After updating the certificate for IBM Cloud Pak for Data or upgrading Cloud Pak for Data components that involve a certificate change, you
must migrate the secure sockets layer (SSL) certificate so that Data Gate can use the new Cloud Pak for Data certificate.
Procedure
- Follow the process to update the certificate for your Db2 instance. For more information, see Updating the Db2 SSL certificate after the Cloud Pak for Data self-signed certificate is updated.
- Update the certificate for Data Gate.
- Log in to your Cloud Pak for Data system by
using the oc login command.
- Identify the name of your Data Gate instance by running the following command:
The output is similar to the result of the following
example:
dg-1606988438625454-data-gate-9cbc97c4-bf9gf 5/5 Running: 0
- Change to the location of your Data Gate instance and update the certificate.
- Start the Data Gate server pod of your
instance, for
example:
oc exec -it dg-1606988438625454-data-gate-9cbc97c4-bf9gf -c data-gate-server /bin/bash
- Run the following script as
shown:
/opt/ibm/dwa/bin/migration/refresh-dg-certificate-using-new-cp4d-certificate.sh
- Delete the Data Gate server pod
and wait until it has restarted.
In accordance with the previous
example:
oc delete pod dg-1606988438625454-data-gate-9cbc97c4-bf9gf