Help Center/ Cloud Data Migration/ User Guide/ Tutorials/ Configuring SSL Authentication for the DM Data Source
Updated on 2026-07-29 GMT+08:00
View PDF
Share

Configuring SSL Authentication for the DM Data Source

Overview

Dameng (DM) databases support SSL encryption at the transport layer. It can encrypt the data transmitted between the client and server to ensure security. This section describes how to configure an SSL connection to a Dameng database in CDM of Huawei Cloud DataArts Studio to encrypt and protect data transmission.

Scenario

If SSL encrypted communication is enabled for a Dameng database, CDM must use SSL encryption to access the database.

Prerequisites

  • The SSL environment has been configured for the Dameng database server.
  • You have obtained the .keystore file for Dameng client authentication and the .keystore password.
  • A CDM cluster can communicate with the Dameng database.
  • You have obtained the JDBC driver file of the Dameng database.

Notes and Constraints

The SSL encryption authentication mode may vary depending on the DM version. This document uses the standard SSL authentication mode provided by DM8.

SSL Configuration for the Dameng Database

The SSL encrypted communication of Dameng databases is controlled by the ENABLE_ENCRYPT parameter in the DM.INI configuration file. The value of this parameter indicates the SSL working mode.

Table 1 Mode description

Parameter Value

Mode

Certificate Requirement

0

No encryption or authentication

No certificates are required.

1

SSL authentication and encryption (two-way authentication + encryption)

Certificates are required on both the server and client.

2

SSL authentication only (two-way authentication, with no encryption)

Certificates are required on both the server and client.

Preparing for Client Authentication

  1. Obtain the certificate file.

    Obtain the .keystore client certificate file from the SSL key storage path of the client corresponding to the Dameng database server.

    Figure 1 Obtaining the client certificate file
    • The SSL client authentication of DM uses user isolation, that is, the paths of users are isolated from each other.
    • The .keystore file is hidden. After the file is generated, run the ls -a command to view it.
  2. Obtain the DM driver stored on the server.

    Some DM drivers may support SSL authentication, while others may not. You need to obtain the required driver from the DM server.

    Figure 2 Obtaining the required driver

Configuring an SSL Connection to a Dameng Database

  1. Upload the JDBC driver by referring to Uploading a CDM Link Driver.

    The driver may need to be updated for the SSL connection to the Dameng database. To update the driver, perform the following steps:

    1. Replace the DM driver on the Driver Management page.
      Figure 3 Uploading a driver
    2. On the Cluster Management page, restart the CDM cluster for the driver to take effect.
      Figure 4 Restarting the CDM Cluster
  2. Upload the certificate file.

    On the Links page, click Manage Certificates. On the displayed page, click Upload Certificate and upload the certificate file.

    1. Change Certificate Name to DM user.
    2. Select SSL certificate file for Certificate File Type.
    3. Add the .keystore file.
      Figure 5 Uploading the certificate

      For DM SSL authentication, the file name can only be .keystore.

  3. Create a DM data connection by referring to Creating a Link Between CDM and a Data Source.
    1. Set SSL Encryption to Yes.
    2. Select the .keystore certificate you uploaded on the Manage Certificates page.
    3. Enter the certificate password.
      Figure 6 Creating a DM data connection
Parent topic: Tutorials