1. Start a command line client and navigate to the directory in which hdbalm is located.

   By default, hdbalm is located in the c:Program Filessaphdbclient directory on Microsoft Windows and /usr/SAP/hdbclient(/usr/sap/S4D/hdbclient/) directory on Linux.

2. Set the following environment variables:

   Variable	Description
   HDBALM_USER	Name of your SAP HANA database user.
   HDBALM_PASSWD	Password of your SAP HANA database user.
   HDBALM_HOST	Full domain name of the SAP HANA XS engine.
   HDBALM_PORT	Port number of the SAP HANA XS engine. The default port is 80+<instance number>.

 Windows:

set HDBALM_USER=ADMIN
set HDBALM_PASSWD=******
set HDBALM_HOST=s4hanahost
set HDBALM_PORT=8010
set HTTP_PROXY=
set HTTPS_PROXY=

 Linux:

export HDBALM_USER=ADMIN
export HDBALM_PASSWD=******
export HDBALM_HOST=s4hanahost
export HDBALM_PORT=8010
export HTTP_PROXY=
export HTTPS_PROXY=

3.3 Execute the hdbalm installation command with the required options, command options, or parameters to deploy the software component of SAP HANA rules framework.

ExampleC:Program FilesSAPhdbclient_101>hdbalm.bat -v install C:TEMPHCORULEFW05P_3.ZIP
/usr/sap/S4D/hdbclient/hdbalm -v install /hana/sapcd/HCORULEFW11P_9-20011528.ZIP

报错：

hbdadm@s4hana:/usr/sap/HBD/HDB10> /usr/sap/S4D/hdbclient/hdbalm -v install /hana/sapcd/HCORULEFW11P_9-20011528.ZIP
DEBUG:root:Request: GET /sap/hana/xs/lm/xsts/ping.xsjs
DEBUG:root:Opening http://boschs4hana:8010/sap/hana/xs/lm/xsts/ping.xsjs?HDBALM_VERSION=1.1.11
Http error: Forbidden
DEBUG:root:Finished with return code 1

解决过程：

Can you please set parameter webdispatcher.ini [profile] wdisp/system_auto_configuration to true?

Can you please run this statement from both, the SYSTEMDB and the tenant? 

select * from m_inifile_contents where file_name = 'xsengine.ini' and section = 'public_urls'; 

Also, please run this other statement from the SYSTEMDB: 

select key, value, layer_name from sys.m_inifile_contents where file_name = 'webdispatcher.ini' and section = 'profile' and key like 'wdisp/system%'; 

And run this one from the tenant only: 

select *  

So I will be expecting 4 result sets in total. Please export the results in .csv format (you can right-click the result set in the Studio and select "Export Result...") and attach them to the incident.

4. Setting Up a Technical User

 https://blogs.sap.com/2016/03/03/a-guide-to-the-technical-user-authorization-mechanism-in-sap-hana-rules-framework-10-sps-07/

1. In SAP HANA studio, create a technical user with the name: HRF_TECH_USER

CREATE USER HRF_TECH_USER PASSWORD <password> NO FORCE_FIRST_PASSWORD_CHANGE;
ALTER USER HRF_TECH_USER DISABLE PASSWORD LIFETIME;

        2. If you are consuming rule services via REST, XSJS Lib function call, or the SAP HRF web application, the HRF_TECH_USER must be granted the following:

      3.As a result of the new user authorization mechanism provided in SAP HANA Rules Framework 1.0 SPS 07, when upgrading from SAP HANA Rules Framework 1.0 SPS 06 or before to this release, you must update the existing permissions of business users that perform editing tasks (create, update, or delete) to the various HRF resources (rules, rule services, vocabularies, and rule templates) so that they include the necessary privileges that permit the required CUD operations. 

5.Configuring SAP HANA Rules Framework

1. Ensure that the sap.hrf.role.model::HrfAdmin role is assigned to your SAP HANA user in SAP HANA studio.
   1. In the navigation tree of the new system, go to Security  Users.
   2. Right-click the user name in the navigation tree, and then select Open.
   3. In the Granted Roles tab, click  (Add).
   4. Search for the role sap.hrf.role.model::HrfAdmin and click OK.
   5. Click File  Save.

           2.Open a REST client in your application for interacting with HTTP APIs, for e.g., Postman. Enter the following request in the REST client to run the configuration script.

{
  "timeZoneCode": "<ID>",
  "webApplicationConfigurations": "default",
  "runtimeSchema": "<SCHEMA_NAME>"
}