Amazon Redshift Connector Best Practices

Back Next

SSL Configuration on Cloud

On cloud, you must configure the Secure Agent to support an SSL connection to Amazon Redshift.

Perform the following step to configure the Secure Agent:

Download the Amazon Redshift certificate from the following location:

Run the following command to add the certificate file to the key store:

${JAVA_HOME}/bin/keytool - keystore {JAVA_HOME}/lib/security/cacerts -import -alias <string_value> -file<certificate_filepath>

On the Data Integration, click

Configure

Runtime Environment

In the

Actions

tab, click

Edit

The

Edit Secure Agent

page appears.

In the

System Configuration Details

section, set the value of the

Type

DTM

Click

Edit Agent Configuration

icon and add the following value for

JVMOption1

Djavax.net.ssl.trustStore=<keystore_name>

Click

Edit Agent Configuration

icon and add the following value for

JVMOption2

Djavax.net.ssl.trustStorePassword=<password>

Add the following parameter in the

JDBC URL

that you specify in the Amazon Redshift connection property:

ssl=true

For example,

jdbc:redshift://mycluster.xyz789.us-west- 2.redshuft.amazonaws.com:5439/dev?ssl=true