Patching and Maintenance: SAP Notes, Support Packages and Maintenance Planner

Keep this: job aid

Maintenance and patching checklist

• SAP Note: read validity and manual steps → SNOTE in CMD → transport → test → CMQ → CMP. Never SNOTE in CMQ/CMP.
• Know the levels: note, support package (stack), feature package (stack), release upgrade; plus kernel and SAP HANA.
• Maintenance Planner: accurate system data → target stack → download basket → stack configuration file.
• Before import: valid maintenance certificate, SPAM/SAINT update, current SUM, backup.
• SPDD during import (dictionary), SPAU after (programs, notes); include adjustment transports downstream.
• Same stack in CMD, CMQ and CMP; no transports from newer to older SP levels.
• Risk-based regression: what changed, what is critical, what broke before.
• Security Patch Day: second Tuesday monthly; assess priority, CVSS and exposure; document deferrals.
• Track security notes per system until production is protected.