Configure TLS for Teradata Notification Service on Windows | Teradata Viewpoint - 16.20 - 16.50 - Configuring TLS for Teradata Notification Service on Windows - Teradata Viewpoint

Teradata® Viewpoint Installation, Configuration, and Upgrade Guide for Customers

Product
Teradata Viewpoint
Release Number
16.20
16.50
Release Date
July 2021
Content Type
Administration
Configuration
Installation
Publication ID
B035-2207-071K
Language
English (United States)
Perform the following steps after installing or upgrading Teradata Viewpoint and the Teradata Notification Service to version 16.20.23.02 or later when the Teradata Notification Service resides on a Windows system.
Java Runtime Environment 8 is required.
  1. Create the drive:\etc\opt\teradata\viewpoint and drive: \etc\opt\teradata\postgres directories using the following commands:
    mkdir drive:\etc\opt\teradata\viewpoint
    mkdir drive:\etc\opt\teradata\postgres
  2. Depending on your version, do one of the following:
    Version Action
    16.20.23.02 From the Viewpoint server, copy /etc/opt/teradata/viewpoint/tdactivemq.crt to the drive:\etc\opt\teradata\viewpoint directory on the Teradata Notification Service server.
    16.20.23.03 From the Viewpoint server, copy /etc/opt/teradata/viewpoint/tdactivemq.crt to the drive:\etc\opt\teradata\viewpoint directory on the Teradata Notification Service server.
    16.20.23.04 or later From the Viewpoint server, copy /etc/opt/teradata/tdactivemq/tdactivemq.crt to the drive:\etc\opt\teradata\viewpoint directory on the Teradata Notification Service server.
  3. From the Viewpoint server, copy /etc/opt/teradata/postgres/postgres.crt to the drive:\etc\opt\teradata\postgres directory on the Teradata Notification Service server.
  4. On the Teradata Notification Service server, import the ActiveMQ certificate into the truststore using the following command:
    "%JAVA_HOME%"\bin\keytool -import -alias broker -keystore
    drive:\etc\opt\teradata\viewpoint\certs -file
    drive:\etc\opt\teradata\viewpoint\tdactivemq.crt -storepass viewpoint -noprompt
  5. On the Teradata Notification Service server, import the Postgres certificate into the truststore using the following command:
    "%JAVA_HOME%"\bin\keytool -import -alias postgres -keystore
    drive:\etc\opt\teradata\viewpoint\certs -file
    drive:\etc\opt\teradata\postgres\postgres.crt -storepass viewpoint -noprompt
  6. [Viewpoint 16.20.23.08 and later] From the Viewpoint server, copy the values db.password.key and cam.db.password from /etc/opt/teradata/viewpoint/db.properties to the /etc/opt/teradata/cam/cam.properties file on the Teradata Notification Service server.
  7. [Viewpoint 16.50.04.00 and later] From the Viewpoint server, copy the values activemq.password from /opt/teradata/tdactivemq/config/tdactivemq-credentials.properties to the /etc/opt/teradata/cam/cam.properties file on the Teradata Notification Service server.
  8. [Viewpoint 16.50.06.00 and later] If the jdk version on Teradata Notification Service server is >= 1.8.0_291 and the Viewpoint server has OS SLES11:
    1. Open file %JAVA_HOME%\jre\lib\security\java.security
    2. Search for jdk.tls.disabledAlgorithms=
    3. Remove TLSv1, TLSv1.1
    4. Save
  9. Restart the Teradata Notification Service using the Services Administration tool.