DataIQ 2.2 Admin Guide

Add a TLS certificate to use LDAPS

To increase security, DataIQ can authenticate Active Directory (AD) users by using Secure Lightweight Directory Access Protocol (LDAPS). LDAPS is preferred over LDAP because LDAPS does not send sensitive data unencrypted through the network. To use LDAPS with DataIQ, you need a TLS certificate, with TLS version 1.2 or greater.

1. Copy the public TLS certificate from the AD server to the DataIQ server, for example, to /opt/dataiq/bin/ldapwin.cer.
2. Add the TLS certificate to DataIQ using the certificate filename. Example:

   sh svc_dataiq_add_cert_for_ldap_to_truststore.sh ldapwin.cer

   When the script has run successfully, the output shows Keycloak is restarted. Example:

   statefulset.apps/keycloak restarted

3. After a few minutes, verify that the pod, keycloak-0 , is running. This pod allows DataIQ to use the authentication provider over LDAPS.

   dataiq status