Migrating the SSL certificate for Data Gate

After updating the certificate for IBM Cloud Pak for Data or upgrading Cloud Pak for Data components that involve a certificate change, you must migrate the secure sockets layer (SSL) certificate so that Data Gate can use the new Cloud Pak for Data certificate.

Procedure

  1. Follow the process to update the certificate for your Db2 instance. For more information, see Updating the Db2 SSL certificate after the Cloud Pak for Data self-signed certificate is updated.
  2. Update the certificate for Data Gate.
    1. Log in to your Cloud Pak for Data system by using the oc login command.
    2. Identify the name of your Data Gate instance by running the following command:
      oc get po|grep data-gate
      The output is similar to the result of the following example:
      dg-1606988438625454-data-gate-9cbc97c4-bf9gf   5/5   Running: 0
    1. Change to the location of your Data Gate instance and update the certificate.
      1. Start the Data Gate server pod of your instance, for example:
        oc exec -it  dg-1606988438625454-data-gate-9cbc97c4-bf9gf -c data-gate-server /bin/bash
      2. Run the following script as shown:
        /opt/ibm/dwa/bin/migration/refresh-dg-certificate-using-new-cp4d-certificate.sh
    2. Delete the Data Gate server pod and wait until it has restarted.
      In accordance with the previous example:
      oc delete pod dg-1606988438625454-data-gate-9cbc97c4-bf9gf