Each Teradata Fabric Manager instance generates an SSL certificate for secured communication between itself and all other clients such as:
- Additional Teradata Fabric Manager instances in the same cluster
- Data source nodes in a system
- Viewpoint
- Browser to Teradata Fabric Manager REST API documentation
- REST clients
External access to port 9443 is allowed for Viewpoint, Swagger UI access, and REST clients. The SSL certificate for port 9443 is customizable. Certificates used by ports other than 9443 are intended for internal Teradata Fabric traffic only and cannot be customized. These certificates are generated during Teradata Fabric installation and are provided to each Teradata Fabric component during deployment to authenticate that communication is with a trusted Teradata Fabric service. Rotation of the certificates can be performed on a periodic basis, see Certificate Authority Rotation. For more information, see Installing/Uninstalling a Custom Server Certificate.
When a data source node is added to a data source system in Teradata Fabric, a Teradata Fabric Manager instance gives the node an SSL certificate during node software installation. The SSL certificate, which is signed by the root CA, allows the data source node to verify that communication is with a trusted Teradata Fabric Manager instance.
All communication between the Teradata Fabric Manager instances and data source nodes within the fabric use HTTPS over port 9444.