Teradata Fabric Manager supports connectivity over TLS version 1.2 and later.
You can configure the supported TLS version by modifying the value of qgm.security.enabled_protocols in the tdqgm.properties file on each Teradata Fabric Manager. The default value is TLSv1.2,TLSv1.3. This requires a restart on each Teradata Fabric Manager.
As of Teradata Fabric 2.15, fabric processes communicate using TLS 1.2+:
- All data is encrypted by default and each fabric process generates a public/private key pair used for mutual authentication with other fabric processes
- The private key is maintained in memory and the public key is sent and distributed by Teradata Fabric Manager
- Keys are rotated once a week