17.10 - Example: Create Signed Certificates and Private Keys on All Nodes Using ZIP Archives - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Advanced SQL Engine
Teradata Database
Release Number
Release Date
July 2021
Content Type
Publication ID
English (United States)
  1. Generate CSRs:
    # tlsutil -c -z mydb.example.com

    Your result will be similar to the following:

    CSRs have been generated for all nodes (4 generated):
    CSRs have been archived in:
  2. The customer signs the certificates using a customer-defined process.
  3. Obtain the signed certificates. Run "tar" to archive them and place the archive here: /opt/teradata/tdat/tgtw/site/tls/tmpdir/zipfiles/all_certs.tgz
  4. Install the signed certificates and private keys:
    # tlsutil -i -z


    Signed certificate and private key installed on 4 node(s).
  5. Remove the temporary files created from previous steps on each node.
    # tlsutil -r
  6. Optional. Test that the certificates are valid:
    # tlsutil -t