Teradata VantageCloud Lake | Third Party Applications | Installing Protegrity - Install Protegrity for VantageCloud Lake - Teradata VantageCloud Lake

Lake - Configure and Manage Your Environment and Organization
Deployment
VantageCloud
Edition
Lake
Product
Teradata VantageCloud Lake
Release Number
Publication Date
February 2025
Publication ID
B700-4600-007K
ft:locale
en-US
ft:lastEdition
2025-10-24
dita:mapPath
erj1683672627920.ditamap
dita:ditavalPath
pny1626732985837.ditaval
ft:sourceId
dita
dita:id
erj1683672627920

This section outlines the steps for enabling Protegrity in VantageCloud Lake Console. As an administrator of your organization’s VantageCloud Lake environment, you can install Protegrity for VantageCloud Lake.

  1. Upload ESA Server Certificate to VantageCloud Lake
    1. From the User Defined Functions page, select Third Party Applications.
    2. Under Available Partner Solutions, select Protegrity.
    3. From Configure Partner Solution screen, fill out the form.
      Option Description
      License Agreement Select the checkbox.
      Environment Select the environment in which you want to enable Protegrity
      Availability Zone ID Displays the availability zone ID of the selected environment. Make sure that you already configured PrivateLink Service for this availability zone.
      IAM Role Displays Amazon Resource Name (ARN) of the IAM role. Make sure that you allowed principals for the displayed ARN.
      Server certificate common name The Server Certificate Common Name as available under the Settings > Network > Manage Certificates page of your ESA server.

      In VantageCloud Lake Console, go to Configure Partner Solution page, select Browse and upload the Root Certificate of the ESA server. You can download the root certificate using the command: curl -k -u <admin_username> -o esacerts.tar --connect-timeout 60 https://{esa_ip}:8443/dps/v1/deployment/certificates

      Optionally, you can delete and upload another file if the certificate changes.
      Protegrity version Select the Protegrity version that is compatible with VantageCloud Lake based on your ESA Server installed version.
      ESA Admin username The ESA Server administrator username with permission to download the certificate.
      ESA Admin password Password for the ESA Server administrator.
      VPCE Service Name Select the VPC Endpoint Service Name that was created in the previous section.
      Install Database Target The target database in which you want to install the Protegrity UDFs.
      Database User The target Database username. The Database user must have permissions to CREATE FUNCTION, DROP FUNCTION and ALTER FUNCTION on the target Database.
    4. Select Install. This sends a connection request to the AWS PrivateLink Service. You can follow the progress in the VantageCloud Lake Console from User Defined Functions page under Third Party Applications.
      • If an error occurs, the Status column displays the error details. Contact https://support.teradata.com if the error persists.
      • If you want to stop the installation, select Cancel Installation from the vertical ellipsis.
  2. Accepting Endpoint Connection Request
    The VantageCloud Lake sends a connection request to the VPC Endpoint Service that you specified in the previous step. You must accept the connection request from Amazon VPC Console and the status must transition from Pending to Available.

    See Amazon documentation for Accept or reject connection requests.

  3. Continue Configuration
    1. From Third Party Applications page, select your Environment that is in Step 1 complete, ready to proceed to step2 status.
    2. Select the vertical ellipses corresponding to your environment, then select Continue Configuration.
    You must select Continue Configuration even if you have enabled auto accept for your VPC Endpoint service.
  4. Verify the Installation
    1. Once installation is complete, the state of your environment transitions to Installed. You can verify that the UDFs are created in the target Database.