If the directory server supports only TLS, then you must obtain a copy of the certificates directly from the site security administrator and place the copies in TDGSS site/ssl/cacerts directory on all Teradata Vantage nodes.
Be sure to retain the BEGIN CERTIFICATE and END CERTIFICATE statements, which identify the beginning and end of each certificate.