Install Certificate from Certificate Signing Request | Teradata Viewpoint - 17.10 - Installing a Certificate from a Certificate Signing Request - Teradata Viewpoint - Teradata Workload Management

Teradata® Viewpoint User Guide

Product
Teradata Viewpoint
Teradata Workload Management
Release Number
17.10
Release Date
October 2021
Content Type
User Guide
Publication ID
B035-2206-101K
Language
English (United States)
A certificate signing request (CSR) is used to obtain a signed certificate for the server. After the request is created, the certificate signing request must be submitted to a CA to be signed. After the request is signed, the resulting signed certificate can be installed.
For Viewpoint 16.20.00.03 and later, a self-signed certificate is visible after you click HTTPs Config.
  1. From the Setup list, select HTTPS Config.
  2. Under Certificate Signing Request, do the following under Step 1:
    1. Select Create File.
    2. Enter the following information:
      Field Description
      Common Name Domain name
      Subject Alternative Name [Optional] IP address or DNS name. Select "" to see the required format.
      Organizational Unit Business unit
      Organization Company name
      City or Locality City or locality of the organization
      State or Province State or province of the organization
      Country Country code where the organization is located
      Email [Optional] Email address of the requester
    3. Click Create.
    4. If a certificate was previously installed, select Replace.
    A csr file is created and the file name appears as a link under Step 2.
  3. Under Step 2, do one of the following:
    Option Description
    Copy
    1. Select the link.
    2. View the contents of the CSR in the box or copy it to the Clipboard for further use.
    3. Select Close.
    View CSR contents before downloading
    1. Select the link.
    2. Select Download.

    The file is saved to your download area or to a location that you specify, depending on the browser settings.

    Download without viewing CSR contents
    1. Select "".

      The file is saved to your browser's download area.

  4. Outside of Teradata Viewpoint, do the following:
    1. Send the CSR to a CA for signing.
    2. After the request is signed by the CA, get the certificate bundle to your local system and extract its contents, namely ServerCertificate.crt, Intermediate.crt and Root.crt.
    3. Generate a PKCS#7 formatted file through the command “openssl crl2pkcs7 -nocrl -certfile /tmp/ServerCertificate.crt -certfile /tmp/Intermediate.crt -certfile /tmp/Root.crt -out /tmp/final.p7b” using ServerCertificate.crt, Intermediate.crt and Root.crt obtained from the CA
  5. Under Step 3, do the following:
    1. Select Install.
    2. In the Certificate box, select Choose File and browse to the saved final.p7b file obtained from step 4.c
  6. Select Install.
The name of the new certificate appears in the Certificate box.

HTTPS connections immediately start using the new certificate and no restart of the Viewpoint server is required.