If you want to switch from TCP to SSL, you need to follow the steps in Enabling SSL - Setting Up Self-Signed Keys and Certificates in your installation guide. See Teradata® DSA - DSU Installation, Configuration, and Upgrade Guide, Teradata® DSA - DSE for Veritas NetBackup Installation, Configuration, and Upgrade Guide, or Teradata® DSA - DSE for IBM Spectrum Protect Installation, Configuration, and Upgrade Guide.
- Remove the DSC Server using the BAR Setup portlet.
- To toggle SSL for each client component (DSC, DSARest, BARCmdline, and ClientHandler), run the toggle script on each client../ssl_jms_toggle.sh is located in each client's installed directory:
- $DSA_DSC_ROOT
- $BARCMDLINE_ROOT
- $CLIENTHANDLER_ROOT
Syntax: ssl_jms_toggle.sh [ DSC | DSARest | BARCmdline | ClientHandler ] [ tcp | ssl ] [ 61616 | 61617 ]For example: ssl_jms_toggle.sh DSC ssl 61617For ClientHandler the following is true:- The script prompts you for the SSL keystore password. This is the client's keystore password.Important: If DSARest web service is https, the SSL keystore password must match the DSARest web service keystore password.
If you want to switch from TCP to SSL, you need to follow the steps in Enabling SSL - Setting Up Self-Signed Keys and Certificates in your installation guide. See Teradata® DSA - DSU Installation, Configuration, and Upgrade Guide, Teradata® DSA - DSE for Veritas NetBackup Installation, Configuration, and Upgrade Guide, or Teradata® DSA - DSE for IBM Spectrum Protect Installation, Configuration, and Upgrade Guide.
- If clienthandler.properties contains multiple brokers, the script asks if you want to use the same port number for all brokers.
- y - All port numbers are changed to the number listed in the command
- n - Port numbers are left as is. To change any broker port numbers, you must change them in broker.list in clienthandler.properties.
- Add the DSC server using the BAR Setup portlet (see Enabling or Adding a DSC Server), select SSL or TCP as the Broker Connectivity and Broker Port.
- From the BAR Setup portlet, select your DSC Server, and click Systems and Nodes under Categories.
- Select the system name under Systems, then System Details under Setup.
- To enable SSL, under SSL Communication:
- Check the Enable SSL over JMS Communication box.
- Enter the keystore password in the Truststore Password box.
- Click Apply, then follow on-screen instructions.
- To configure TCP, under SSL Communication:
- Clear the Enable SSL over JMS Communication box.
- Remove the keystore password from the Truststore Password box.
- Click Apply, then follow on-screen instructions.
- Restart the DSMain process on DSC server for the repository database cnsterm 6:
- Stop bardsmain:cnsterm 6start bardsmain -s
- Start bardsmain:cnsterm 6start bardsmain
- Stop bardsmain: