Rotate Certificates | Teradata AppCenter - Rotating Certificates (tls.key, tls.crt) - Teradata AppCenter

Teradata® AppCenter Customer Installation and Upgrade Guide for vSphere

Product
Teradata AppCenter
Release Number
2.0
Published
September 2020
Language
English (United States)
Last Update
2020-09-28
dita:mapPath
bud1587493859355.ditamap
dita:ditavalPath
ft:empty
dita:id
B035-1117
Product Category
Analytical Ecosystem
If a browser certificate is close to expiring or you want to host AppCenter on a different domain, you need to rotate the certificate.

From the client machine, do the following:

  1. Set the APPCTL_DOMAIN domain to match the one in certificates:
    $ export APPCTL_DOMAIN=appcenter.example.com
  2. Rename the certificate and key to tls.crt and tls.key.
  3. Verify the certificates. Check for the DNS name, it should match the APPCTL_DOMAIN:
    $ openssl x509 -in tls.crt -text -noout
  4. Copy the certificates to $APPCTL_HOME (default - ~/.appctl/ on the client machine).
  5. Upgrade platform services:
    $ appctl platform install --namespace td-platform --name platform platform-2.0.0+build.34.8c51239.tgz -f platform-override.yaml --reset-values
  6. Upgrade application services:
    $ appctl platform install --namespace appcenter --name appcenter appcenter-2.0.0+build.34.8c51239.tgz -f appcenter-override.yaml --set user-service.keycloakMigrationEnabled=true --reset-values
  7. Restart ambassador:
    $ kubectl delete pod -n td-platform -l component=ambassador