFM will automatically create the user locally with all the required user rights to run the HFM Processes
A Domain group. Members of this group will be given rights to create Applications. If blank then everyone can create applications within HFM.
A Domain group. Members of this group will be given rights to Perform Administrative Tasks e.g Manage Servers, View Users on system etc. If blank then everyone can create applications within HFM.
Data Source Name, Information to be used by Extended Analytics (Exporting of data to a second database to be used by e.g. by third party OLAP/Analysis Tools
The UDL File used to tell HFM how to connect to the database.
Optional: To specify database tablespaces where the Hyperion Financial Management data tables and indexes are created
Maximum Number of pooled DB connections
Working Folder were the HFM Application server will write files to eg the HSVEventlog.log file.
Must be enabled when more than one Application server is being used
Multi-ServerMulti-Server
The Multi-server option MUST be enabled when more then one HFM application server is used. Not enabling multi server support in a multi Application server environment will cause undesirable/erratic results.
When more than one application server is used one of the application servers will appoint itself the Primary server. If the primary server is unavailable then one of the other servers will become the primary server.
The primary server is the the server which keeps track of data locks and consolidation.
In a multi server environment the application servers talk to each other.
Information about the multiple active servers is kept in the Database.
UDL - Database ConnectionsUDL - Database Connections
Changes from 3.5 (Clients may not be aware of this)Value defined in HFM Config Tool is Maximum
How it works – systemHSXServer – 8 connections for logons (grows by 4)
Error Pool(hsxserver) – 8 connections (not created until first error)System Pool - 8 connections per application (hsvdat)Error Pool (hsvdat) – 8 connections per application (not created until first error)System Hardcoded (hsvdat) - 14
Result1 app = 38 connections2 apps = 68 connections (30 in each hsvdat + 8 in hsxserver)
Allowing too few connections will result in temporary connections being created, yielding a performance hit
Creating the DatabaseCreating the Database
Launch the MS SQL Enterprise manager (In case you are using SQL Server 2000 SP3), else please follow the necessary steps to create a database in any other supported Database Server (in case of Oracle you need to create a HFM Schema).
Connect to the Database Server
Right Click Database
Create a new database, Name the database with your name and what the database will be used for eg: TESTHFM
Make the SQLadmin user the owner of the database.User: sqladminPassword: Password@1
UDL FileUDL File
To create the udl file, Create a text document and rename it with the .udl extension.
Right click and Opening the UDL file will allow the correct provider to be selected and database user to be entered.
Test Connection to see if the information is correct
Registry SettingRegistry Setting
The configuration in formation is stored in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Hyperion Solutions\Hyperion Financial Management\Server
Application Server ClusterApplication Server Cluster
Use this dialog to create a cluster of application servers for load balancing. This information is stored centrally in the database and is shared between all application servers.
In HFM 4.0.2 and earlier versions only one cluster can be created. From System 9 onwards, we can create more than one cluster.
Enter a cluster name and populate this with HFM Application Server(s)
Client Server/Cluster RegistrationClient Server/Cluster Registration
This is used to configure the HFM ADM and tells it which application servers are available to connect to e.g. HFM Win 32 “Fat” client or Hyperion Reports, Hyperion Analyzer and HAL.“Use one Server Only” This tells the HFM Win32 client which HFM Application Server or HFM Cluster to connect. More than one server can be configured here.“Use Automatic Load Balancing” Register an HFM cluster, an application server name which is a member of the cluster should be used here. The HFM Application server will automatically update the client with all the servers which are in the cluster.
Configuring External AuthenticationConfiguring External Authentication
By default (out of the box) HFM Application server will us NTLM authentication. When a user logs in the Application server will try to connect and authenticate the user against any available NTLM servers.
Configure External Authentication
Edit Registry Entries
HKLM\Software\Hyperion Solutions\Hyperion Financial Management\Server\Authentication\ConnectionInfo:Value: file:C:\Hyperion\CSS.xmlHKLM\Software\Hyperion Solutions\Hyperion Financial Management\Server\Authentication\ProviderType:Value: 0 (Use External Authentication)
Generally HUB is used to configure external authentication for HFM.
The above configuration has been taken care by Shared Services in System 9. We do not need to make any changes in the registry, once HFM is registered with Shared Services, it would automatically accept any userID that has been configured / provisioned to use HFM under Shared Services.
Lesson 6: Installing HFM On the IIS Server
What are we installingWhat are we installing
Web Server PrerequisitesWeb Server Prerequisites
HFM Web Server requires the ASP .Net Framework
Web Server
HFM Requires Windows 2000 Server IIS5 or Windows 2003 IIS6 ASP.NET also requiredActive Server Pages also needs to be Allowed
Starting the InstallStarting the Install
The Installation is much the same as the HFM Application server installation except we would not normally chose to install the Application Server Components on the Web Server.As with all HFM installations we would always recommend you install ALL the client components on the web server. The client components are not necessary for correct functioning, but they are an invaluable help when trouble shooting problems later.
HFM ASP Web Application Accessed through an Internet browser by the end user
Smart View Web Site files. Smart View is the Excel Add-in and connects using HTTP (s) This is usually installed on the same server as the HFM Web Site
Configuring the HFM Web ServerConfiguring the HFM Web Server
Register the HFM Application Servers
and Application Server Clusters here
that you want this Web Server to
connect to.
Configuring the HFM Web ServerConfiguring the HFM Web Server
Use the Web Server config tab to create the HFM Website with in IIS.
Path to the HFM Web Directory This should be the directory where the Default.asp file is located.
Links to other HFM products, which are selectable from within HFM
The Maximum Uplload and Download allowed ASPMaxMaxEntityAllowed ASPMaxBufferingLimit
Temporary storage folder or uploaded and downloaded files when loading or extracting from HFM.
Configuring Smart View (Excel Add-in)Configuring Smart View (Excel Add-in)
Smartview Configuration will automatically create the HFMOfficeProvider folder in IIS.
SmartView Timeout. Smartview timeout is not controlled by the HFMOfficeProvider virtual directory options in IIS.
IIS 6 Web Server ExtensionsIIS 6 Web Server Extensions
The major differences between IIS 5 and IIS 6 is that IIS 6 has increased security and application Isolation. By default IIS6 has the ASP page server extensions disabled. These need to be enabled.
IIS 6 Application PoolsIIS 6 Application Pools
If your server is hosting more than one website or ISAPI filters it is recommended to run each of these in their own application pool. This will help ensure that if there is a problem in one website or ISAPI extension then only that application pool will be effected and the other websites will continue to work correctly.
IIS ASP Session TimeoutIIS ASP Session Timeout
Generally on an IIS6 default installation these are the settings which need to be adjusted:
1. The ASP Session Timeout setting on the HFM website.2. Application Pool - Recycle worker processes (Minutes) - Disable this,
When Enabled this recycles the application pool and all ASP session information is lost.
3. Application Pool - Recycle worker process (Number of Requests) - Disable this, When Enabled this recycles the application pool and all ASP session information is lost.
4. Application Pool - Shutdown worker processes after being idle for (minutes), Should be set to the ASP Session timeout interval, if set shorter peoples sessions will be terminated before their ASP session timeout is reached.
IIS ASP Session Timeout SettingsIIS ASP Session Timeout Settings
The ASP Session Timeout setting on the HFM website.
IIS ASP Session TimeoutIIS ASP Session Timeout
Application Pool - Recycle worker processes (Minutes) - Disable this, When Enabled this recycles the application pool and all ASP session information is lost
Shutdown worker processes after being idle for (minutes), Should be set to the ASP Session timeout interval, if set shorter peoples sessions will be terminated before their ASP session timeout is reached
Recycle worker process (Number of Requests) - Disable this, When Enabled this recycles the application pool and all ASP session information is lost
Testing the Web ServerTesting the Web Server
Create an ApplicationFind Data.
Data Grid – Scenario – Actual – Year – 2004 – Entity – Connecticut.StamfordLoad WDEFs
View System MessagesRunning TasksRun ConsolidationOpen the ICT Module
Lesson 7: Testing the HFM Website
Testing the HFM Web SiteTesting the HFM Web SiteFor Testing the HFM Web Site you need to put the HFM Web link:
http (s)://<HFMWebServerName>:80/HFM
You may not need to put in the port number as by default IIS will run HFM on port number 80. This will open up the HFM login screen.
After inputting the proper credentials on the login page you will have to select the Server/Cluster after which it will display the applications that are available on the HFM Server. You can select the application to open it.
Lesson 8: HFM System 9 Overview
HFM System Architecture OverviewHFM System Architecture Overview
Database Server
Shared Services Server License Server
GLOBAL BUSINESS IMPACT
THANKS YOU FOR YOUR TIME
Recommended