Using Credential Stores

Setting up Credential Store#

Replicant is capable of consuming credential information from a credential store. This page describes the necessary steps for creating a credential store.

Let’s take an example ofTeradata->Snowflake pipeline. Let’s assume that you need to specify a URL to connect to Teradata and specify username/password to connect to Snowflake. For these requirements, you can create the keystore and encrypted keys by executing the following commands:

echo"<TD_URL>" | keytool -importpass -keystore <keystore_file_name>.jks-storetype pkcs12 -storepass <License_UUID> -alias <key-prefix>url -keypass<License_UUID> -noprompt

echo"<Snowflake_Username>" | keytool -importpass -keystore<keystore_file_name>.jks -storetype pkcs12 -storepass <License_UUID> -alias<key-prefix>username -keypass <License_UUID> -noprompt

echo"<Snowflake_Password>" | keytool -importpass -keystore<keystore_file_name>.jks -storetype pkcs12 -storepass <License_UUID> -alias<key-prefix>password -keypass <License_UUID> -noprompt

You can verify whether they have been saved in the keystore successfully:

keytool -keystore <keystore_file_name>jks -listEnter keystore password:Keystore type: PKCS12Keystore provider: SUN

The output should confirm that the keystore contains 3 entries:

<key-prefix>password, 10-Apr-2020, SecretKeyEntry,<key-prefix>username, 10-Apr-2020, SecretKeyEntry,<key-prefix>url, 10-Apr-2020, SecretKeyEntry,

Once the keystore has been set up, you must specify the details of the keystore inReplicant’s connection cofiguration file, includingtype,path andkey-prefix.