KB484210: Connect to Denodo database using the JDBC driver with SSL enabled

By default, Strategy uses the PostgreSQL driver to connect to the Denodo database. However, Strategy allows you to use the Denodo native JDBC driver to connect to the Denodo database, even though this driver is not shipped with Strategy products. 
Proceed with the following steps to configure the Denodo native JDBC to connect to the Denodo database with SSL encryption enabled:

• Prior to starting the deployment of the Denodo native JDBC driver, download it from here. 
• Upload the JDBC driver file to the Strategy JDBC driver folder. 
• Copy the Denodo server self-assigned public key file to the machine with the Intelligence Server running, or Workstation.
  If you do not have the file, see this page to generate the key pair and export the self-signed public key.
  The following lists the default paths of the Strategy JDBC drivers: 
  
• Intelligence Server on Windows:

  %MSTR_HOME%/JDBC

• Intelligence Server on Linux:

  %MSTR_HOME%/JDBC

• Workstation on Windows:

  %Program Files%/MicroStrategy/Workstation/JDBC

• For Workstation on Mac, it is not required to have the JDBC driver in the same location as the other JDBC drivers. You can place the file anywhere. For more details, see KB250923.
• Import the public key into the Strategy local trust store using the following command:
  

  ./jre/bin/Keytool -importcert -alias denodo-server-self-signed -file denodo_server_public_key.cer -keystore /opt/mstr/MicroStrategy/install/_jre/lib/security/cacerts -storepass "changeit" -noprompt

  
  

• In a Windows platform, the

  keytool.exe

  file can be found in

  C:\Program Files (x86)\Common Files\MicroStrategy\JRE\180_242\Win64\bin.

  
  The default password of the default trust store: changeit
  The file of the trust store can be found in

   /opt/mstr/MicroStrategy/install/_jre/lib/security/cacerts

  . You can search for it in the Strategy installation folder. In a Windows Workstation machine, the path looks like 

  C:\Program Files\MicroStrategy\Workstation\DataServices\180_242\64-bit\lib\security\cacerts

  . In a Windows Intelligence Server machine, the path looks like

  C:\Program Files (x86)\Common Files\MicroStrategy\JRE\180_242\Win64\lib\security\cacerts.

  
  
• Create a DB instance in Developer or Workstation using the JDBC connection string with the following SSL parameter:
  

  JDBC;DRIVER={com.denodo.vdb.jdbcdriver.VDBJDBCDriver};URL={jdbc:vdb Denodo_Instance_NAME_OR_IP_ADDRESS:9999/dbname?ssl=true};