Rotate Certificates | Teradata AppCenter - Rotating Certificates (tls.key, tls.crt) - Teradata AppCenter

Teradata® AppCenter Customer Installation and Upgrade Guide for vSphere

Product
Teradata AppCenter
Release Number
1.10
Published
June 2020
Language
English (United States)
Last Update
2020-07-02
dita:mapPath
ixs1586886570933.ditamap
dita:ditavalPath
ft:empty
dita:id
B035-1117
lifecycle
previous
Product Category
Analytical Ecosystem
If a browser certificate is close to expiring or you want to host AppCenter on a different domain, you need to rotate the certificate.

From the client machine, do the following:

  1. Set the APPCTL_DOMAIN domain to match the one in certificates:
    $ export APPCTL_DOMAIN=appcenter.example.com
  2. Rename the certificate and key to tls.crt and tls.key.
  3. Verify the certificates. Check for the DNS name, it should match the APPCTL_DOMAIN:
    $ openssl x509 -in tls.crt -text -noout
  4. Copy the certificates to $APPCTL_HOME (default - ~/.appctl/ on the client machine).
  5. Upgrade platform services:
    $ appctl platform install --namespace td-platform --name platform platform-1.10.0+build.21.149baa2.tgz -f platform-override.yaml --reset-values
  6. Upgrade application services:
    $ appctl platform install --namespace appcenter --name appcenter appcenter-1.10.0+build.21.149baa2.tgz -f appcenter-override.yaml --reset-values
  7. Restart ambassador:
    $ kubectl delete pod -n td-platform -l component=ambassador