Pre-Installation
Before you begin to install the system landscape for SAP Fiori, make sure you have planned the following:
You have to decide in which network zones the components of the SAP Fiori system landscape reside.
For example, should the clients be able to access the SAP Fiori apps over the Internet, or only within the company's intranet? Is there a DMZ and is the SAP Web Dispatcher (SAP Fiori fact sheets and analytical apps) deployed there? Depending on your network architecture, make sure you have the right security measures in place, such as a secure firewall configuration.
For single sign-on (SSO) using logon tickets, you require an SSL server certificate for each of the components between which you want to use SSO.
Components can be, depending on your system landscape:
SAP Web Dispatcher (SAP Fiori fact sheets and analytical apps)
SAP Gateway on front-end server
ABAP back-end server (Search in SAP Fiori fact sheets)
SAP HANA XS Engine (SAP Fiori analytical apps)
Depending on from where you obtain the certificates, it can take several days to get them.
For more information, see section SAP HANA Authentication and Single Sign-On in the SAP HANA Security Guide at http://help.sap.com/hana_platform
Security 
.
SAP Fiori apps require a web browser that can display files in HTML5 format.
For more information, see Setup of Clients.
You have to decide how to set up the roles and authorizations for the SAP Fiori users. This includes, for example, which user group uses which apps.
For more information, see section User Management and Authorization in the generic section App Implementation.
Required if you use SAP Fiori apps that use an SAP HANA database.
To configure HTTPS and SSO in the SAP HANA database, the administrator requires privileges to access SAP HANA on the operating system level.
For more information, see section Operating System User <sid>adm in the SAP HANA Administration Guide at http://help.sap.com/hana_platform System Administration .
Required if you use SAP Fiori analytical apps that use SAP HANA in a side-by-side scenario alongside any database that contains the SAP Business Suite data.
Make sure that data replication between the database that contains the SAP Business Suite data and SAP HANA is configured.
For more information, see section Replicate Data (Side-by-Side Only) in the SAP HANA Live Administrator's Guide at http://help.sap.com/hba Installation, Security, Configuration, and Operations Information .