KB483924: How to Update AWS RDS Certificate for MicroStrategy Cloud Platform from 2015 to 2019

If your AWS Enterprise or Department environment is deploy on Strategy Cloud Platform, you can use the following instructions to update your RDS certificate from rds-ca-2015 to rds-ca-2019. 
If you are using Strategy 2020, you must perform two steps to update your RDS certificate to 2019: (1) update the RDS database instance certificate and (2) update the certificates of the Platform Analytics Consumer Service and the Collaboration Service. If you are using a version of Strategy earlier than 2020, you only need to update the RDS database instance certificate.
 

How to Update your RDS Database Instance Certificate

• Sign in to your AWS Management Console and open the Amazon RDS Console.
• From the navigation pane, choose Database.
• Select a database instance and choose Modify.
  For environments 2020 or later, the metadata database name is

  env-{env-id}-postgres

  . You may also have another database name called e

  nv-{env-id}-mysql

  if you selected Strategy Identity when provisioning the environment.
  For environments earlier than 2020, the database name is

  env-{env-id}-mysql.

  
  
• In the Network & Security panel, choose rds-ca-2019.
  

• Click Continue.
• Click Modify Database Instance to submit the change.
  or
  To apply your changes immediately, click Apply immediately. The database will automatically reboot by AWS.
  

Update the Platform Analytics Consumer Service and Collaboration Service Certificates

Note: You only need to perform these steps if you are using a Strategy environment version 2020 or later.

How to Update the Collaboration Service Certificate

For Enterprise environments, you must perform the following steps on two platform instances. For
Department environments, you only need to perform these steps on your platform instance.
 

• Use SSH to connect to platform instance 1.
• Download the AWS root certificate file.
• Save the file to

  /opt/mstr/MicroStrategy/rds-ca-2019-root.pem.

• Open the Collaboration Server Config ile.
  By default, this is located in

  /opt/mstr/MicroStrategy/install/CollaborationServer/config.json.

  
  
• Locate the section

  DataSource

  . Set the following parameter:
  

  sslRootCertFile=<PATH>/rds-ca-2019-root.pem

  
  
  

• Restart the Collaboration Server from the AWS Console.
  

How to Update the Platform Analytics Consumer Certificate

For Enterprise environments, you must perform the following steps on platform instance 1. For
Department environments, you only need to perform these steps on your platform instance.
 

• Use SSH to connect to platform instance 1.
• Download the AWS root certificate file.
• Save the file to

  /opt/mstr/MicroStrategy/rds-ca-2019-root.pem.

• Open the PAConsumerConfig.yaml file.
  By default, this is located in

  /opt/mstr/PlatformAnalytics/conf/PAConsumerConfig.yaml.

  
  
• Locate the section

  pgWarehouseDbConnection

  . Set the following parameters:
  

  pgWhSSLmode=verify-full

  
  

  pgWhSSLrootcert=<PATH>/rds-ca-2019-root.pem

  
  
  

• Restart the Platform Analytics Consumer from the AWS Console.