doc-exports/docs/ddm/umn/ddm_06_0041.html
Ru, Li Yi e8e108284a ddm_umn_20240425
Reviewed-by: Wagner, Fabian <fabian.wagner@t-systems.com>
Co-authored-by: Ru, Li Yi <liyiru7@huawei.com>
Co-committed-by: Ru, Li Yi <liyiru7@huawei.com>
2024-10-22 14:19:48 +00:00

5.3 KiB

Configuring SSL

Secure Socket Layer (SSL) is an encryption-based Internet security protocol for establishing secure links between a server and a client. It provides privacy, authentication, and integrity to Internet communications. SSL:

  • Authenticates users and servers, ensuring that data is sent to the correct clients and servers.
  • Encrypts data to prevent it from being intercepted during transfer.
  • Ensures data integrity during transmission

SSL is disabled for new DDM instances by default. Enabling SSL increases CPU usage and makes it take a little longer to establish a network connection, so you are advised to evaluate these impacts on service performance before enabling SSL.

You can connect to a DDM schema through a client using an SSL or non-SSL connection.

  • If SSL is enabled, you can connect to a DDM schema using an SSL or non-SSL connection. SSL encrypts connections to the DB instance, making in-transit data more secure.
  • If SSL is disabled, you can only connect to a DDM schema using a non-SSL connection.

    Enabling or disabling SSL will cause instances to reboot and interrupt connections. Exercise caution when performing this operation.

Enabling SSL

  1. On the Instances page, locate the instance that you want to connect to and click its name.
  2. On the Basic Information page, at the Instance Information area, click in the SSL field.
  3. In the displayed dialog box, click Yes.
  4. On the Basic Information page, view the results. Click next to the SSL field to download the CA certificate.

    You can use SSL to connect to a schema. For details, see Step 4: Log In to the DDM Schema.

Disabling SSL

  1. On the Instances page, locate the instance that you want to connect to and click its name.
  2. On the Basic Information page, at the Instance Information area, click in the SSL field.
  3. In the displayed dialog box, click Yes.
  4. On the Basic Information page, view the results.