TDGSS VerifyDHKey Property | Teradata Vantage - VerifyDHKey - Advanced SQL Engine - Teradata Database

Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantage™

This property indicates whether the mechanisms requests that the system perform an integrity check to verify that the DH Key is the same for both initiator and acceptor.

Default Property Value

This property is preset to no for all supporting mechanisms, indicating that the system does not verify the integrity of the DH Key. This setting minimizes the effect of message encryption on system performance.

Editing Guidelines

  • To provide the user with early notification of whether or not the encryption is successful, you can set this property to yes for supported mechanisms. A yes setting results in a modest performance degradation of the encryption sequence, because the initiator and acceptor must exchange an extra message.
  • Editing this property has meaning only for the client TdgssUserConfigFile.xml.
  • Teradata recommends that you use the default “no” setting.