Snowflake Data Cloud Connector

Back Next

Generate the public and private key

Before you generate the public and private key for key pair authentication, you need to have the security admin role or higher in Snowflake.

From the OpenSSL command line, generate a private key:

To generate a decrypted private key, run the following command, and provide a passphrase when prompted:

 $ openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt

To generate an encrypted private key, run the following command, and provide a passphrase when prompted:

 $ openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8

The passphrase is used to encrypt the private key file while connecting to Snowflake.

Generate the public key. Run the following command and specify the encrypted private key located in the file, for example,

rsa_key.p8

openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub

Copy the public and private key files in a directory that the Secure Agent can access.

For example,

C:\Program Files\Informatica Cloud Secure Agent\apps\Data_Integration_Server\data\snowflake\rsa_key.p8

You require the path details when you configure the Snowflake connection.

In Snowflake, assign the public key to the Snowflake user using the ALTER USER command:

alter user <user> set rsa_public_key='<content of the public key 
after removing the header and footer lines>';

For example,

alter user jsmith set rsa_public_key='MIIXBIjABCdef...';

For more information about configuring a key pair authentication for Snowflake, see the Snowflake documentation.